IP API
IP API
The Netify IP API provides application and hosting intelligence that can be used for:
- Enhancing Netflow/IP log data
- Identifying VPN, Tor and Mobile Gateway IPs
- Detecting CDNs, hosting and ISP networks
- Whitelisting low-risk application traffic
Let's dive into how our IP data is different.
Application Info
Every IP address tells a story, so let's look at 104.19.167.24 to see what we find.
The Netify Data Feeds provide an application-centric view of the Internet, from YouTube's 40,000+ IPs across 170+ countries to Telegram's dedicated and closed network.
What's the story for our example 104.19.167.24 IP? It turns out that this is a shared IP used by ExpressVPN, along with a dozen other applications. If you are interested in the source of the application data, follow this link: Learn more »
Why is a VPN provider sharing an IP with other well-known applications? That's where our unique Hosting and CDN data comes in. Read on.
Details | Category | |
Application |
![]() |
VPN |
Hosting |
![]() |
Cybersecurity |
Network |
![]() |
CDN |
ASN | AS13335 | Anycast |
Hosting and CDNs
We have extracted hosting platform information to help classify network traffic, from large CDNs like Akamai to small hosting providers like Creanova -- a popular host for VPN companies.
It turns out that our example 104.19.167.24 IP powers Auth0's identity management platform. That's not an ExpressVPN VPN server but an authentication system shared by other applications. Learn more »
Networks and Points-of-Presence
We have curated a list of networks and points-of-presence (PoPs), from large tech companies with a global footprint like Apple to multinational ISPs like Orange with 60+ ASNs. You not only know that an IP is streaming Apple TV, you know that an IP is streaming Apple TV from Brisbane, Australia.
Our example 104.19.167.24 IP sites on Cloudflare's anycast network. Learn more »

Hostnames
The IP API returns a list of relevant hostnames. You can couple the results of the Hostname API to take a deeper dive. This is especially helpful for the more cryptic hostnames used by some CDNs and hosting providers.
Hostname | auth.expressvpn.com |
Alias | uuid.edge.tenants.us.auth0.com |
VPN Detection
Detecting VPN applications is a tricky business. Many consumer VPNs use custom protocols, stealth ports, and other tricks. Analyzing the data from our deep packet inspection engine gives us a unique perspective. Learn more »
Tor Detection

Tor is great for protecting consumer privacy but not so great when trying to protect business or school networks. We track and validate changes on the Tor Network. Learn more »
Mobile Gateway Detection

Oops! The VPN connection flagged by the cybersecurity team turned out to be a relatively harmless connection to a mobile carrier's Internet gateway. Learn more »
Service | WiFi Calling Gateway |
Host | epdg.epc.mnc005.mcc530.pub.3gppnetwork.org |
Country | New Zealand |
Brand |
![]() |
IP Sharing
When doing IP analysis, it is essential to know if an IP is dedicated to a single application or is shared by many. The 104.19.167.24 example IP is shared by many other applications using Auth0's authentication engine.
ASN and Geolocation
We are primarily focused on our application and hostname data, but our IP API provides the ASN and geolocation data too.
Anycast and city-level geolocation are provided for major hosting providers and some ISPs/telcos. In many cases, we can extract more precise geolocation information from our network of agents. For all other IPs, country-level geolocation is provided by ipinfo.io.
ASN | AS13335 |
ASN Route | 104.19.160.0/20 |
ASN Label | Cloudflare |
Category | CDN |
Location | Anycast |
Access the Data
API Access
IP details are provided in the IP API.Datasets
If you are looking for a particular type of IP, the following IP-based datasets might be of interest:
Integration and Custom Solutions
Do you have any questions about integration, APIs or custom development?
Contact Us