• Atlas (ip2country) — Primary source for ASN, registration country, continent, and BGP prefix data, plus the route-security verdict (RPKI validation against the rpki-client VRP set, and IRR route objects). Also the physical location estimate: the operator’s own geofeed or registry geoloc where one exists, otherwise DB-IP City Lite.
• IP Geolocation by DB-IP — City-level location estimates and place names (DB-IP City Lite, CC BY 4.0).
• Blackbox — Proprietary proxy and VPN likelihood scoring.
• asn.ipinfo.app — Reputation data aggregator: DNSBL checks (45 zones for IPv4, 6 zones for IPv6 — most legacy spam blocklists are IPv4-only), AlienVault OTX threat intel, StopForumSpam, and Shodan InternetDB.
• OpenStreetMap — Geolocation map embed. Coordinates (your browser’s, or the IP-based estimate when the browser gives none) are sent directly from your browser to OSM — they are never routed through our servers.
• ua-parser-js — Server-side User-Agent parsing for browser name, version, OS, and device type.
• RDAP — Whois registry data fetched directly from the five Regional Internet Registries (ARIN, RIPE, APNIC, LACNIC, AFRINIC).

IP reputation data (DNSBL, OTX, StopForumSpam, Shodan) is cached server-side for up to 72 hours. WHOIS and ASN data are cached for up to 7 days. Real-time fields (clock, connection type, browser info) are never cached.

We store only standard web server logs and short-lived data caches (IP details, VPN score, whois). No cookies are set by this service, and no personally identifiable information beyond your IP address is retained. Cloudflare Web Analytics and Real User Measurements (RUM) are loaded at the edge to collect anonymous, aggregate data — page performance, load times, and traffic patterns. No cookies are used and individual visitors are not tracked or fingerprinted. See our full privacy policy and Cloudflare's privacy policy for details.