Detailed IP Data for every address

IP Trust provides comprehensive data on each IP address, including IP Geolocation, ASN, company, abuse contact, VPN, proxy, Tor, privacy relay, hosting and known bots. Access through our API, or using Database Downloads.

The complete IP Trust dataset

The API view shows the full JSON response for a single lookup. The database view lists every field across the downloadable databases, prefixed with the database it belongs to.

JSON Field Description Package
{
"asn": {Find out more →
"number": "AS8075", The Autonomous System Number that announces this IP prefix. Identity
"name": "MICROSOFT-CORP-MSN-AS-BLOCK", The registered name of the AS as listed by the RIR. Identity
"company": "Microsoft Corporation", The legal organisation name that owns the AS. Identity
"country": "US", ISO 3166-1 alpha-2 country code where the AS is registered. Identity
"route": "74.144.0.0/12", The most-specific BGP route prefix that contains this IP. Identity
"rir": "ARIN", The Regional Internet Registry responsible for this address block (e.g. ARIN, RIPE, APNIC). Identity
"domain": "www.microsoft.com", optional Primary domain associated with the AS owner, if available. Identity
"type": "hosting", optionalClassification of the AS, if available. One of: isp, hosting, business, government, education. Identity
"description": "Provides consumer and enterprise software...", optional Human-readable description of the organisation that owns this AS. Identity
"risk": 0.9, optional Numeric risk score for the AS, from 0.0 (very low risk) to 1.0 (very high risk), based on observed threat signals from Friendly Captcha. Only provided when Friendly Captcha has observed enough traffic to make a determination. Identity
"risk_label": "very_high", optional Human-readable risk level: very_low, low, moderate, high, or very_high. Identity
"risk_types": ["request_frequency", "repeated_abuse"] optional List of risk signal categories that contributed to the risk score, if available:
  • confirmed_bot - A significant number of confirmed bot requests have been observed from this AS.
  • suspected_bot - A significant number of suspected bot requests have been observed from this AS.
  • traffic_volume - Larger than expected volumes of traffic against individual websites has been observed from this AS.
  • repeated_abuse - Repeated abuse activity has been observed from this AS, across a number of distinct incidents.
  • targeted_abuse - Targeted abuse activity against specific websites has been observed from this AS.
Identity
}
"company": {
"name": "mawa-solutions GmbH", The legal name of the company or organisation operating at this IP address. Identity
"type": "business", optional Organisation classification: isp, business, hosting, government, education. Identity
"domain": "www.mawa-solutions.com", optional Primary website domain of the company. Identity
"description": "Provides SAP-based time-tracking..." optional Brief description of the company's products or services. Identity
}
"location": {Find out more →
"resolution": "city", Precision of the location data for this IP. One of: city, state, country. Geolocation
"city": "Barcelona", City-level location of the IP address. Geolocation
"state": "Barcelona", State, province, or top-level administrative region. Geolocation
"country": "Spain", Full country name derived from the IP's geolocation data. Geolocation
"latitude": 41.389, Approximate latitude coordinate (WGS84). Geolocation
"longitude": 2.159, Approximate longitude coordinate (WGS84). Geolocation
"meta": {
"country_iso2": "ES", ISO 3166-1 alpha-2 code. Geolocation
"country_iso3": "ESP", ISO 3166-1 alpha-3 country code. Geolocation
"country_numeric_code": "724", ISO 3166-1 numeric country code. Geolocation
"country_phone_code": "34", International dialling code for the country. Geolocation
"country_capital": "Madrid", Capital city of the country. Geolocation
"country_currency": "EUR", ISO 4217 currency code used in the country. Geolocation
"country_currency_name": "Euro", Full name of the country's currency. Geolocation
"country_native": "España", Country name in the local/native language. Geolocation
"country_region": "Europe", UN geographic macro-region (e.g. Europe, Asia, Americas). Geolocation
"country_subregion": "Southern Europe", UN geographic sub-region. Geolocation
"country_emoji": "🇪🇸", Country flag as a Unicode emoji character. Geolocation
"country_emoji_u": "U+1F1EA U+1F1F8" Country flag emoji as Unicode code points. Geolocation
}
}
"abuse_contact": {
"address": "One Microsoft Way, Redmond, WA 98052", optional Physical mailing address for the abuse contact of the network owner. Identity
"email": "abuse@microsoft.com", optional Email address for reporting abuse originating from this network. Identity
"name": "Microsoft Abuse Contact" optional Name of the person or team responsible for abuse reports. Identity
}
"known_bot": {Find out more →
"detected": true, Whether a known bot or crawler was detected for this IP. Identity
"bot_type": "ai", optional Category of bot: crawler, ai, or other. Identity
"name": "chatgpt_user" optional Identifier of the specific bot. Possible values:
  • ahrefs_bot
  • amazon_bot
  • amazon_user_bot
  • anthropic
  • apple_bot
  • bing_bot
  • chatgpt_user
  • common_crawl_bot
  • duckduck_bot
  • facebook_bot
  • google_bot
  • google_special_crawlers
  • google_user_fetch
  • google_user_fetch_google
  • gpt_bot
  • kagi_bot
  • openai_ads_bot
  • openai_search_bot
  • perplexity_crawler
  • perplexity_user
  • pingdom_ipv4
  • pingdom_ipv6
  • semrush_bot
  • telegram_bot
  • uptimerobot
  • yandex
Identity
}
"hosting": {Find out more →
"detected": true, Whether the IP belongs to a known hosting or cloud infrastructure provider. Identity
"domain": "www.microsoft.com", optional Website domain of the hosting provider. Identity
"name": "Microsoft Limited" optional Name of the hosting or cloud provider operating at this IP. Identity
}
"tor_exit_node": {
"detected": true Whether this IP is a known Tor network exit node. Anonymization
},
"privacy_relay": {
"detected": true, Whether the IP is part of a commercial privacy relay service. Anonymization
"provider": "icloud_private_relay" optional The privacy relay provider identifier. For now, always icloud_private_relay. Anonymization
},
"proxy": {Find out more →
"detected": true, Whether this IP has been detected as an active proxy server. Anonymization
"type": "residential", optional Type of proxy, one of:
  • residential - a proxy server sourced directly from a commercial residential proxy provider.
  • open - a publicly accessible proxy server published on the open internet.
Anonymization
"last_detected": "2025-11-15" optional Date (ISO 8601) when proxy activity was last observed for this IP, if available. Anonymization
},
"vpn": {Find out more →
"detected": true, Whether this IP has been identified as part of a VPN service. Anonymization
"provider": "nord_vpn", optional Identifier of the VPN provider, if known. Anonymization
"last_detected": "2025-11-15" optional Date (ISO 8601) when VPN activity was last observed for this IP. Anonymization
}
}
Field Value Description Package
geolocation.resolutioncityPrecision of the location data for this network. One of: city, state, country.Geolocation
geolocation.cityBarcelonaCity-level location of the IP address.Geolocation
geolocation.stateBarcelonaState, province, or top-level administrative region.Geolocation
geolocation.country_nameSpainFull country name derived from the IP's geolocation data.Geolocation
geolocation.latitude41.389Approximate latitude coordinate (WGS84).Geolocation
geolocation.longitude2.159Approximate longitude coordinate (WGS84).Geolocation
geolocation.country_iso2ESISO 3166-1 alpha-2 code.Geolocation
geolocation.country_iso3ESPISO 3166-1 alpha-3 country code.Geolocation
geolocation.country_numeric_code724ISO 3166-1 numeric country code.Geolocation
geolocation.country_phone_code34International dialling code for the country.Geolocation
geolocation.country_capitalMadridCapital city of the country.Geolocation
geolocation.country_currencyEURISO 4217 currency code used in the country.Geolocation
geolocation.country_currency_nameEuroFull name of the country's currency.Geolocation
geolocation.country_nativeEspañaCountry name in the local/native language.Geolocation
geolocation.country_regionEuropeUN geographic macro-region (e.g. Europe, Asia, Americas).Geolocation
geolocation.country_subregionSouthern EuropeUN geographic sub-region.Geolocation
geolocation.country_emoji🇪🇸Country flag as a Unicode emoji character.Geolocation
geolocation.country_emoji_uU+1F1EA U+1F1F8Country flag emoji as Unicode code points.Geolocation
asn.asnAS8075The Autonomous System Number that announces this IP prefix.Identity
asn.asn_nameMICROSOFT-CORP-MSN-AS-BLOCKThe registered name of the AS as listed by the RIR.Identity
asn.asn_companyMicrosoft CorporationThe legal organisation name that owns the AS.Identity
asn.asn_countryUSISO 3166-1 alpha-2 country code where the AS is registered.Identity
asn.route74.144.0.0/12The most-specific BGP route prefix that contains this IP.Identity
asn.rirARINThe Regional Internet Registry responsible for this address block (e.g. ARIN, RIPE, APNIC).Identity
asn.asn_domainwww.microsoft.comPrimary domain associated with the AS owner, if available.Identity
asn.asn_typehostingClassification of the AS. One of: isp, hosting, business, government, education.Identity
asn.asn_descriptionProvides consumer and enterprise software...Human-readable description of the organisation that owns this AS.Identity
asn.asn_risk0.9Numeric risk score for the AS, from 0.0 (very low risk) to 1.0 (very high risk).Identity
asn.asn_risk_labelvery_highHuman-readable risk level: very_low, low, moderate, high, or very_high.Identity
abuse_contact.abuse_nameMicrosoft Abuse ContactName of the person or team responsible for abuse reports.Identity
abuse_contact.abuse_emailabuse@microsoft.comEmail address for reporting abuse originating from this network.Identity
abuse_contact.abuse_phone+1-425-882-8080Phone number for the abuse contact, if available.Identity
abuse_contact.abuse_addressOne Microsoft Way, Redmond, WA 98052Physical mailing address for the abuse contact of the network owner.Identity
hosting.hostingtrueWhether the IP belongs to a known hosting or cloud infrastructure provider.Identity
hosting.hosting_domainwww.microsoft.comWebsite domain of the hosting provider.Identity
hosting.hosting_nameMicrosoft LimitedName of the hosting or cloud provider operating at this IP.Identity
company.company_namemawa-solutions GmbHThe legal name of the company or organisation operating at this IP address.Identity
company.company_typebusinessOrganisation classification: isp, business, hosting, government, education.Identity
company.company_domainwww.mawa-solutions.comPrimary website domain of the company.Identity
company.company_descriptionProvides SAP-based time-tracking...Brief description of the company's products or services.Identity
known_bot.bot_namechatgpt_userIdentifier of the known bot or crawler operating from this network.Identity
known_bot.bot_typeaiCategory of the bot: crawler, ai, or other.Identity
anonymization.tor_exit_nodetrueWhether this IP is a known Tor network exit node.Anonymization
anonymization.privacy_relaytrueWhether the IP is part of a commercial privacy relay service.Anonymization
anonymization.privacy_relay_providericloud_private_relayThe privacy relay provider identifier.Anonymization
anonymization.proxytrueWhether this IP has been detected as an active proxy server.Anonymization
anonymization.proxy_typeresidentialType of proxy: residential (commercial residential proxy provider) or open (publicly accessible proxy server).Anonymization
anonymization.proxy_last_detected2025-11-15Date (ISO 8601) when proxy activity was last observed for this IP.Anonymization
anonymization.vpntrueWhether this IP has been identified as part of a VPN service.Anonymization
anonymization.vpn_providernord_vpnIdentifier of the VPN provider, if known.Anonymization
anonymization.vpn_last_detected2025-11-15Date (ISO 8601) when VPN activity was last observed for this IP.Anonymization

Get started with IP Trust data

Choose the integration model that works best for your use case.

{ "number": "AS8075", "name": "MICROSOFT-CORP", "company": "Microsoft Corporation", "type": "hosting", "risk": 0.9, "resolution": "city", "city": "Redmond", "state": "Washington", "country": "United States", "latitude": 47.674, "longitude": -122.122, "proxy": true, "vpn": false }

IP Intelligence API

  • Integration with any language in less than 5 minutes
  • Free for up to 10k requests a month, no credit card required
  • 99.99% Uptime and <100ms
NetworkCityStateCountryLatLng
2.34.136.0/21IvreaPiedmontItaly45.4677.876
4.242.248.0/21RedmondWashingtonUS47.674-122.12
5.108.121.0/24JeddahMakkahSaudi Arabia21.54239.198
5.198.253.44/30LondonEnglandUK51.509-0.126
14.47.85.0/24SuwonGyeonggiSouth Korea37.291127.009

IP Database Downloads

  • Download CSV, MMDB, JSON and Parquet Dumps
  • Maximum Privacy and Compliance
  • Unlimited volume and zero latency