IP Intelligence API.
Implement real-time IP enrichment at scale.

Spur Context API transforms raw IPs into actionable intelligence in milliseconds, delivering verified, explainable context where it matters most.

[View Pricing]

Spur Context API provides hosted IP enrichment lookups of the highest-fidelity IP intelligence available. With pre-built integrations into the most common threat analysis platforms and services, Spur ensures that security teams can instantly leverage data to protect their environments from the latest evasion and obfuscation methods.

Explore an example of Spur’s enrichment model. Hover or tap each field to see what it means and how it contributes to classifying anonymized traffic.

For more details on attributes surfaced by the Spur platform, visit Explore Our Data.

Key Benefits:

Enrich IPs in milliseconds to detect anonymized, proxy, or high-risk traffic in real time.
Integrate directly into existing security and fraud systems using a RESTful interface or SDKs.
Enable flexible IP enrichment workflows with a consumption-based model.

> SRC {} .JSON

 1
{
 2
  : {
 3
    "NUMBER": 49981,
 4
    "ORGANIZATION": "WORLDSTREAM"
 5
  },
 6
  : {
 7
    "BEHAVIORS": ["FILE_SHARING", "TOR_PROXY_USER"],
 8
    "CONCENTRATION": {
 9
      "CITY": "POLĀIA KALĀN",
10
      "COUNTRY": "IN",
11
      "DENSITY": 0.2675,
12
      "GEOHASH": "TSN",
13
      "SKEW": 6762,
14
      "STATE": "MADHYA PRADESH"
15
    },
16
    "COUNT": 4,
17
    "COUNTRIES": 2,
18
    "PROXIES": ["ABCPROXY_PROXY", "9PROXY_PROXY",
19
    "NETNUT_PROXY", "GOPROXY_PROXY"],
20
    "SPREAD": 4724209,
21
    "TYPES": ["MOBILE", "DESKTOP"]
22
  },
23
  : "DATACENTER",
24
  : "89.39.106.191",
25
  : {
26
    "CITY": "AMSTERDAM",
27
    "COUNTRY": "NL",
28
    "STATE": "NORTH HOLLAND"
29
  },
30
  : "WORLDSTREAM B.V.",
31
  : ["CALLBACK_PROXY", "TUNNEL",
32
  "GEO_MISMATCH"],
33
  : ["OPENVPN"],
34
  : [
35
    {
36
      "ANONYMOUS": true,
37
      "ENTRIES": ["89.39.106.82"],
38
      "OPERATOR": "PROTON_VPN",
39
      "TYPE": "VPN"
40
    }
41
  ]
42
}

All data shown is for demonstration purposes only. Actual enrichment results depend on your spur subscription and delivery method.

How The Spur API Delivers IP Intelligence to Your Systems

01
Query:
Submit any IPv4 address to Spur Context API.
02
Enrich:
Spur analyzes network, infrastructure, and behavioral indicators in real time.
03
Return:
The API responds instantly with 20+ attributes structured for integration into your authentication, fraud, or threat detection systems.

Why Teams Choose Spur Context API

Tracks hundreds of millions of active anonymized IPs and 1,000+ VPN and proxy services updated in real time.

Broad Coverage

Tracks hundreds of millions of active anonymized IPs and 1,000+ VPN and proxy services updated in real time.

Zero-Latency Access

Provides immediate enrichment for millions of IPs, including ASN, geolocation, and non-anonymized addresses, with no delay to decisioning systems.

Quick Insights

Includes an intuitive dashboard for on-demand lookups and contextual analysis.

Depth of Data

Returns 20+ enrichment attributes per IP – covering geography, ASN, proxy/VPN attribution, device and connection type, and tunnel entry/exit context.

Real-Time Updates

Continuously refreshes to reflect the latest observed anonymization infrastructure and behavioral changes.

Seamless Integrations

Connects directly with Splunk, Microsoft Sentinel, Cortex XSOAR, Vertex Power-Up, Anomali, ThreatQuotient, and Spiderfoot HX for end-to-end visibility.

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Use Cases

—

Validate jurisdictions accurately at decision time.

Customer Success

Trusted by Teams Who Need to See What’s Real.

Technology Company:
Reduced fraudulent signups by enriching traffic with real-time VPN and proxy detection.
Read Case Study
Financial Institution:
Reduced account takeover risk by integrating real-time IP enrichment into login workflows.
Read Case Study
Security Operations Team:
Improved attribution by enriching alerts with VPN, proxy, and infrastructure context via API.
Read Case Study