What Is an ISP?

An ISP (Internet Service Provider) is the company that sells you internet access and assigns the public IP address your traffic uses. In paid media, ISP data helps separate everyday residential and mobile visitors from datacenter, VPN, and hosting ranges that often carry invalid clicks.

ISPs connect homes, offices, and phones to the wider internet over fiber, cable, DSL, fixed wireless, satellite, or mobile radio. They own or lease last-mile infrastructure, buy transit or peer with other networks, and enforce plans for speed, usage, and acceptable use. Almost every real shopper who clicks a Google ad travels through some ISP before they reach your landing page.

How an ISP works

When you go online, your modem or phone attaches to the ISP’s network. The ISP assigns a public IP (often dynamic on consumer plans, sometimes static on business lines) and routes packets toward their destination. Fraud systems and analytics see that IP as belonging to the ISP’s address blocks and usually to its ASN.

At home, a router then shares the connection over Wi-Fi. In an office, traffic may leave through a corporate gateway. Either way, the billable path still starts with an ISP or a mobile carrier that acts like one. Content networks and ad platforms sit further along the path; they are not ISPs, but they depend on ISP routing to reach real users.

Pricing usually tracks download speed, upload speed, and contract terms. Fiber and cable dominate dense markets; satellite and fixed wireless fill gaps. Peering quality upstream affects how reliably traffic reaches ad servers and the SaaS tools marketers use every day.

ISP, VPN, and datacenter: what the label really means

An ISP is not the same as a VPN or a hosting provider. A VPN adds another hop so the exit IP may show the VPN company’s network instead of the user’s home ISP. Datacenter and cloud hosts advertise different ASNs and ranges that look nothing like a consumer broadband provider.

That distinction matters for traffic quality. Legitimate paid clicks usually come from consumer ISPs and mobile carriers mixed across geos. Sudden volume from hosting-only ranges, or ISP geography that disagrees with the campaign’s targeting, is a classic signal of suspicious behavior. A proxy can hide the true origin, so ISP alone is never enough, but it remains a core context field in any serious review of suspicious clicks.

Why ISP data matters for click fraud

Advertisers care about ISP because budget and bidding follow the click, not the story the dashboard tells. Bot operators and click farms prefer exits that look like home broadband or cellular users. If you only glance at country and device, a pool of residential ISP IPs can look healthy while conversions stay flat.

ISP context helps you read the rest of the evidence: velocity within one provider, bursts from a handful of ASNs, or mobile-carrier IPs that never convert. Those patterns show up in both click fraud and wider ad fraud. Tools that score bot traffic combine ISP and ASN class with behavior and device signals so you are not left blocking entire consumer networks by hand.

Mobile carriers are ISPs too. Carrier-grade NAT means many phones can share one public IP, which is why IP-only blocks create false positives on cellular traffic. Treat carrier ISPs as a different class from a small hosting ASN: useful for context, dangerous as a blunt exclusion list.

How teams use ISP signals day to day

In a fraud console, filter or group clicks by ISP and ASN when CTR spikes without revenue. Compare the ISP mix on converting campaigns against non-converting ones. If “high intent” geos are dominated by unfamiliar hosting providers, dig into session behavior before you raise bids.

Keep the definition sharp: the ISP is who routes the IP you see, not who runs the ad auction. Use it as one input next to conversion quality, device consistency, and timing. That is how advertisers keep residential and mobile demand while starving scripted abuse that only borrowed a trustworthy ISP label.