BGP routing data, WHOIS registrants, company enrichment, and IP lease chains — trace every address from the RIR allocation through to the organization actually using it.
{
"ip": "72.128.130.224",
"asn": {
"asn": "AS11427",
"name": "Charter Communications, Inc.",
"domain": "corporate.charter.com",
"route": "72.128.128.0/19",
"type": "isp"
},
"company": {
"name": "Rumble",
"domain": "rumble.com",
"network": "72.128.130.224/29",
"type": "business"
}
}the response's asn and company objects — with every plan
Every IP lookup returns ASN routing metadata, WHOIS registrant details and company enrichment. All derived from live BGP feeds and proprietary enrichment pipelines.
The network that operates the address: its autonomous system number, name, route prefix, domain, and type (ISP, hosting, business, education, government).
The organization that owns the address block, which is often not the network operating it — legal name, domain, and type. Enriched beyond raw WHOIS with proprietary matching and parent-subsidiary resolution.
For mobile IPs, the carrier name, MCC, and MNC. Identifies traffic from cellular networks vs. fixed-line broadband or enterprise connections.
We ingest full BGP table dumps every day from route collectors at major Internet Exchange Points worldwide. Each IP is mapped to its originating ASN and the most specific prefix advertised.
AS path analysis reveals upstream transit relationships, multi-homed networks, and route origin anomalies. Historical data tracks prefix ownership changes and hijacking events.
The WHOIS registrant is rarely the organization actually using an IP. Address blocks are allocated by RIRs to LIRs, leased to ISPs, sub-leased to hosting providers, and re-assigned to end customers. We resolve the full chain.
Lease detection cross-references WHOIS inetnum objects, RIR delegation files, and BGP origin changes to identify sub-allocations, reassignments, and temporary leases. The result tells you not just who registered the block, but who's operating it today.
Raw WHOIS organization names are often abbreviated, inconsistent, or outdated. Our enrichment pipeline maps them to canonical company records — resolving "GOOG" to "Google LLC", matching subsidiaries to parents.
Network type classification distinguishes ISPs from hosting providers, enterprises from educational institutions, and government networks from military. This powers downstream decisions like ad targeting exclusion and fraud scoring.
One call returns the network that announces the address and the company it is assigned to. Every field is typed and documented.
asn.asnThe autonomous system number, prefixed AS.
asn.nameThe name of the organization that holds the ASN.
asn.domainThe organization’s website.
asn.routeThe network prefix the address belongs to, in CIDR.
asn.typeThe usage type of the network: one of the values below.
company.nameThe name of the end-user organization the network is assigned to.
company.domainThe organization’s website.
company.networkThe prefix assigned to the organization, in CIDR.
company.typeThe usage type of the company’s network: one of the values below.
hostingA datacenter or cloud provider; 200M+ hosting addresses mapped.
ispConsumer and business ISP space; 1B+ addresses mapped.
cdnA content delivery network.
businessAn end-user organization.
eduAn educational institution.
govA government agency.
milA military organization.
unknownThe usage type could not be determined with confidence.
Flag traffic from hosting providers and data centers. Legitimate users rarely browse from AWS, GCP, or DigitalOcean — but bots and scrapers do.
Exclude data center and hosting ASNs from ad campaigns. Non-human traffic from server farms burns ad budget without generating conversions.
Look up the abuse contact for attacking IPs and fire off incident reports programmatically. Reduce mean time to report from hours to seconds.
Trace leased IP blocks back to the actual operator. The WHOIS registrant is often a holding company or LIR — lease chain resolution reveals who's really behind the traffic.
Resolve visitor IPs to company names for account-based marketing. Follow the lease chain past the ISP to identify the enterprise customer actually using the address.
Detect mobile carrier traffic and adapt content — lower-res images on mobile networks, carrier billing integration, or MNO-specific landing pages.
The AS number, its name, route and type come with every plan. The company behind the address, with its name, domain and network, is part of Startup and above.
Monthly prices; yearly billing is 20% less. Compare every plan