Netify Netify logo Contact Us
Products Resources Documentation Blog Sign In

IP API

Unlock the intelligence behind every IP. The Netify IP API delivers deep application and hosting insights to help:

  • Analyze cybersecurity risk
  • Enhance Netflow/IP log data
  • Identify VPN, Tor and Mobile Gateway IPs
  • Detect CDNs, hosting and ISP networks
  • Whitelist low-risk application traffic

Every IP address tells a story, so let's look at 104.18.43.182 to see what we find and showcase how our IP data is different.

Application Info

Netify Data Feeds transform raw network traffic into an application-centric map of the internet. Our intelligence scales from massive, globally distributed platforms like YouTube - spanning 60,000+ IPs across 170 countries - to specialized, private infrastructures like the Telegram network.

Take 104.18.43.182 as an example. While a basic lookup might only show a generic server, our data reveals it is a shared address utilized by the New York Times, alongside a dozen other distinct applications.

How does a major news outlet end up sharing digital real estate with other applications? The answer lies in our proprietary Hosting and CDN intelligence, which deconstructs the complex layers of modern content delivery.

Hosting and CDNs

We have extracted hosting platform information to help classify network traffic, from large CDNs like Akamai to small hosting providers like Creanova -- a popular host based in Finland for VPN companies.

It turns out that our example 104.18.43.182 IP powers Auth0's identity management platform. That's not a New York Times server but an authentication system shared by other applications. Learn more about hosting »

IP API - JSON Response

{
  "address": "104.18.43.182",
  "version": "ipv4",
  "shared_score": 95,
  "is_anycast": true,
  "asn_route": "104.19.160.0/20",
  "asn": {
    "id": 13335,
    "tag": "AS13335",
    "label": "Cloudflare",
    ...
  },
  "network": {
    "id": 206,
    "tag": "cloudflare",
    "label": "Cloudflare",
    ...
  },
  "platform": {
    "id": 11068,
    "tag": "auth0",
    "label": "Auth0",
    ...
  },
  "application_list": [
    ... many ...
  ],
  "hostnames": [
    ... many ...
  ],
  ... and more...
}

Networks and Points-of-Presence

We have meticulously curated a database of global networks and points-of-presence (PoPs), ranging from tech giants like Apple with its sprawling international footprint to multinational ISPs like Orange and its 60+ autonomous systems (ASNs). This level of granularity transforms basic geolocation into actionable intelligence; you no longer just see a subscriber streaming Apple TV, but rather an exact connection originating from a specific PoP in Brisbane, Australia.

Our example IP, 104.18.43.182, sits on Cloudflare's distributed anycast network. By mapping the intricate hop-by-hop relationships between content providers and end-users, we provide a transparent view of the delivery path that standard databases often overlook. Learn more »

Connection Tracking

Hostnames

The IP API returns a list of relevant hostnames. You can couple the results of the Hostname API to take a deeper dive. This is especially helpful for the more cryptic hostnames used by some CDNs and hosting providers.

Hostname Information
Hostname
sso.nytimes.com
Alias
uuid.edge.tenants.us.auth0.com

VPN Detection

Logo

Detecting VPN applications is a tricky business. Many consumer VPNs use custom protocols, stealth ports, and other tricks. Analyzing the data from our deep packet inspection engine gives us a unique perspective. Learn more »

Tor Detection

Logo

Tor is great for protecting consumer privacy but not so great when trying to protect business or school networks. We track and validate changes on the Tor Network. Learn more »

Mobile Gateway Detection

Logo

Oops! The VPN connection flagged by the cybersecurity team turned out to be a relatively harmless connection to a mobile carrier's Internet gateway.

3GPP Mobile Gateways bridge core cellular networks with the Internet, securing essential services like Wi-Fi calling, RCS, roaming, and signaling through IPsec tunnels. By encapsulating traffic between the carrier and the subscriber, these gateways maintain data integrity and authentication across untrusted networks. Learn more »

Mobile Gateway Information
Service
WiFi Calling Gateway
Host
epdg.epc.mnc005.mcc530.pub.3gppnetwork.org
Country
New Zealand
Brand
Spark Icon Spark

IP Sharing

When doing IP analysis, it is essential to know if an IP is dedicated to a single application or is shared by many. The 104.18.43.182 example IP is shared by many other applications using Auth0's authentication engine.

ASN and Geolocation

We are primarily focused on our application, hosting, cybersecurity and hostname data, but our IP API provides the ASN and geolocation data too.

Anycast and city-level geolocation are provided for major hosting providers and some ISPs/telcos. In many cases, we can extract more precise geolocation information from our network of agents. For all other IPs, country-level geolocation is provided by ipinfo.io.

ASN Information
ASN
AS13335
ASN Route
104.19.160.0/20
ASN Label
Cloudflare
Category
CDN
Location
Anycast

Available Subscriptions