A Developer's Tour of IP99: Free IP Lookup, pDNS, CT and an MCP Endpoint in One Place
If you've ever needed to answer "where is this IP, and is it acting like a proxy right now?", you've probably used several tools to do it: one for geolocation, another for proxy detection, a third for DNS history. IP99 , built by ThreatHunter, puts these in one place. Some parts are free with no key, and some are enterprise products. I wrote earlier about how IP99's risk score is designed to…
IP99 is a developer-focused tool that combines IP lookup, passive DNS, Certificate Transparency, and phone-number risk analysis into one platform. It offers a free tier with no API key required and some enterprise-level features that are subscription-based. With a single JSON endpoint, users can retrieve risk signals, geolocation data, network properties, and more for an IP address.
The free tier includes risk signals like proxy, VPN, dialup pool, and more, along with a risk score ranging from 0 to 100. Geolocation data is provided for both IPv4 and IPv6 addresses, including continent, country, region, city, latitude/longitude, and time zone. Network properties include the ASN and usage type code. Passive DNS and CT data are also available for free, with a rolling window of recent activity.
Phone-number risk analysis is offered as an enterprise feature, categorizing numbers into six risk profiles. Developers can access the API documentation and MCP endpoint for integration purposes.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
