What is an ASN and why does it matter for security?

An Autonomous System Number (ASN) uniquely identifies a network operator on the internet, such as an ISP, cloud provider, or enterprise. Knowing the ASN behind an IP address reveals whether traffic originates from a legitimate residential ISP, a datacenter often associated with bots, or a bulletproof hosting provider frequently used for abuse.

How does the API detect proxies and VPNs?

The API checks each IP against continuously updated databases of known proxy servers, SOCKS nodes, and commercial VPN exit points. These databases combine crowdsourced intelligence, active scanning, and BGP routing analysis to maintain high detection accuracy with minimal false positives.

Can I use this API to block Tor traffic?

Yes. The API returns an is_tor_node flag along with detailed metadata including exit probability, guard flags, exit policy summary, and the country of the Tor relay. You can use these fields to block, challenge, or simply monitor Tor traffic based on your application's risk tolerance.

What does the threat_level score represent?

The threat level is a composite score computed from multiple signals including proxy detection, VPN usage, Tor association, and historical abuse patterns. A score of 0 indicates low risk, while higher values suggest the IP has been associated with suspicious or malicious activity.

How are known bots identified and verified?

The API maintains a curated database of verified bot signatures from major search engines (Google, Bing), SEO tools, and monitoring services. When a match is found, the response includes the bot owner name and the timestamp when the bot was first catalogued.

What is the rate limit and how does quota work?

Every API response includes a meta object with your total_credits and credits_remaining for the current billing period. If you exceed the IP-level rate limit, the API returns a 429 status with a Retry-After header indicating how long to wait before retrying.

IP Shield

Account

Network Data

ASN & Carrier Data API

Retrieve the exact Autonomous System Number and internet service provider details behind any IP address. Identify network owners, detect bots, proxies, VPNs, and Tor exit nodes in a single API call.

    {
  "ok": true,
  "date": "2025-06-12T00:00:00Z",
  "data": {
    "ip": "8.8.8.8",
    "proxy": false,
    "vpn": false,
    "threat_level": 0,
    "is_known_bot": true,
    "bot_details": {
      "bot_owner": "Google",
      "creationTime": "2023-01-01T00:00:00Z"
    },
    "is_tor_node": false,
    "tor_details": null,
    "asn": {
      "asn_id": "15169",
      "asn_name": "GOOGLE",
      "classification": "hosting",
      "route_visibility_count": 8945
    }
  },
  "meta": {
    "total_credits": 10000,
    "credits_remaining": 9999
  }
}

ASN & BGP Routing Intelligence

Every IP address belongs to a network identified by an Autonomous System Number. The ASN lookup reveals the organizational owner, network classification, and BGP route visibility — giving you immediate context on who operates the infrastructure behind each request.

ASN Identification
Resolve the exact autonomous system number and registered operator name behind any IPv4 address using live BGP routing data.
Network Classification
Instantly categorize traffic origin as residential, hosting, corporate, or cellular to power adaptive security rules.
Route Visibility Scoring
Measure BGP route announcement reach across global peers to assess network legitimacy and detect suspicious infrastructure.

ASN and BGP routing intelligence visualization

Bot & Threat Detection

Distinguish legitimate crawlers from malicious bots in real time. The API cross-references incoming IPs against curated databases of known search engine crawlers, SEO tools, and monitoring services — returning the bot owner, classification, and first-seen timestamp.

Known Bot Fingerprinting
Identify verified crawlers from Google, Bing, and other services so you can whitelist good bots and challenge unknown ones.
Threat Level Scoring
Receive a computed threat score per IP that combines proxy signals, Tor usage, and historical abuse data into a single actionable metric.
Tor Exit Node Detection
Flag traffic originating from active Tor exit nodes with detailed metadata including exit probability, guard flags, and country of origin.

Bot and threat detection abstract visualization

Proxy & VPN Intelligence

Anonymizing networks are the primary tool for fraud, credential stuffing, and web scraping at scale. The API detects commercial VPNs, datacenter proxies, and residential proxy networks — giving you the context to block or challenge suspicious traffic before it reaches your application.

Proxy Detection
Detect open proxies, SOCKS proxies, and HTTP proxies operating across datacenter and residential IP ranges in real time.
Commercial VPN Flagging
Identify traffic from popular consumer VPN providers like NordVPN, ExpressVPN, and Surfshark using continuously updated IP range databases.
Single API Call
Retrieve proxy status, VPN flags, ASN data, bot detection, Tor status, and threat score in one unified response — no need to chain multiple endpoints.

Proxy and VPN detection abstract visualization

Built for Security Engineers

Everything you need to make real-time decisions about network traffic at the edge.

Sub-10ms Latency

In-memory data sources deliver lookup results in single-digit milliseconds, fast enough for inline request blocking without adding perceptible latency.

Continuously Updated Databases

Proxy lists, Tor directory data, bot fingerprints, and BGP routing tables refresh automatically so your security rules never go stale.

Quota-Protected Access

Built-in credit tracking with per-request metering returns your remaining quota in every response, making usage management effortless.

Unified JSON Response

A single endpoint returns ASN, proxy, VPN, bot, Tor, and threat data in one structured JSON payload — eliminating integration complexity.

Rate-Limited by Design

IP-level rate limiting protects the API from abuse while ensuring fair access for all consumers, with Retry-After headers for graceful backoff.

Easy Integration

Simple RESTful API design allows integration with any language or framework in minutes, not hours.

High Availability

Deployed across global edge locations to ensure maximum uptime and reliability for your mission-critical applications.

Access Carrier Data

Get 1,000 free requests per month when you register.

Get API Key