networkTraits

networkTraits (object): An object that describes various traits of the network connection the user is connecting from.

Note: networkTraits is only returned for Standard and Advanced requests. Standard requests look up IP addresses from Synthient, while Advanced requests source IP intelligence from MaxMind.

ip

ip (string): The IP address used to connect to our endpoint.

companyName

companyName (string): The name of the ISP, company, or service that the connecting IP address belongs to.

countryCode

countryCode (string): A two letter uppercase country code indicating the country of the IP address.

subdivision

subdivision (string): The state, province, prefecture, or local equivalent. Always an English string for Advanced, while Standard may return an identifier such as a stringified number for some countries.

city

city (string): The name of a city within the approximate area of the connection. Significantly more accurate in Advanced.

isAnonymous

isAnonymous (boolean): Indicates whether the IP is known to be able to act as a proxy to hide the real geolocation of the user. This includes datacenter IPs, residential or public proxies, VPNs, or similar geolocation-hiding services. Importantly, it does not include IP addresses associated with Consumer Privacy Networks such as iCloud Private Relay as these services do not permit users to spoof their reported geolocation.

ipWasRecentlyMalicious

ipWasRecentlyMalicious (boolean): Indicates whether we've seen this IP address conduct suspicious activity on our network within the last 24 hours.

datacenter

datacenter (boolean): Indicates whether the IP belongs to a datacenter or similar infrastructure.

vpn

vpn (boolean): Reports same value as datacenter.

tor

tor (boolean): Indicates whether the IP is listed as a TOR Exit Node.

cpn

cpn (boolean): Indicates whether the IP address is listed as being associated with a Consumer Privacy Network such as iCloud Private Relay.