IP reputation classification
Is this IP a known datacenter, cloud range, or Tor exit?
/v1/intel/ip-reputation Classifies a public IP against published cloud ranges (AWS, GCP, Azure, Cloudflare) plus curated DigitalOcean, Hetzner, Linode, and OVH ranges, plus the Tor Project's exit-node list. Returns every matching classification with the provider, service, region, and CIDR. Fraud-prevention, auth-throttling, and abuse-review teams use this to score signup risk.
Data refreshed nightly by cron. No network call at lookup time — pure local read.
Datacenter detection (AWS, GCP, Azure, Cloudflare, DigitalOcean, Hetzner, Linode, OVH). Tor exit detection (the only is_vpn_known signal we set true with confidence).
Generic VPN detection. Claiming an arbitrary IP is a VPN endpoint is how vendors lose customer trust — we only flag what we can prove. For commercial VPN-IP feeds, chain with a dedicated provider.
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| ip | string | yes | — | Public IPv4 or IPv6 address. |
Request
curl -X POST https://api.qcrawl.com/v1/intel/ip-reputation \
-H "Authorization: Bearer osk_..." \
-d '{"ip": "13.107.42.14"}'Response
{
"status": "success",
"ip": "13.107.42.14",
"is_datacenter": true,
"is_tor_exit": false,
"is_vpn_known": false,
"classifications": [
{"cloud": "azure", "service": "Office365", "region": "...", "prefix": "13.107.42.0/24"}
],
"classification_count": 1,
"data_source": "torproject.org, aws, gcp, azure, cloudflare"
}Errors
| Code | Meaning |
|---|---|
| 400 | Invalid IP or non-public address (private, loopback, reserved, multicast). |
| 503 | Reputation dataset temporarily unavailable. Credit refunded. |