IP Intelligence API

Know the connection behind every IP

Get a complete picture of every IP and its recent connections. Know their types, proxy or VPN operators, even when a residential address hides a proxy exit.

Tunnels12	Last seen
Residential proxy1024 Proxy residential	Today
Residential proxy711 Proxy residential	Today
Residential proxyMangoProxy residential proxies	1 day ago
Residential proxyNovada residential	2 days ago
Residential proxySwiftProxy residential	3 days ago

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495

{  "address": "73.162.45.89",  "type": "ipv4",  "asn": 208172,  "location": {    "continent_code": "NA",    "country_code": "US"  },  "tunnels": [    {      "type": "proxy",      "operator": "1024 Proxy residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-31T08:11:13.000Z"    },    {      "type": "proxy",      "operator": "711 Proxy residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-31T06:33:13.000Z"    },    {      "type": "proxy",      "operator": "MangoProxy residential proxies",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-30T04:53:23.000Z"    },    {      "type": "proxy",      "operator": "Novada residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-29T03:48:58.000Z"    },    {      "type": "proxy",      "operator": "SwiftProxy residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-28T00:07:48.000Z"    },    {      "type": "proxy",      "operator": "Botting Tools residential proxies",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-29T18:54:52.000Z"    },    {      "type": "proxy",      "operator": "Plain Proxies residential proxies",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-29T11:27:07.000Z"    },    {      "type": "proxy",      "operator": "FlashProxy Lite residential proxies",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-25T15:49:55.000Z"    },    {      "type": "proxy",      "operator": "ResiProx residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-18T09:33:25.000Z"    },    {      "type": "proxy",      "operator": "AnyIP residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-16T20:49:57.000Z"    },    {      "type": "proxy",      "operator": "FloppyData residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-14T07:17:32.000Z"    },    {      "type": "proxy",      "operator": "ProxyEmpire residential",      "tier": null,      "proxy_type": "residential",      "last_seen_at": "2026-07-12T14:22:41.000Z"    }  ]}

Docs

Tunnels7	Last seen
Datacenter proxyBright Data	Today
Datacenter proxyOxylabs	2 days ago
Datacenter proxyIPRoyal	2 days ago
Datacenter proxyWebshare datacenter proxies	5 days ago
Datacenter proxyGeonode datacenter proxies	7 days ago

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960

{  "address": "198.51.100.42",  "type": "ipv4",  "asn": 64500,  "location": {    "continent_code": "NA",    "country_code": "US"  },  "tunnels": [    {      "type": "proxy",      "operator": "Bright Data",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-30T16:12:08.000Z"    },    {      "type": "proxy",      "operator": "Oxylabs",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-29T09:44:31.000Z"    },    {      "type": "proxy",      "operator": "IPRoyal",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-28T21:05:17.000Z"    },    {      "type": "proxy",      "operator": "Webshare datacenter proxies",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-26T03:35:25.000Z"    },    {      "type": "proxy",      "operator": "Geonode datacenter proxies",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-23T21:49:41.000Z"    },    {      "type": "proxy",      "operator": "DataImpulse data center proxies",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-20T20:27:55.000Z"    },    {      "type": "proxy",      "operator": "Thordata datacenter",      "tier": null,      "proxy_type": "datacenter",      "last_seen_at": "2026-07-06T06:10:18.000Z"    }  ]}

Docs

Tunnels3	Last seen
VPNUrban VPN	1 day ago
VPNNordVPN	1 day ago
VPNUrban VPN	4 days ago

1234567891011121314151617181920212223242526272829303132

{  "address": "198.51.100.67",  "type": "ipv4",  "asn": 64501,  "location": {    "continent_code": "EU",    "country_code": "DE"  },  "tunnels": [    {      "type": "vpn",      "operator": "Urban VPN",      "tier": "commercial",      "proxy_type": null,      "last_seen_at": "2026-07-30T06:46:07.000Z"    },    {      "type": "vpn",      "operator": "NordVPN",      "tier": "commercial",      "proxy_type": null,      "last_seen_at": "2026-07-29T18:32:49.000Z"    },    {      "type": "vpn",      "operator": "Urban VPN",      "tier": "commercial",      "proxy_type": null,      "last_seen_at": "2026-07-27T09:14:36.000Z"    }  ]}

Docs

Tunnels3	Last seen
RelayiCloud Private Relay	1 day ago
RelayCloudflare WARP	2 days ago
RelayiCloud Private Relay	2 days ago

1234567891011121314151617181920212223242526272829303132

{  "address": "198.51.100.91",  "type": "ipv4",  "asn": 64502,  "location": {    "continent_code": "EU",    "country_code": "GB"  },  "tunnels": [    {      "type": "relay",      "operator": "iCloud Private Relay",      "tier": null,      "proxy_type": null,      "last_seen_at": "2026-07-30T00:00:00.000Z"    },    {      "type": "relay",      "operator": "Cloudflare WARP",      "tier": null,      "proxy_type": null,      "last_seen_at": "2026-07-29T11:46:22.000Z"    },    {      "type": "relay",      "operator": "iCloud Private Relay",      "tier": null,      "proxy_type": null,      "last_seen_at": "2026-07-28T20:47:16.000Z"    }  ]}

Docs

Tunnels2	Last seen
TorTor network	1 day ago
TorTor exit nodes	1 day ago

12345678910111213141516171819202122232425

{  "address": "198.51.100.118",  "type": "ipv4",  "asn": 64503,  "location": {    "continent_code": "EU",    "country_code": "NL"  },  "tunnels": [    {      "type": "tor",      "operator": "Tor network",      "tier": null,      "proxy_type": null,      "last_seen_at": "2026-07-30T06:00:24.000Z"    },    {      "type": "tor",      "operator": "Tor exit nodes",      "tier": null,      "proxy_type": null,      "last_seen_at": "2026-07-30T03:00:06.000Z"    }  ]}

Docs

Detect every proxy type

Residential proxies route traffic through ordinary devices on consumer ISPs, so a request can appear to come from a real household. VPNs take a different path: they send traffic through an exit server operated by a company or a consumer provider. One borrows a household connection. The other replaces the original network with shared infrastructure.

Those situations carry different risks. The same residential IP can serve a real customer and a proxy network at the same time, while a corporate VPN can be expected traffic. Most tools collapse both into a single proxy: true flag.

Built for our platform first

We built this intelligence to power our own detection platform, where IP data sits alongside account, device, and behavioral context. Fraud products often buy proxy intelligence as a third-party feed. We needed operator attribution and per-IP observation history at the granularity our own signals use, so we built the core proxy enumeration ourselves.

If you already run risk rules, WAF policies, or feature pipelines in-house, you can use the same underlying intelligence directly.

Look up a single IP. Or all at once

Get an intelligence on a single IP per request or send multiple addresses at once. Download complete datasets for async processing and offline analysis.

GET

https://api.castle.io/v1/ips/1.0.105.13

API Reference

{
  "address": "1.0.105.13",
  "type": "ipv4",
  "asn": 18144,
  "location": {
    "continent_code": "AS",
    "country_code": "JP"
  },
  "tunnels": [
    {
      "type": "proxy",
      "operator": "FloppyData residential",
      "tier": null,
      "last_seen_at": "2026-06-25T21:38:40.000Z",
      "proxy_type": "residential"
    },
    {
      "type": "proxy",
      "operator": "AnyIP residential",
      "tier": null,
      "last_seen_at": "2026-06-21T22:55:42.000Z",
      "proxy_type": "residential"
    }
  ]
}

Flat, flexible pricing

We offer simple, predictable pricing with a generous free tier for you to try it out without commitment.

$0.001

per request

API budget included free

Start for free View pricing

Ready for any scale

Castle serves hundreds of clients, from fast-moving startups to global giants.

Built to process billions of requests every day, our infrastructure delivers excellent performance and reliability at any scale.

100 ms

response time
99.99 %

uptime
SOC 2 Type II compliance
GDPR-ready compliance

Get Started Now

Start with a free quota, with transparent pricing that scales when you do.

Start for free Contact us