Accurate IP Geolocation, VPN & Proxy Detection, and Risk Scoring
GeoIPHub is a real-time IP intelligence API. A single REST call returns precise IP geolocation with ASN and ISP, active VPN, proxy and Tor detection, and an explainable 0 to 100 IP risk score. Built for developers and fraud teams who need to allow, review, or block traffic at signup, login, and checkout.
- City-level IP geolocation. Coordinates, timezone, ASN and ISP for every address, mapped to the live route rather than a months-old database.
- VPN, proxy and Tor detection. Residential and datacenter proxies confirmed by active probing rather than recycled blocklists.
- Explainable IP risk score. A 0 to 100 fraud score that shows every signal behind it, so you can justify a block instead of guessing.
1,500 free lookups a day · no card required · book a demo
Works with the stack you already run, from any language or framework.
Every lookup judged in real time
GeoIPHub helps engineering and fraud teams identify VPNs, proxies, and high-risk addresses before they reach a signup form, checkout, or login endpoint.
The moment a lookup lands, the address is scored against network ownership, open-port probes, blocklist intelligence, and behavioral signals. The verdict comes back as clean JSON: a risk score, the flags that fired, and a recommendation you can act on.
<50ms
request to verdict
40+
weighted signals per lookup
100%
flags backed by evidence
Lookup received
12:04:51
Signals scored
40+ checks
Verdict reached
score 87
RISK_SCORE · top signals
Everything You Need to Know About Any IP
Every GeoIPHub response returns IP geolocation, VPN and proxy detection, ASN and network data, and an explainable risk score: the IP intelligence that legacy databases gate behind enterprise tiers.
Accurate IP Geolocation
Resolve any IP address to country, region, city, coordinates, timezone, ASN, and ISP in real time. When a field cannot be verified, the API returns null instead of a confident guess.
VPN & Proxy Detection
VPNs, residential and datacenter proxies, and Tor exit nodes, with the named provider and a confidence score from live handshakes.
Explainable Risk Score
A 0 to 100 fraud score from 40+ weighted signals, with the exact methods that fired.
ASN & Classification
Residential, datacenter, mobile, or hosting, with full ASN and company.
Real-Time IP Classification
Unseen IP addresses are classified live in under 2.5 seconds, then served from memory in milliseconds.
WHOIS & Abuse Contacts
WHOIS registry ownership: netname, allocation status, registration and last-changed dates, and the published abuse contact in the same call.
IP intelligence for every fraud and trust workflow
One API powers account security, payment screening, bot detection, and geo-compliance — geolocation, VPN/proxy detection, threat intelligence, and risk scoring in a single lookup.
Trusted by Developers and Fraud Teams
Engineering and trust-safety teams rely on GeoIPHub every day to score IPs, block abuse, and keep real users moving.
“GeoIPHub gives our fraud team a single risk score we can act on at login and checkout — the proxy and VPN flags caught patterns our old stack missed entirely.”
IP intelligence guides and research
Practical guides on IP geolocation, VPN & proxy detection, and turning fraud signals into decisions.
How to Detect Web Scraping: Logs, IP Lookups and Blind Spots
How to detect web scraping in your access logs: real lookups of CCBot, AhrefsBot, a Tor exit and a cloud server, one Googlebot claim traced, and what IPs miss.
Bot Detection by IP: What the IP Can and Can't Tell You
Bot detection by IP, tested on five real IPs: Googlebot, a cloud server, a Tor exit, a Censys scanner and an iCloud relay. What each signal proves and misses.
GPTBot vs OAI-SearchBot vs ChatGPT-User: Which to Block
GPTBot vs OAI-SearchBot vs ChatGPT-User: what each OpenAI bot does, what blocking each costs, and a real IP check against their 18, 39 and 230 prefixes.
Answers to the Most Common Questions
Everything you need to know about IP geolocation accuracy, VPN and proxy detection, risk scoring, and getting started on the free tier.
Country-level accuracy is typically 99%+, with city-level accuracy varying by region and network type. Every lookup returns the complete response — location, ASN, connection type, timezone, currency, and more — cross-checked against multiple independent sources.
Each IP passes through about seven method families: ASN classification, official VPN provider server lists, active protocol probing on 25+ ports across 11 VPN and proxy protocols, threat and blocklist feeds (including the official Tor exit list), WHOIS/RDAP keyword analysis, reverse DNS checks and DNS blocklists. Residential proxies are not detected today.
The free tier gives you 1,500 requests per day with no credit card required. You get every data field, including geolocation, VPN/proxy detection, and risk scoring: enough to integrate, test, and run smaller production workloads before upgrading.
Known IPs are read from a memory-mapped database in under a millisecond. An IP we have not seen before is classified live in under 2.5 seconds, then stored, so every later lookup is fast. That makes it practical to score an IP inline in your login, checkout, or signup flow.
From 30+ data sources that we name: threat feeds (Spamhaus DROP and EDROP, FireHOL Level 1, Feodo Tracker), the official Tor exit list, DNS blocklists, registry data from all 5 RIRs, and our own protocol probes. The 0–100 risk score weighs 40+ signals. Threat feeds refresh daily and VPN/proxy probes every 2 days; the methodology page lists every cadence.
GeoIPHub is built GDPR-aware: lookups process the IP address you send and nothing else, no personal profiles are built, and no PII is stored from lookup traffic. All requests are encrypted in transit. See our compliance page for full details.
One API lookup of one IP address equals one request, regardless of how many data fields the response includes. Repeated lookups of the same IP each count separately.
Yes — paid plans are covered by our refund policy. If GeoIPHub is not the right fit, contact us and we will make it right. We recommend starting on the free tier first so you can validate accuracy and coverage against your own traffic.
Start Scoring IPs in Minutes
Get 1,500 free requests per day — geolocation, VPN and proxy detection, threat intelligence, and a 0–100 risk score from a single API call. No credit card required.