AbuseIPDB uses api.abuseipdb.com to get generic information about ipaddr and to see if the ipaddr has been reported as malicious.

BlockList searches the ipaddr in lists.blocklist.de/lists/dnsbl/all.list.

Censys gets generic information from search.censys.io.

CinsScore searches ipaddr in https://cinsscore.com/list/ci-badguys.txt.

DBip gets geolocation from https://db-ip.com/db/download/ip-to-city-lite.

DnsMX performs reverse lookup and consults AbuseIPDB to get domain names fo the ipaddr.

DnsName does a reverse lookup for a given IP address to get its names.

Firehol checks whether the ipaddr is found on blacklist https://iplists.firehol.org/?ipset=firehol_level1.

IPSum checks how many blacklists the ipaddr is found on.

IPtoASN gets info about autonomous system of the ipaddr.

IsOnAWS checks if ipaddr belongs to AWS.

MaxMind gets geolocation data from maxmind.com's GeoLite2-City.mmdb.

OTX counts pulses to find out whether the ipaddr is malicious.

PhishStats checks whether the ipaddr is involved in phishing according to https://phishstats.info/phish_score.csv.

Ping sends five pings (ICMP echo request packets) to the ippaddr and returns the statistics.

SansISC gets info from SANS Internet Storm Center API.

Shodan gets generic information from api.shodan.io.

Tls finds out TLS information by connecting to the ipaddr and TCP port 443.

UrlScan gets data from urlscan.io.

VirusTotal gets generic information and security reputation about the ippaddr from https://www.virustotal.com/api.

some information about the IP address.

both of the above.

whether the IP address is considered malicious.

Funcs contains all available functions for checking IP addresses.

Check is the information gathered about an IP address.

IpInfo is generic information on an IP address.

Func gathers generic and/or security information about an IP address.

Type is the type of a Check.