Network API
IP Intelligence Done Right
The Network API tells you whether an IP has been rented out as a proxy, and if so by which providers, when and how often. Residential and mobile proxies included, down to the TCP fingerprint.
Hosted in the EU.
Example lookups
Rented out as a residential proxy
Proxy providers · 22 Oct
IPRoyal
FlameProxies
SwiftProxyTijuana, Mexico · Telmex · AS8151 · Last seen 14:06 UTC
01The hard case
Residential proxies pass every reputation check
A residential proxy exit is a real home connection on a real ISP, so reputation lists built from network ownership wave it through. The Network API knows it has been rented out, and by which provider.
02The response
The largest commercial proxy dataset
{
"ip": "201.171.178.120",
"is_found": true,
"connection_type": "residential",
"anonymity": { "proxy": true, "vpn": false, "tor": false, "datacentre": false },
"location": { "country": "MX", "continent": "NA", "region": "Baja California", "city": "Tijuana", "postal_code": "22000",
"latitude": 32.5027, "longitude": -117.0037, "timezone": "America/Tijuana", "accuracy_km": 20 },
"ownership": { "asn": 8151, "as_name": "UNINET", "isp": "Telmex", "organisation": "Uninet S.A. de C.V.",
"domain": "telmex.com", "cidr": "201.171.0.0/16" },
"services": [
{ "id": "iproyal", "name": "IPRoyal", "types": ["residential"],
"first_seen": "2026-10-22T13:00:00Z", "last_seen": "2026-10-22T14:00:00Z", "sightings": 5 },
{ "id": "flameproxies", "name": "FlameProxies", "types": ["residential"],
"first_seen": "2026-10-22T10:00:00Z", "last_seen": "2026-10-22T11:00:00Z", "sightings": 2 },
{ "id": "swiftproxy", "name": "SwiftProxy", "types": ["residential"],
"first_seen": "2026-10-22T12:00:00Z", "last_seen": "2026-10-22T13:00:00Z", "sightings": 2 }
],
"vpn_services": [],
"hosting_services": [],
"history": {
"first_seen": "2026-10-22T10:51:00Z",
"last_seen": "2026-10-22T14:06:00Z",
"sightings": 9,
"active_days": 1,
"days": [
{ "date": "2026-10-22", "sightings": 9, "services": ["flameproxies", "iproyal", "swiftproxy"], "os": ["linux"] }
]
},
"network": {
"os": "linux",
"hops": 14,
"tcp_rtt_ms": 187.8,
"handshake_rtt_ms": 191.4,
"ttl": { "min": 64, "max": 64 },
"tcp": { "window_size": 29200, "mss": 1452, "window_scale": 7, "options": ["mss", "sok", "ts", "nop", "ws"] }
},
"meta": { "db_version": "2026-10-22T19:54:07Z", "request_id": "f99df9344a250497" }
}
- Proxy providers
- Every commercial provider seen using the IP, with first and last sighting.
- History
- Sightings per day, active days, first and last seen overall.
- Connection
- OS fingerprint, hop count, round trip time, TTL and TCP options.
03Why it matters
No stealth, residential or mobile proxy is safe from us
Most fraud runs through residential and mobile proxies these days. Millions of IPs enter and leave the commercial proxy markets every day, and keeping track of them is not easy. We can help you. Try our generous free tier.
04Integration
Call it with one HTTP request
GET with the address in the path, or POST with the address and how many days of history you want.
curl https://edge.trustsig.eu/v1/network/103.74.10.161 \
-H "Authorization: Bearer tsn_..."
Common questions
The address has been seen as an exit of a commercial proxy provider.
Yes. The connection type comes from the proxy products the address was seen in: datacentre, residential or mobile.
Sightings are recorded to the hour, and every answer carries the version of the database that produced it.
10 requests a minute, 50,000 lookups a month and 3 days of history per lookup. Paid plans extend history to 30 days and add the TCP fingerprint and TCP/IP metadata.
In the dashboard under Network API, Keys & usage. A key is shown once and belongs on your server, not in a browser.
Not yet. Support is being added.
Look up your first address in a minute
Create a key in the dashboard. Your first lookup is one curl command away.