How is Spur different from traditional IP reputation feeds?
Traditional reputation feeds focus primarily on known malicious activity. Spur focuses on understanding the infrastructure, routing, anonymization technologies, and contextual characteristics behind an IP address, enabling organizations to make more informed decisions even when no prior abuse history exists.
Similar questions
What does Spur do?
Spur provides IP intelligence that helps organizations identify anonymization technologies to make more informed security, fraud prevention, and trust decisions.
What products does Spur offer?
Spur delivers IP intelligence as bulk daily downloads, through API integration into existing security pipelines, and via real-time session enrichment.
What types of organizations use Spur?
Spur is used by security and threat hunting teams, fraud prevention teams, and trust and safety organizations in cybersecurity vendors, software companies, financial services companies, e-commerce platforms, law enforcement agencies, and organizations that need deeper insight into IP-based activity.
What use cases are most common?
Common use cases for Spur intelligence include fraud prevention (account takeover, fraudulent account creation, payment fraud), trust and safety (bot detection, geolocation verification, remote worker fraud), and security investigations (nation-state attack detection, perimeter security).
Can a Spur IP classification be reviewed or corrected?
Yes. Customers who believe a classification is inaccurate can contact Spur for review. Investigations may include validation of infrastructure ownership, routing characteristics, provider relationships, and other relevant signals.
Related guides & explainers
What "Client Proxies" Means in Spur Data
"Client Proxies" in Spur data describes proxy-network activity Spur observed coming from an IP — it does not mean the IP is owned or operated by the listed provider.
Why the Organization Field Isn't Available the Same Way Across Spur's Data Feeds
The Context API's per-IP organization field isn't guaranteed in every data feed. Each feed has a different schema and covers a different slice of IP space, so field availability varies by feed.
Quick Search: Finding an IP, ASN, or Service Tag
Use quick search to jump straight to any IP, ASN or service tag, a Monocle app, or a main area of the app, from anywhere, without navigating through menus.
Understanding Monocle Application Health Status
Each Monocle application shows a health status dot indicating whether it's actively sending traffic. Learn what each color means, how to set each application's health threshold, and what to check if an application goes quiet.