IP Lookup API

How It Works

The IP Lookup API is designed to provide detailed insights about an IP address, including its location, risk factors, and associated network information. This service helps you detect potentially malicious activities originating from high-risk IPs, such as proxies, VPNs, or known bad actors. By integrating this API, you can bolster your fraud prevention measures and identify suspicious activities in real time.

Key Features:

• Identifies proxy, VPN, and Tor usage.
• Provides geolocation data such as country, city, and ISP.
• Returns a fraud score to assess IP risk levels.
• Detects botnets and known attackers.

Integration

Endpoint:

api/iplookup

Method:

POST

Base URL:

https://api.boltidentity.com/

Request Headers

{
  "licenseKey": "YOUR_API_KEY",
  "Content-Type": "application/json"
}

Request Body

The request must include the IP address to be validated.

{
  "ip": "192.168.1.1"
}

Example Request (Using Fetch)

const response = await fetch('https://api.boltidentity.com/api/iplookup', {
    method: 'POST',
    headers: {
        'licenseKey': 'YOUR_API_KEY',
        'Content-Type': 'application/json'
    },
    body: JSON.stringify({
        ip: "192.168.1.1"
    })
});

const data = await response.json();

Sample Response

Understand Response

Field	Description	Possible Values / Example
status	Indicates the overall result of the IP lookup.	Verified, Declined
message	Provides additional context about the status.	Examples: "High fraud risk IP Address detected.", "Success"
asn	Autonomous System Number (ASN) of the IP address.	Example: 212238
isp	Internet Service Provider associated with the IP.	Example: "Datacamp"
activeTor	Indicates whether the IP is actively using the Tor network.	true, false
activeVpn	Indicates whether the IP is actively using a VPN.	true, false
botStatus	Indicates whether the IP is associated with bot activity.	true, false
city	City associated with the IP address.	Example: "Frankfurt am Main"
countryCode	ISO country code for the IP address.	Example: "DE"
fraudScore	A risk score indicating the likelihood of fraudulent activity.	Integer: 0 (low risk) to 100 (high risk)
host	Reverse DNS or hostname for the IP.	Example: "unn-87-249-132-137.datapacket.com"
isCrawler	Indicates if the IP belongs to a known web crawler.	true, false
latitude	Latitude of the IP's geographical location.	Example: 50.11999893
longitude	Longitude of the IP's geographical location.	Example: 8.68000031
mobile	Indicates if the IP is associated with mobile devices.	true, false
organization	Organization name linked to the IP address.	Example: "CyberGhost VPN"
proxy	Indicates whether the IP is behind a proxy.	true, false
recentAbuse	Indicates if the IP was recently flagged for abusive activity.	true, false
region	Region or state associated with the IP address.	Example: "Hesse"
timezone	Timezone of the IP's location.	Example: "Europe/Berlin"
tor	Indicates if the IP is part of the Tor network.	true, false
vpn	Indicates if the IP is using a VPN.	true, false
zipCode	Postal code for the IP's geographical location.	Example: "53003"
message	Status message of the lookup request.	Example: "Success"