IPinfo

IPinfo.io

The IPinfo module interfaces with the IPinfo API to provide comprehensive intelligence and context enrichment for IP addresses.

Important

API Key Required: This module relies entirely on the IPinfo API. If no API key is configured (see API Credentials for instructions), the module will expose zero capabilities and will not execute, adhering to our Global Settings logic.

Configuration & Limits

IPinfo offers various subscription tiers, starting from a free Lite tier up to extensive premium data sets. Depending on your configured API tier (via IPINFOPaid in your Network Configuration), the module intelligently queries the appropriate endpoint to maximize data extraction without encountering tier-based permission errors.

• Lite Tier: Uses the standard free endpoint.
• Paid Tier: Uses the rich lookup endpoint (enabled via IPINFOPaid=true), granting access to deeper ASN, privacy, and mobile network context. Note that the Enterprise tier is not supported by this module.

---

1. IP Enrichment

The module accepts IPv4 and IPv6 nodes, extracting deep context based on the available data from your subscription tier:

• Geo-Location: Extracts geographic data, generating a unified Geo property containing City, Region, Country (short and long form), exact Latitude/Longitude, Zipcode, and Timezone.
• Autonomous System: Maps IPs to the global BGP routing tables, extracting the ASN node (e.g., AS15169).
• AS Metadata: Extracts the official Organization (AS Owner), AS Type (e.g., ISP, Hosting, Business, Education), and the primary Domain registered to the AS (automatically tagging it as Linked).
• Privacy & Threat Detection: Scans IPs against known anonymity networks and privacy services. If the IP is identified as a privacy-oriented node, it extracts:
  • Anonymity Profiling: Automatically assigns high-value behavioral tags based on the service type: VPN, Tor Exit, Proxy, Relay, or Residential Proxy.
  • Attribution: Identifies the specific Privacy Service provider by name.
• Mobile Networks: If the IP belongs to a cellular network, it extracts the Mobile Network details, including the Mobile Brand/Carrier Name, MCC (Mobile Country Code), and MNC (Mobile Network Code).
• Hosting & Routing Context: Identifies infrastructure-level details. If the IP belongs to a data center or hosting provider, it extracts the Company Type and flags the IP as Hosting. It also identifies whether the IP utilizes Anycast routing.
• Reverse IP: Identifies the primary hostnames or domains associated with the IP address (often the hosting provider or PTR record), automatically marking them with the Reverse IP tag.