IP Intelligence (Cloud, Tor, Bots) API

Is an IP from AWS, Google Cloud, Azure, Cloudflare and other hosts, a Tor exit node or a verified Googlebot / Bingbot? From official range files, daily.

GETPOSThttps://apibox.io.vn/v1/ip-intel

Security & Crypto▶ Try it online

Give an ip (IPv4 or IPv6) and learn whether it belongs to a cloud, hosting or CDN network (Amazon Web Services, Google Cloud, Microsoft Azure, Oracle Cloud, Cloudflare, DigitalOcean, Akamai / Linode, Vultr) with the service and region when published, whether it is a current Tor exit node, and whether it is a verified crawler or fetcher: Googlebot and Google special crawlers, Bingbot, Applebot, GPTBot, OAI-SearchBot, ChatGPT-User, DuckDuckBot, PerplexityBot, CCBot. Every matching range is listed in matches, most specific first.

Add the request ua (User-Agent) to catch fake bots: when it claims to be one of these crawlers but the IP is outside the crawler's published ranges, user_agent.genuine is false and the risk is high. dns=true also runs the reverse + forward DNS check recommended by Google and Bing. risk gives a suggested level (Tor or fake crawler high, data-centre traffic medium) with the reasons. POST ips for up to 1000 addresses.

Every source is the provider's own published file (ip-ranges.json, cloud.json, Azure Service Tags, googlebot.json, the Tor bulk exit list…), refreshed daily; sources=true lists them with their prefix counts. Commercial VPNs and residential proxies publish no ranges and are not detected. For geolocation and ASN use /v1/ip.

Parameters

Name	In	Type	Required	Default
`ip`	query\|path	string	no		IPv4 or IPv6 address. Also in the path: /v1/ip-intel/66.249.66.1.
`ips`	body	array	no		Batch: up to 1000 addresses.
`ua`	query\|body	string	no		User-Agent of the request, to check a crawler claim.
`dns`	query\|body	boolean	no	`false`	Also check reverse + forward DNS (max 20 IPs per batch).
`sources`	query\|body	boolean	no	`false`	Add the list of data sources with their URLs and prefix counts.

Example

curl "https://apibox.io.vn/v1/ip-intel?ip=66.249.66.1&ua=Mozilla/5.0%20(compatible;%20Googlebot/2.1)" \
  -H "Authorization: Bearer YOUR_API_KEY"

const res = await fetch('https://apibox.io.vn/v1/ip-intel?ip=66.249.66.1&ua=Mozilla/5.0%20(compatible;%20Googlebot/2.1)', {
  method: 'GET',
  headers: {
    Authorization: 'Bearer YOUR_API_KEY',
  },
});
const data = await res.json();
console.log(data);

import requests

res = requests.get(
    "https://apibox.io.vn/v1/ip-intel?ip=66.249.66.1&ua=Mozilla/5.0%20(compatible;%20Googlebot/2.1)",
    headers={"Authorization": "Bearer YOUR_API_KEY"},
    timeout=30,
)
print(res.json())

<?php
$ch = curl_init('https://apibox.io.vn/v1/ip-intel?ip=66.249.66.1&ua=Mozilla/5.0%20(compatible;%20Googlebot/2.1)');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['Authorization: Bearer YOUR_API_KEY'],
]);
$response = curl_exec($ch);
print_r(json_decode($response, true));

Response

{
  "ip": "66.249.66.1",
  "valid": true,
  "version": 4,
  "is_cloud": false,
  "cloud": null,
  "is_tor_exit": false,
  "is_crawler": true,
  "crawler": {
    "name": "Googlebot",
    "operator": "Google",
    "type": "crawler",
    "cidr": "66.249.66.0/27",
    "verified_by": "official IP ranges"
  },
  "google_network": true,
  "user_agent": {
    "claims": "Google crawler",
    "genuine": true
  },
  "risk": {
    "level": "low",
    "reasons": [
      "Verified Googlebot (official IP ranges)"
    ]
  },
  "matches": [
    {
      "cidr": "66.249.66.0/27",
      "source": "googlebot",
      "provider": "Google",
      "category": "crawler",
      "bot": "Googlebot",
      "service": null,
      "region": null
    },
    {
      "cidr": "66.249.64.0/19",
      "source": "google",
      "provider": "Google",
      "category": "network",
      "service": null,
      "region": null
    }
  ],
  "data_version": "202611110259",
  "built_at": "2026-11-11T02:59:02.917Z",
  "note": "Classification from the providers' own published IP range files (refreshed daily). Commercial VPNs and residential proxies publish no ranges and are not detected."
}

Use cases

Block sign-up and checkout abuse coming from data centres or Tor
Spot fake Googlebot / Bingbot in access logs and SEO crawls
Allow verified crawlers through bot protection and rate limits
Tag analytics traffic as cloud, crawler or human

FAQ

Can it detect VPNs?

Only VPNs hosted on the listed clouds show up as cloud traffic. Commercial VPN and residential proxy networks publish no ranges, so they are not detected.

How is a crawler verified?

By the official IP range files of each crawler operator; with dns=true also by reverse DNS (e.g. *.googlebot.com) confirmed by forward DNS.

How fresh are the ranges?

All sources are downloaded and checked daily; data_version and built_at tell when.

IP Intelligence (Cloud, Tor, Bots) API

Parameters

Example

Response

Use cases

FAQ

Related APIs

Hash Generator

Encode / Decode

Password Generator