IP Address Geolocation with Confidence Area and Hazard Report API
Introduction
IP address intelligence plays a vital role in cyber security by allowing businesses to perform various checks on IP addresses. With the rise in VPN/proxy services, online scammers have become comfortable hiding their identities when committing fraud. The technology used by hackers is getting refined, and it is harder to detect with just the reactive measures of blocklisting IP addresses. BigDatacloud IP geolocation API services can provide more proactive metrics to tackle global online cyber crimes and reduce their impact.
This API endpoint provides a critical security report of an IP address. It is an extension of the IP Address Geolocation with Confidence Area API, making it the most comprehensive IP address intelligence API offering.
The additional data object is called hazardReport, which contains 15 security signals. The hazard report provides conventional reactive and our highly innovative proprietary proactive metrics. The API also offers a textual summary of these 15 security vulnerabilities associated with the IP address, called a securityThreat.
You will find more information about the hazard report on our dedicated Hazard Report API page.
You may use our User Risk API page if you are looking for a more simplified security API.
- Unprecedented Update Rate
- Geolocation data is partially updated every 2 hours and fully updated at least once a day
- BGP data is updated every 2 hours
- Registry data is updated at least once a day
- Country object data is usually updated at least once a month
- Hazard report data is updated every hour
Get started
This API is part of the IP Geolocation package and is available in free and paid plans. Please visit the IP Geolocation package page for limits and pricing information.
Endpoint
Request
Responses
Example query
https://api.bigdatacloud.net/data/ip-geolocation-full?ip=193.114.112.1&localityLanguage=en&key=[YOUR API KEY]
Example response
Schema
Requested IPv4 IP address in a string format
localityLanguage input parameter received
Indicated whether the IP address is present on the global routing table, hence reachable. If not reachable, the IP address is not in use and therefore cannot be geolocated
country object
location object
Indicates the time of when that particular IP address’s geolocation was assessed the last
network object
Geolocation confidence. Possible values: 'low', 'moderate', 'high'
Closed polygon representing estimated geolocation confidence area
A textual summary of an estimated security threat associated with the IP address
hazardReport object