# IP Intel

> ASN, operator, country, region, network type, Tor, known VPN/proxy ranges, reverse DNS, open DNSBLs and a reasoned 0-100 risk signal.

Use cases: fraud prevention, moderation and access protection.
Datasets are held locally and refreshed daily. No paid third-party lookup runs per request.
Unknown or unavailable source data is returned as null and explained in unavailable_fields. The risk score is a heuristic signal, not proof.

## Paid endpoints
- POST https://ip.netzhandwerker.de/ip — 0.001 USDC — per_request
- POST https://ip.netzhandwerker.de/ip/batch — 0.0005 USDC — per_address

## Discovery
- https://ip.netzhandwerker.de/openapi.json
- https://ip.netzhandwerker.de/.well-known/x402
- https://ip.netzhandwerker.de/mcp
- https://ip.netzhandwerker.de/pricing
- https://ip.netzhandwerker.de/health

## Data sources
- IPtoASN bulk database (PDDL)
- DB-IP City Lite (CC BY 4.0; https://db-ip.com)
- Tor Project bulk exit list
- Official cloud-provider prefix publications plus FireHOL anonymous ranges
- Open DNS blocklists queried through DNS; per-list failures are exposed