All Response Fields
Geolocation
| Field | Description |
|---|---|
| ip | The IP address that was looked up. |
| is_eu | Returns true or false depending on whether the country is a recognized member of the European Union. The list of all EU countries is compiled from this list on the European Union website. |
| count | The total number of requests made by your API key in the last 24 hrs. Updates once a minute. |
| city | The name of the city from where the IP Address is located. |
| region | The name of the region where the IP Address is located. |
| region_code | The ISO 3166-2 code for the region. |
| region_type | The given region can either be a first or second level administrative subdivision, this field tells you what type it is. For example in the US the region is usually a state, Canada has provinces etc |
| country_name | The name of the country where the IP Address is located. |
| country_code | The 2 letter ISO 3166-1 alpha-2 code for the country. |
| continent_name | The name of the continent where the IP Address is located. One of; Africa, Antarctica, Asia, Europe, North America, Oceania, South America |
| continent_code | The 2 letter ISO 3166-1 alpha-2 code for the continent. One of; AF, AN, AS, EU, NA, OC, SA |
| latitude | An approximate latitudinal location for the IP Address. Often near the center of population. |
| longitude | An approximate longitudinal location for the IP Address. Often near the center of population. |
| postal | The Postal code for where the IP Address is located. |
| calling_code | The International Calling Code for the country where the IP Address is located. |
| flag | A link to a PNG/SVG file with the flag of the country where the IP Address is located. To pick your format set the extension you want eg. https://ipdata.co/flags/us.png for PNG or https://ipdata.co/flags/us.svg for SVG. |
| emoji_flag | An emoji version of the flag of the country where the IP Address is located. |
| emoji_unicode | The Unicode for the emoji flag. |
Mobile Carrier
| Field | Description |
|---|---|
| name | The name of the carrier that owns the IP Address |
| mcc | The Mobile Country Code of the carrier |
| mnc | The Mobile Network Code that identifies the carrier |
Timezone Data
| Field | Description |
|---|---|
| name | The name of the Timezone |
| abbr | The abbreviation of the Timezone |
| offset | The UTC offset of the Timezone |
| is_dst | true or false depending on whether or not Daylight Savings have been accounted for |
| current_time | The exact current time in the Timezone the IP Address belongs to adjusted for Daylight Savings |
Currency
| name | The singular name of the currency |
|---|---|
| code | The ISO 4217 currency code |
| symbol | The symbol of the currency |
| native | The native symbol of the currency |
| plural | The plural version of the currency. For example; US dollars, Australian dollars, Euros |
Threat Intelligence
| Field | Description |
|---|---|
| is_tor | is true if the IP address is associated with a node on the Tor network |
| is_vpn | true for VPN IP addresses. There are approx. 2.6M IP addresses updated daily. This is available to Business and Enterprise users only. |
| is_icloud_relay | true for IP addresses belonging to Apple's iCloud relay service |
| is_proxy | is true if the IP address is a known proxy, includes HTTP/HTTPS/SSL/SOCKS/CONNECT and transparent proxies |
| is_datacenter | true for any IP addresses that belong to a datacenter including all cloud providers. Can be useful for detecting automated/bot traffic. |
| is_anonymous | is set true if either one of is_tor or is_proxy is true |
| is_known_attacker | is true if an IP address is a known source of malicious activity, i.e. attacks, malware, botnet activity etc |
| is_known_abuser | is true if the IP address is a known source of abuse i.e. spam, harvesters, registration bots and other nuisance bots etc |
| is_threat | is true if either one of is_known_abuser or is_known_attacker is true |
| is_bogon | true for if an IP address is a bogon. |
| blocklists | An array of blocklists an IP address has been reported to. It includes the name, website and list type. |
| scores | A map of IP reputation scores. |
Usage Type
There are several options for usage type
| Field | Description |
|---|---|
| hosting | Belonging to a datacenter (we have mapped 200M+ hosting IP addresses) |
| isp | Belonging to ISP IP space (we have mapped 1B+ isp IPs) |
| cdn | Belonging to a Content delivery network |
| edu | Educational institutions |
| gov | One of ~25,000 government agencies worldwide |
| mil | Military organizations |
| business | End-user organizations |
Basic ASN Data
| Field | Description |
|---|---|
| asn | The Autonomous System Number |
| name | The name of the organization that owns the ASN |
| domain | The website of the organization |
| route | The network prefix the IP Address belongs to |
| type | The usage type associated with the IP Address and ASN |
Advanced ASN Data
| Field | Description |
|---|---|
| domain | The website of the organization |
| usage | Usage Type (same categories as ASN) |
| name | The name of the organization that owns the ASN |
| ipv4_prefixes | The ipv4 network prefixes associated with the ASN |
| ipv6_prefixes | The ipv6 network prefixes associated with the ASN |
| num_ips | The number of IP addresses associated with the ASN |
| registry | Registry/Administrator of the ASN |
| country | Country associated with the ASN |
| date | Date ASN was assigned |
| status | ASN status |
| upstream | Upstream providers for the ASN in question |
| downstream | Downstream ASN providers for the ASN in question |
| peers | Peer ASN providers for the ASN in question |
Company data
| Field | Description |
|---|---|
| name | The name of the end-user organization the network has been assigned to. |
| domain | The website of the organization. |
| network | The network prefix assigned to the organization. |
| type | The usage type associated with the IP Address and Company |
Updated over 2 years ago