Response Description

Response Element	Description
geometry	The coordinates (latitude and longitude) of the location of the device.
accuracy	This provides a location accuracy value (in meters) for the IP latitude/longitude results based on all available information about an IP address including asn, carrier, dma, organizationType, etc.
ipInfo.ipAddress	IP address mentioned in the request.
ipinfo.proxy.type	The network or protocol utilized by the server to proxy the user connection is identified. Proxy type classifications include the use of http, Tor, web and SOCKS.
ipinfo.proxy.anonymizerStatus	A status is assigned to IP addresses that have been detected as a proxy. The status is an indicator, at the highest level that an IP address may be associated with an anonymizing proxy. It is a relative indicator of how recent the proxy was found to be active and the proxy‘s category. Possible values are: active - The anonymizer tested positive within the last six months. inactive - The anonymizer gave no positive test results within the last two years. private - IP addresses with this designation allegedly contain anonymous proxies that are not publicly accessible. As such, they cannot be routinely tested with automated tools. These addresses usually belong to commercial ventures that sell anonymity services to the public (Hotspot Shield, CyberGhost, and others). Addresses with this designation are derived from ownership information or obtained from trusted, high-confidence sources. suspect - The anonymizer tested positive within the last two years, but not the last six months. If there is no status designation, then there is no specific evidence that the IP address has been associated with an anonymous proxy.
ipinfo.proxy.level	The level describes the degree of concealment provided by the use of the proxy. While all proxies act as an intermediary between the user and requested website, proxies provide differing levels of obfuscation of the user‘s originating IP address. Levels of obfuscation include: transparent anonymous distorting elite
ipinfo.proxy.lastDetected	Provides the most recent date on which IP Intelligence proxy detection technology confirmed the proxy was active or served as a private proxy. The format of the last detected date is yyyy-mm-dd.
ipinfo.network.connectionFromHome	Indicates whether the connection is made from a residence. The home value is true if the connection is made from a residential or private location. Otherwise the value is false as the connection is considered to be made from a place of business, organization or public place. Mobile connections are considered private and have a true value.
ipinfo.network.organization	The Registering Organization is the entity responsible for the actions and content associated with a given block of IP addresses. Registering Organizations include many types of entities, including corporate, government, or educational entities, and ISPs managing the allocation and use of network blocks.
ipinfo.network.carrier	Provides the name of the organization that owns the ASN (Autonomous System Number). The carrier is responsible for the traffic carried on the network or set of networks designated as an Autonomous System (AS) and identified by the ASN.
ipinfo.network.organizationType	Classification of the type of organization of the place of connection. This field provides categories that are useful for gaining more information about the user. Over 40 different categories for industries are provided, including Insurance, Banking, Lodging, Dining, Government, Educations, Recreation, Advertising and Telecommunication, to name a handful.
ipinfo.network.organizationType.isicCode	The associated International Standard Industrial Classification code, Rev. 4, of the organization type.
ipinfo.network.organizationType.naicsCode	The associated North American Industry Classification System (NAICS) code, v2007, of the organization type.
ipinfo.network.connectionType	The mode in which a user has connected to the internet. For example: ocx, tx, customer satellite, frame relay, cable, dsl, dial up etc.
ipinfo.network.lineSpeed	Indicates the speed of the connection to the Internet, divided into: high, medium, or low.
ipinfo.network.ipRouteType	The IP Routing Type (IPRT) specifies how the connection is routed through the Internet and can be used to determine how close the user is to the public IP address. For example, a user connecting through a fixed connection is likely very close to the connection.
ipinfo.network.hostingFacility	The hosting facility field is a quick determination of whether the connection originated at a facility that provides storage, computing or telecommunication services. A value of ―true indicates that the IP address is associated with a hosting facility; otherwise the value is ―false.
ipinfo.place.continent	Continent in which the device is located.
ipinfo.place.country	Country in which the device is located.
ipinfo.place.country.code	Code of the country in which the device is located
ipinfo.place.country.confidence	IP Intelligence provides a country confidence factor that reflects a relative measure of certainty that the user is in the location identified in the country field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned country.
ipinfo.place.country.consistencyCode	This provides an indication of the consistency of the location related data (i.e., country, state, city, postal code, latitude/longitude) over the recent past ranging from under 30 days, 30 - 60 days, 60 - 90 days, to over 90 days in four increments (i.e., value = 1, 2, 3 or 4, respectively).
ipinfo.place.region	Specifies generic regional information (such as northwest) for some countries, and specific information (such as Northern-Ireland) for a few other countries.
ipinfo.place.state	State in which the device is located.
ipinfo.place.state.confidence	IP Intelligence provides a state confidence factor that reflects a relative measure of certainty that the user is in the location identified in the 'state' field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned state.
ipinfo.place.city	City in which the device is located.
ipinfo.place.city.confidence	IP Intelligence provides a city confidence factor that reflects a relative measure of certainty that the user is in the location identified in the 'city' field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned city.
ipinfo.place.postCode	Postal code of the location where the device is located.
ipinfo.place.postCodeConfidence	Because IP addresses are located with different levels of precision, IP Intelligence provides a postal code confidence factor that reflects a relative measure of certainty that the user is in the location identified in the postalCode field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned postal code.

geometry

The coordinates (latitude and longitude) of the location of the device.

accuracy

This provides a location accuracy value (in meters) for the IP latitude/longitude results based on all available information about an IP address including asn, carrier, dma, organizationType, etc.

ipInfo.ipAddress

IP address mentioned in the request.

ipinfo.proxy.type

The network or protocol utilized by the server to proxy the user connection is identified. Proxy type classifications include the use of http, Tor, web and SOCKS.

ipinfo.proxy.anonymizerStatus

A status is assigned to IP addresses that have been detected as a proxy. The status is an indicator, at the highest level that an IP address may be associated with an anonymizing proxy. It is a relative indicator of how recent the proxy was found to be active and the proxy‘s category.

Possible values are:

active - The anonymizer tested positive within the last six months.
inactive - The anonymizer gave no positive test results within the last two years.
private - IP addresses with this designation allegedly contain anonymous proxies that are not publicly accessible. As such, they cannot be routinely tested with automated tools. These addresses usually belong to commercial ventures that sell anonymity services to the public (Hotspot Shield, CyberGhost, and others). Addresses with this designation are derived from ownership information or obtained from trusted, high-confidence sources.
suspect - The anonymizer tested positive within the last two years, but not the last six months.

If there is no status designation, then there is no specific evidence that the IP address has been associated with an anonymous proxy.

ipinfo.proxy.level

The level describes the degree of concealment provided by the use of the proxy. While all proxies act as an intermediary between the user and requested website, proxies provide differing levels of obfuscation of the user‘s originating IP address. Levels of obfuscation include:

transparent
anonymous
distorting
elite

ipinfo.proxy.lastDetected

Provides the most recent date on which IP Intelligence proxy detection technology confirmed the proxy was active or served as a private proxy.

The format of the last detected date is yyyy-mm-dd.

ipinfo.network.connectionFromHome

Indicates whether the connection is made from a residence. The home value is true if the connection is made from a residential or private location. Otherwise the value is false as the connection is considered to be made from a place of business, organization or public place. Mobile connections are considered private and have a true value.

ipinfo.network.organization

The Registering Organization is the entity responsible for the actions and content associated with a given block of IP addresses. Registering Organizations include many types of entities, including corporate, government, or educational entities, and ISPs managing the allocation and use of network blocks.

ipinfo.network.carrier

Provides the name of the organization that owns the ASN (Autonomous System Number). The carrier is responsible for the traffic carried on the network or set of networks designated as an Autonomous System (AS) and identified by the ASN.

ipinfo.network.organizationType

Classification of the type of organization of the place of connection. This field provides categories that are useful for gaining more information about the user. Over 40 different categories for industries are provided, including Insurance, Banking, Lodging, Dining, Government, Educations, Recreation, Advertising and Telecommunication, to name a handful.

ipinfo.network.organizationType.isicCode

The associated International Standard Industrial Classification code, Rev. 4, of the organization type.

ipinfo.network.organizationType.naicsCode

The associated North American Industry Classification System (NAICS) code, v2007, of the organization type.

ipinfo.network.connectionType

The mode in which a user has connected to the internet.

For example: ocx, tx, customer satellite, frame relay, cable, dsl, dial up etc.

ipinfo.network.lineSpeed

Indicates the speed of the connection to the Internet, divided into: high, medium, or low.

ipinfo.network.ipRouteType

The IP Routing Type (IPRT) specifies how the connection is routed through the Internet and can be used to determine how close the user is to the public IP address. For example, a user connecting through a fixed connection is likely very close to the connection.

ipinfo.network.hostingFacility

The hosting facility field is a quick determination of whether the connection originated at a facility that provides storage, computing or telecommunication services. A value of ―true indicates that the IP address is associated with a hosting facility; otherwise the value is ―false.

ipinfo.place.continent

Continent in which the device is located.

ipinfo.place.country

Country in which the device is located.

ipinfo.place.country.code

Code of the country in which the device is located

ipinfo.place.country.confidence

IP Intelligence provides a country confidence factor that reflects a relative measure of certainty that the user is in the location identified in the country field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned country.

ipinfo.place.country.consistencyCode

This provides an indication of the consistency of the location related data (i.e., country, state, city, postal code, latitude/longitude) over the recent past ranging from under 30 days, 30 - 60 days, 60 - 90 days, to over 90 days in four increments (i.e., value = 1, 2, 3 or 4, respectively).

ipinfo.place.region

Specifies generic regional information (such as northwest) for some countries, and specific information (such as Northern-Ireland) for a few other countries.

ipinfo.place.state

State in which the device is located.

ipinfo.place.state.confidence

IP Intelligence provides a state confidence factor that reflects a relative measure of certainty that the user is in the location identified in the 'state' field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned state.

ipinfo.place.city

City in which the device is located.

ipinfo.place.city.confidence

IP Intelligence provides a city confidence factor that reflects a relative measure of certainty that the user is in the location identified in the 'city' field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned city.

ipinfo.place.postCode

Postal code of the location where the device is located.

ipinfo.place.postCodeConfidence

Because IP addresses are located with different levels of precision, IP Intelligence provides a postal code confidence factor that reflects a relative measure of certainty that the user is in the location identified in the postalCode field. The possible values range from 0 (null) to 99. The higher the value, the greater the likelihood that the user is in the assigned postal code.