Enrich IPs with location, network and abuse contacts

What this example returns

The dataset’s “IP overview” view shows 17 columns: Input, IP, Country, CC, Region, City, Time zone, ASN, AS name, ISP / organization, BGP prefix, Reverse DNS, Hosting, Provider, Tor exit, Risk, and Risk level. See every output field.

What each setting does

The input this example runs IP, ASN & Subdomain Lookup with. “Try this input” opens it in the console, where you can run it as-is or change any field first.

IP addresses or hostnames ips

8.8.8.8, 1.1.1.1, 185.220.101.1, 2606:4700:4700::1111, 159.89.10.10, 52.95.110.1, 66.249.66.1, 10.0.0.1, scrape.ly, not-an-ip!

IPv4 or IPv6 addresses, one per line. Hostnames such as scrape.ly are resolved to all their IPv4/IPv6 addresses (one row per address). URLs and host:port entries work too (https://example.com/page -> example.com). Duplicates are looked up once.

Network owner & abuse contact (RDAP) includeRdap

Yes

Adds the registry record of the network: name, handle, range, CIDR, type, owner, registration date and abuse e-mail. One request per distinct network, so it is slower on long lists of unrelated addresses.

Default: No → this example uses Yes

Allowed countries (ISO codes) allowedCountries

US

Two-letter country codes such as US or DE. Addresses located elsewhere get outsideAllowedCountries = true and +25 risk points, e.g. to geo-fence sign-ups or payments.

{
  "ips": [
    "8.8.8.8",
    "1.1.1.1",
    "185.220.101.1",
    "2606:4700:4700::1111",
    "159.89.10.10",
    "52.95.110.1",
    "66.249.66.1",
    "10.0.0.1",
    "scrape.ly",
    "not-an-ip!"
  ],
  "includeRdap": true,
  "allowedCountries": [
    "US"
  ]
}

What it costs

You pay for the events the actor reports, such as each result or page it produces. Platform usage is included in the event prices: compute, proxies, browser and storage cost nothing extra.

• IP lookupfrom $0.00225One IP address row: location, time zone, ASN and ISP, BGP prefix, reverse DNS, hosting and Tor flags, risk score and (when on) the registry record. Invalid entries and rows removed by your filters are free.
• Subdomain$0.00065One subdomain row from certificate-transparency logs, with certificate dates and issuers and (when on) its IP address, country and network.

Full pricing

When to use this example

From the IP, ASN & Subdomain Lookup readme:

Other ways to run IP, ASN & Subdomain Lookup

• Find subdomains from certificate logsEvery subdomain two domains put on public certificates, with dates, issuers and the IP, country and network each name resolves to.
• Live subdomains on valid certificatesOnly names on certificates that are still valid and that resolve right now.

All examples of IP, ASN & Subdomain Lookup

About IP, ASN & Subdomain Lookup

Bulk IP lookup: country, city, time zone, ASN and ISP, BGP prefix, reverse DNS, cloud/hosting and Tor flags, registry abuse contacts and a risk score for every IPv4/IPv6 address or hostname. Plus every subdomain of a domain from certificate-transparency logs, resolved to its IP, country and network. No login or API key needed.

Price:

from $2.25 / 1,000 results

Developer:

Querystone

Categories:

Developer tools, Automation

IP, ASN & Subdomain Lookup pageOutput fieldsPricing