Datacenter IP Address API

I maintain a public API to check whether an IP address belongs to a data center IP address range such as Azure, AWS, Digitalocean, Google Cloud Platform and many other cloud providers. Please read the full blog article for more a through introduction.

And please consider reading another blog article: "How to find out if an IP address belongs to a Hosting / Cloud Provider?" - Where I explain in detail about my approch of finding datacenter IP addresses.

The purpose of this API is simple: This API allows you to check whether an IP address belongs to an datacenter or not.

Author Nikolai Tschacher (incolumitas.com)
API Access Free & unlimited (fair use)
API Version v0.7 (20th March 2022)
API Endpoint https://api.incolumitas.com/datacenter?ip=3.5.140.2
Supported Datacenters Amazon AWS, Microsoft Azure, Google Cloud, IBM Cloud, OVH, Digital Ocean, Hetzner Online, CloudFlare, Oracle Cloud, Tor Network and many more
IPv6 Support Yes

Live API



{
  "message": "Please make an API request",
}

Datacenter/Cloud IP API Key Features

  • Always updated: The API database is automatically updated every day. Data is gathered from many sources: Self published IP ranges from large cloud providers, whois lookups and many other sources
  • Pretty fast: The API is very performant. On average, an IP lookup takes 0.042ms (server side time consumed)
  • Bulk IP Lookups: You can lookup up to 100 IP addresses per API call

ChangeLog

20th March 2022

  • Improved API
  • Remove the service attribute in API output. Only attribute that identifies the cloud provider is now datacenter
  • Add bulk IP lookup mode. Allow up to 100 ips in bulk lookup mode. Only return datacenter IP addresses. Uses POST method. Ignore Invalid IPs

14th March 2022 and 15th March 2022

  • Added 39,246 IPv4 and 360,372 IPv6 CIDR ranges ranges to the database from AFRINIC, RIPE-NCC, APNIC, ARIN and LACNIC whois databases.
  • Some Examples: Lookup of Cloudflare IP, Lookup of M247 Ltd IP , Lookup of Packethub S.A. IP, Lookup of Leaseweb IP
  • Added the following datacenters to the API: XT Global Networks LTD, OVH, myLoc, ServiHosting Networks S.L., Clouvider Limited, Hetzner Online, GoDaddy Operating Company, LLC., Claranet limited, Selectel Ltd., M247 Ltd, Imperva, Inc., Beget, trueserver.nl, 1&1 Internet, DediPath, iomart Hosting Ltd, Aruba S.p.a, Strato AG, DataCamp Limited, Rackspace, Inc., Reg.Ru Hosting, Heficed, LeaseWeb, Mittwald, The Constant Company, LLC, American Internet Services, Hostinger, PlusServer GmbH, Equinix, Inc., GHOSTnet GmbH, It7 Networks Inc, xservers.ro, Cloudflare, IBM Cloud, iWeb Technologies Inc., SysEleven SysEleven GmbH, G-Core Labs S.A., Tencent Cloud, Choopa, LLC., DigitalOcean, Webair Internet Development Inc, Hostway, Phoenix NAP, LLC, Contabo GmbH, A2 Hosting, Zenlayer, Optimate Server, LogicWeb Inc., Packethub S.A., MULTACOM Inc., veesp.com vps clients, Sakura Internet Inc., Zscaler, Inc., Vultr Holdings LLC, Enzu Inc., 24Shells Inc, GZ Systems (PureVPN), HIVELOCITY, Inc., Transip Bv., Host Europe, Internap Corporation, IP Exchange GmbH, Datapipe, Savvis, home.pl S.A., Redstation Limited, hosting.ua, Daou Technology, Linode, Amazon AWS, kinx.net, Dreamscape, Xneelo (Pty) Ltd, Fiber Grid Inc, Performive LLC, Microsoft Azure, UCloud, Hostgator, Hostwinds.com, Namecheap, Stackpath, LLC, ALL INKL, Online SAS (Scaleway), ServerCentral, Quadranet, Inc, FDC Servers, ColoCrossing, Aptum Technologies, Sharktech Inc., Wholesale Internet, Inc, Dreamhost, Pair Networks, ServerHub, Psychz Networks, CoreSpace,Inc., Cologix, Inc., Colocation America Inc, ServerMania Inc., Peak10, Google Cloud, Fasthosts Internet Ltd, latisys, Mullvad VPN, InMotion, Unified Layer, Fastly, Inc., Ubiquity Hosting.

11th March 2022

  • Added bulk IP lookup mode, up to 100 IP addresses can be queried with one API request
  • Added fast IPv6 lookup support (Speedup of factor 883x, average lookup time now 0.056ms instead of 49.99ms)

9th March 2022

  • Added cidr attribute to the API output
  • Improved API performance for IPv4 (IPv6 still pending), the performance is now 1500x times faster on average (Average lookup time before: 100.37ms, average lookup time now 0.068ms)

8th March 2022

  • Added cloud service providers / hosting providers / VPN service providers: Linode, Mullvad VPN, B2 Net Solutions Inc., scaleway.com, Vultr Holdings, LLC, The Constant Company, LLC, QuadraNet Enterprises LLC, Zscaler, Inc., CloudCone, LLC, Psychz Networks, BuyVM Services (buyvm.net), DataCamp Limited, ColoCrossing, IT7 Networks Inc., G-Core Labs S.A., AlmaHost Ltd, Reg.Ru Hosting, Packethub S.A., Clouvider Limited, 24Shells Inc, Performive LLC, Packet Host, Inc., veesp.com vps clients, tzulo, inc., Cluster Logic Inc, Owl Limited, HIVELOCITY, Inc., SysEleven SysEleven GmbH
  • Added lookup time in ms to the API output as attribute elapsed_ms
  • Updated this API page
  • Updated all IP address ranges

6th November 2021

  • Updated all IP address ranges
  • Add cloud provider m247 Ltd, servers.com Inc., Leaseweb Usa Inc., often used for proxies/fraud
  • Checking for common datacenter in whois lookup

29th September 2021

  • Updated all IP address ranges
  • Added dedicated API endpoint: https://api.incolumitas.com/datacenter?ip=3.5.140.2
  • Old API Endpoint: https://abs.incolumitas.com/datacenter?ip=1.2.3.4

API Usage Documentation

You can reach the API endpoint with this URL: https://api.incolumitas.com/datacenter?ip=

If you pass the IP address 3.5.140.2 to the API by calling https://api.incolumitas.com/datacenter?ip=3.5.140.2, you'll obtain the result:

{
  "ip": "3.5.140.2",
  "is_datacenter": true,
  "ip_data_source": "self_published_ip_ranges",
  "cidr": "3.5.140.0/22",
  "region": "ap-northeast-2",
  "datacenter": "Amazon AWS",
  "service": "AMAZON",
  "network_border_group": "ap-northeast-2",
  "other_matches": [
    {
      "ip_data_source": "self_published_ip_ranges",
      "cidr": "3.5.140.0/22",
      "region": "ap-northeast-2",
      "datacenter": "Amazon AWS",
      "service": "EC2",
      "network_border_group": "ap-northeast-2"
    }
  ],
  "elapsed_ms": 1.15
}

Alternatively, you can also lookup IPv6 addresses. Try the url https://api.incolumitas.com/datacenter?ip=2406:dafe:e0ff:ffff:ffff:ffff:dead:beef, which yields:

{
  "ip": "2406:dafe:e0ff:ffff:ffff:ffff:dead:beef",
  "is_datacenter": true,
  "ip_data_source": "self_published_ip_ranges",
  "cidr": "2406:dafe:e000::/40",
  "region": "ap-east-1",
  "datacenter": "Amazon AWS",
  "service": "AMAZON",
  "network_border_group": "ap-east-1",
  "elapsed_ms": 1.34
}

If you don't specify any IP address with the ip= query parameter and you invoke https://api.incolumitas.com/datacenter directly, the client's own IP address will be used for lookup. In my case, I get the following output:

{
  "ip": "84.157.228.82",
  "is_datacenter": false,
  "elapsed_ms": 0.28
}

because my private ISP IP address obviously doesn't belong to any datacenter.

Usage with JavaScript:

fetch('https://api.incolumitas.com/datacenter') 
  .then(response => response.json())
  .then(function(data) {
    console.log(data)
  })

The IP address ranges for the cloud providers are kept up to date and the IP ranges are pulled from the upstream sources every 4 hours.

Bulk IP Lookup

You can also lookup up to 100 IP addresses at once with a bulk API lookup mode.

For that, you will need to make a POST request. See this example with curl:

curl --header "Content-Type: application/json" \
  --request POST \
  --data '{"ips": ["162.158.0.0", "2406:dafe:e0ff:ffff:ffff:ffff:dead:beef", "162.88.0.0", "20.41.193.225"]}' \
  https://api.incolumitas.com/datacenter

The HTTP method needs to be POST and the API endpoint is the same: https://api.incolumitas.com/datacenter.

Only the IP addresses that have a match (is_datacenter equals true) will returned by the API. All other IP addresses will be omitted in order to save network bandwith. Duplicate IPs will be removed.

Example with JavaScript:

const ips = ["162.158.0.0", "2406:dafe:e0ff:ffff:ffff:ffff:dead:beef", "162.88.0.0", "20.41.193.225"];

fetch('https://api.incolumitas.com/datacenter', {
  method: 'POST',
  headers: {
    'Accept': 'application/json, text/plain, */*',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({ips: ips})
}).then(res => res.json())
  .then(res => console.log(res));

More Examples for the IP Address Datacenter API

In the following section, I will show examples for looking up IP addresses belonging to the three biggest cloud providers AWS, Azure and GCP:

Looking up Azure IP Address

Looking up an Azure IP address: https://api.incolumitas.com/datacenter?ip=20.41.193.225

{
  "ip": "20.41.193.225",
  "is_datacenter": true,
  "ip_data_source": "self_published_ip_ranges",
  "cidr": "20.41.193.224/27",
  "name": "AzurePortal",
  "datacenter": "Microsoft Azure",
  "region": "",
  "regionId": 0,
  "platform": "Azure",
  "systemService": "AzurePortal",
  "other_matches": [
    {
      "datacenter": "Microsoft Azure",
      "asn": "8075",
      "cidr": "20.40.0.0/13",
      "ip_data_source": "whois_database"
    }
  ],
  "elapsed_ms": 16.2
}

Looking up AWS IP Address

Looking up an AWS IP address: https://api.incolumitas.com/datacenter?ip=3.5.140.2

{
  "ip": "3.5.140.2",
  "is_datacenter": true,
  "ip_data_source": "self_published_ip_ranges",
  "cidr": "3.5.140.0/22",
  "region": "ap-northeast-2",
  "datacenter": "Amazon AWS",
  "service": "AMAZON",
  "network_border_group": "ap-northeast-2",
  "other_matches": [
    {
      "ip_data_source": "self_published_ip_ranges",
      "cidr": "3.5.140.0/22",
      "region": "ap-northeast-2",
      "datacenter": "Amazon AWS",
      "service": "EC2",
      "network_border_group": "ap-northeast-2"
    }
  ],
  "elapsed_ms": 1.16
}

Looking up GCP IP Address

Looking up an GCP IP address: https://api.incolumitas.com/datacenter?ip=23.236.48.55

{
  "ip": "23.236.48.55",
  "is_datacenter": true,
  "datacenter": "Google Cloud",
  "asn": "15169",
  "cidr": "23.236.48.0/20",
  "ip_data_source": "whois_database",
  "other_matches": [
    {
      "ip_data_source": "self_published_ip_ranges",
      "cidr": "23.236.48.0/20",
      "datacenter": "Google Cloud"
    }
  ],
  "elapsed_ms": 27.27
}

Looking up AWS IPv6 Address

And looking up a AWS IPv6 address: https://api.incolumitas.com/datacenter?ip=2600:1F18:7FFF:F800:0000:ffff:0000:0000:

{
  "ip": "2600:1F18:7FFF:F800:0000:ffff:0000:0000",
  "is_datacenter": true,
  "ip_data_source": "self_published_ip_ranges",
  "cidr": "2600:1f18:7fff:f800::/56",
  "region": "us-east-1",
  "datacenter": "Amazon AWS",
  "service": "ROUTE53_HEALTHCHECKS",
  "network_border_group": "us-east-1",
  "elapsed_ms": 0.38
}

As you can see from the example lookups above, the API gives additional meta data information for a specific IP address such as regional and data center information.

Supported Datacenters / Cloud Services

Currently, the API supports IP address ranges from the following cloud providers:

# Cloud Provider Number of IPv4 Addresses Number of IPv6 Addresses API support
1 Amazon AWS 144,807,562 4,722,366,482,869,645,000,000
2 Microsoft Azure 98,310,633 1,208,925,819,614,629,200,000,000
3 Google Cloud 50,452,565 1,208,925,819,614,629,200,000,000
4 Akamai Technologies 42,688,775 1,208,925,819,614,629,200,000,000
5 Alibaba Cloud 27,621,563 633,825,300,114,114,700,000,000,000,000
6 One.com A/S 24,197,856 79,228,162,514,264,340,000,000,000,000
7 OVH 16,713,066 18,446,744,073,709,552,000
8 IBM Cloud 15,097,620 1,208,925,819,614,629,200,000,000
9 Savvis 10,142,698 4,835,703,278,458,517,000,000,000
10 Hetzner Online 9,868,233 309,485,009,821,345,100,000,000,000
11 Cloudflare 9,126,348 79,228,162,514,264,340,000,000,000,000
12 Liquid Web 8,857,554 1,208,925,819,614,629,200,000,000
13 DigitalOcean 6,145,331 316,912,650,057,057,350,000,000,000,000
14 1&1 Internet 4,194,972 1,208,925,819,614,629,200,000,000
15 LeaseWeb 3,452,136 79,228,162,514,264,340,000,000,000,000
16 Equinix, Inc. 2,684,829 1,208,925,819,614,629,200,000,000
17 Rackspace, Inc. 2,528,973 1,208,925,819,614,629,200,000,000
18 Cloudinnovation 2,509,056 18,446,744,073,709,552,000
19 Claranet limited 2,404,068 18,446,744,073,709,552,000
20 Energy Group Networks 2,380,800 1,208,925,819,614,629,200,000,000
21 Fiber Grid Inc 2,235,904 0
22 PlusServer GmbH 2,089,170 18,446,744,073,709,552,000
23 Selectel 2,043,168 309,485,009,821,345,100,000,000,000
24 M247 Ltd 1,815,840 1,208,925,819,614,629,200,000,000
25 Oracle Cloud 1,577,482 0
26 GoDaddy Operating Company, LLC. 1,567,737 79,228,162,514,264,340,000,000,000,000
27 GHOSTnet GmbH 1,511,397 18,446,744,073,709,552,000
28 Linode 1,472,718 1,208,925,819,614,629,200,000,000
29 DreamHost 1,458,751 1,208,925,819,614,629,200,000,000
30 Aruba S.p.a 1,447,972 79,228,162,514,264,340,000,000,000,000
31 ServiHosting Networks S.L. 1,441,616 316,912,650,057,057,350,000,000,000,000
32 Online SAS (Scaleway) 1,413,113 1,237,940,039,285,380,300,000,000,000
33 Huawei Cloud Service 1,310,818 1,208,925,819,614,629,200,000,000
34 Strato AG 1,261,265 79,228,162,514,264,340,000,000,000,000
35 iomart Hosting Ltd 1,249,437 79,228,162,514,264,340,000,000,000,000
36 Contabo GmbH 1,240,036 79,228,162,514,264,340,000,000,000,000
37 Internap Corporation 1,232,575 18,446,744,073,709,552,000
38 Choopa, LLC. 1,208,565 1,208,925,819,614,629,200,000,000
39 Sakura Internet Inc. 1,106,153 633,825,300,114,114,700,000,000,000,000
40 Aptum Technologies 1,044,480 309,485,009,821,345,100,000,000,000
41 Host Europe 944,337 79,228,162,514,264,340,000,000,000,000
42 ColoCrossing 852,736 0
43 home.pl S.A. 806,501 1,208,925,819,614,629,200,000,000
44 Quadranet, Inc 681,726 2,417,851,639,229,258,300,000,000
45 Fastly, Inc. 605,210 1,208,925,819,614,629,200,000,000
46 Lumen 556,139 1,208,925,819,614,629,200,000,000
47 DediPath 551,244 18,446,744,073,709,552,000
48 It7 Networks Inc 502,553 1,208,925,819,614,629,200,000,000
49 Hostway 462,238 633,825,300,114,114,700,000,000,000,000
50 trueserver.nl 459,999 1,208,925,819,614,629,200,000,000
51 Reg.Ru Hosting 454,102 1,208,925,819,614,629,200,000,000
52 DataCamp Limited 450,822 633,825,300,114,114,700,000,000,000,000
53 Locaweb Serviços de Internet S/A 445,440 1,208,925,819,614,629,200,000,000
54 G-Core Labs S.A. 439,459 19,342,813,113,834,067,000,000,000
55 myLoc 436,497 1,208,925,819,614,629,200,000,000
56 Hostinger 409,308 1,208,925,819,614,629,200,000,000
57 netcup GmbH 391,261 1,208,925,819,614,629,200,000,000
58 IP Exchange GmbH 389,098 1,208,925,819,614,629,200,000,000
59 A2 Hosting 364,186 79,228,162,514,264,340,000,000,000,000
60 Zscaler, Inc. 363,313 79,228,162,514,264,340,000,000,000,000
61 CoreSpace,Inc. 358,144 79,228,162,514,264,340,000,000,000,000
62 Transip B.V 356,869 1,208,925,819,614,629,200,000,000
63 kinx.net 344,576 1,208,925,819,614,629,200,000,000
64 XT Global Networks LTD 341,512 79,228,162,514,264,340,000,000,000,000
65 Hostwinds.com 331,518 633,825,300,114,114,700,000,000,000,000
66 Combell NV 326,893 1,208,925,819,614,629,200,000,000
67 Datapipe 326,124 1,208,925,819,614,629,200,000,000
68 UCloud 323,765 1,208,925,819,614,629,200,000,000
69 Gmo Internet, Inc 310,016 1,208,925,819,614,629,200,000,000
70 Arsys 301,013 1,208,925,819,614,629,200,000,000
71 Xneelo 300,544 18,446,744,073,709,552,000
72 ServerCentral 284,734 633,825,300,114,114,700,000,000,000,000
73 Imperva, Inc. 284,141 79,228,162,514,264,340,000,000,000,000
74 DomainFactory 281,455 1,208,925,819,614,629,200,000,000
75 latisys 279,869 1,208,925,819,614,629,200,000,000
76 iWeb Technologies Inc. 262,142 79,228,162,514,264,340,000,000,000,000
77 TimeWeb 246,113 1,208,925,819,614,629,200,000,000
78 Stackpath, LLC 238,454 1,208,925,819,614,629,200,000,000
79 Heficed 235,388 1,208,925,819,614,629,200,000,000
80 Input Output Flood LLC 226,560 79,228,162,514,264,340,000,000,000,000
81 X server Co., Ltd. 221,894 1,208,925,819,614,629,200,000,000
82 Infomaniak 200,861 1,208,925,819,614,629,200,000,000
83 Clouvider Limited 197,654 1,208,925,819,614,629,200,000,000
84 Daou Technology 187,952 1,208,925,819,614,629,200,000,000
85 Node4 184,331 18,446,744,073,709,552,000
86 Performive LLC 174,329 1,208,925,819,614,629,200,000,000
87 LogicWeb Inc. 158,707 633,825,300,114,114,700,000,000,000,000
88 Rackray 157,078 1,208,925,819,614,629,200,000,000
89 Redstation Limited 152,921 1,208,925,819,614,629,200,000,000
90 SysEleven GmbH 149,924 1,208,925,819,614,629,200,000,000
91 Wholesale Internet, Inc 149,760 1,208,925,819,614,629,200,000,000
92 Steadfast 147,200 1,208,925,819,614,629,200,000,000
93 Duocast B.V. 144,193 18,446,744,073,709,552,000
94 Fortress Integrated Technologies 140,925 1,208,925,819,614,629,200,000,000
95 HopOne 137,216 1,208,925,819,614,629,200,000,000
96 tzulo, inc. 136,192 4,951,760,157,141,521,000,000,000,000
97 Mittwald 135,185 309,485,009,821,345,100,000,000,000
98 Namecheap 130,809 79,228,162,514,264,340,000,000,000,000
99 LightEdge Solutions, Inc. 123,392 4,951,760,157,141,521,000,000,000,000
100 Sharktech Inc. 121,856 0
101 Enzu Inc. 114,220 1,208,925,819,614,629,200,000,000
102 24Shells Inc 111,356 633,825,300,114,114,700,000,000,000,000
103 Unified Layer 91,904 1,208,925,819,614,629,200,000,000
104 DinaHosting S.L. 88,450 4,722,366,482,869,645,000,000
105 SuperHosting.BG 84,764 1,208,925,819,614,629,200,000,000
106 First Colo 81,641 18,446,744,073,709,552,000
107 Serverplan srl 78,120 1,208,925,819,614,629,200,000,000
108 Hivelocity 75,968 79,228,162,514,264,340,000,000,000,000
109 veesp.com vps clients 75,567 79,228,162,514,264,340,000,000,000,000
110 VSHosting 72,500 1,208,925,819,614,629,200,000,000
111 Zenlayer 71,394 633,825,300,114,114,700,000,000,000,000
112 Dreamscape 70,651 4,951,760,157,141,521,000,000,000,000
113 Krystal Hosting 65,834 633,825,300,114,114,700,000,000,000,000
114 Media Temple 62,464 0
115 GZ Systems (PureVPN) 60,431 0
116 BuyVM (frantech) 60,159 1,208,925,819,614,629,200,000,000
117 InMotion 57,855 18,446,744,073,709,552,000
118 Phoenix NAP, LLC 54,129 79,228,162,514,264,340,000,000,000,000
119 cloudsigma 46,576 1,208,925,819,614,629,200,000,000
120 Hostpoint 42,999 4,951,760,157,141,521,000,000,000,000
121 World4You Internet Services GmbH 37,030 633,825,300,114,114,700,000,000,000,000
122 Kamatera 36,091 1,208,925,819,614,629,200,000,000
123 Packethub S.A. 35,161 1,208,925,819,614,629,200,000,000
124 Beget 33,792 0
125 Amsio B.V. 28,203 0
126 ServerHub 27,136 79,228,162,514,264,340,000,000,000,000
127 Hosting Ukraine 26,873 18,446,744,073,709,552,000
128 20i 22,253 4,722,366,482,869,645,000,000
129 Servers Australia 18,944 1,208,925,819,614,629,200,000,000
130 Synergy Wholesale 15,616 1,208,925,819,614,629,200,000,000
131 hosting.ua 12,349 1,208,925,819,614,629,200,000,000
132 Optimate Server 5,108 18,446,744,073,709,552,000
133 Webair Internet Development Inc 4,863 633,825,300,114,114,700,000,000,000,000
134 ALL INKL 4,350 0
135 Hostgator 4,158 0
136 Hurricane Electic 4,154 1,208,925,819,614,629,200,000,000
137 FDC Servers 3,325 0
138 Cologix, Inc. 3,069 0
139 HostDime 2,137 633,825,300,114,114,700,000,000,000,000
140 Peak10 2,048 0
141 MULTACOM Inc. 2,045 79,228,162,514,264,340,000,000,000,000
142 Colocation America Inc 1,536 0
143 HostPapa 1,531 0
144 Vultr Holdings LLC 1,308 19,342,813,113,834,067,000,000,000
145 Bluehosting 1,024 0
146 Fasthosts Internet Ltd 1,024 2,417,851,639,229,258,300,000,000
147 Ubiquity Hosting 767 0
148 AlmaHost Ltd 512 0
149 TierPoint 512 1,208,925,819,614,629,200,000,000
150 ServerMania Inc. 512 0
151 Psychz Networks 511 0
152 Mullvad VPN 507 1,208,925,819,614,629,200,000,000
153 The Constant Company, LLC 256 0
154 American Internet Services 63 79,228,162,514,264,340,000,000,000,000
155 Bluehost Inc. 0 309,485,009,821,345,100,000,000,000

The API database is updated every 4 hours with the official source of the IP address ranges of the cloud provides listed above (with a ✓). For some cloud providers such as OVH or Hetzner there is no official IP address range source, so I have to rely on third party sources.

Sources for Datacenter IP Address Ranges

Where do I get the CIDR address ranges for the datacenters?

Most datacenters publish their own IP ranges, such as AWS or Google Cloud. But often, those IP address ranges are not complete. For that reason, other means of lookup have to be used, such as whois lookups or searching through ASN databases.

This API follows the following lookup logic:

  1. First, check if the IP is to be found in the published IP ranges from the providers.
  2. If the first step farils, a lookup of the IP address with whois 105.226.177.72 is conducted. If the orgname belongs to a datacenter, we have a match. Simple string matching.
  3. If the above whois lookup did not produce a datacenter match, we lookup the autonomous system OriginAS: AS21928 and we perform a simple grep cat ripe-asn.txt | grep -E -i "^13335\s" in the ASN lists to check if the ASN belongs to a large cloud provider.

Other techniques are pursuited, if the above algorithm doesn't yield a match.