Usage Guides

IP Intelligence API

The IP Intelligence API provides a comprehensive, real-time profile of any IPv4 or IPv6 address. It's designed to give you all the context you need in a single request, from geolocation and network topology to risk assessment and domain relationships.

Endpoint

‍

To get intelligence for an IP address, make a GET request to the following endpoint:

GET /intelligence/v1/ip/{address}

‍

Path Parameters

address (string, required): The IP address you want to analyze. Example: 8.8.8.8.

‍

Information Provided

A successful response returns a detailed JSON object containing several key sections:

Summary & Geolocation: Get a quick overview including the organization (GOOGLE LLC), physical location, and a proprietary risk score. The geolocation object provides city-level precision with coordinates, country ISO codes, and time zones.
Network & ISP: Understand the IP's place on the internet with its primary ASN (AS15169), announced BGP prefixes, and detailed routing information. The isp object identifies the Internet Service Provider.
Relationships: This powerful section allows you to pivot your investigation by showing all known relationships. It includes associated DNS records (A, PTR, etc.) and other domains hosted on the same network.
Streaming Support: For real-time applications, this endpoint supports streaming responses using Server-Sent Events (text/event-stream) to deliver data incrementally as it's discovered.

Common Use Cases

‍

This endpoint is ideal for threat intelligence, incident response, network security assessment, and IP reputation checking.

‍

Next Steps

‍

View the full IP Intelligence API Reference

‍