Accurate IP Geolocation, VPN & Proxy Detection, and Risk Scoring
GeoIPHub is a real-time IP intelligence API. A single REST call returns precise IP geolocation with ASN and ISP, active VPN, proxy and Tor detection, and an explainable 0 to 100 IP risk score.
- City-level IP geolocation. Coordinates, timezone, ASN and ISP for every address, mapped to the live route rather than a months-old database.
- VPN, proxy and Tor detection. Residential and datacenter proxies confirmed by active probing rather than recycled blocklists.
- Explainable IP risk score. A 0 to 100 fraud score that shows every signal behind it, so you can justify a block instead of guessing.
1,500 free lookups a day · no card required · book a demo
Works with the stack you already run, from any language or framework.
Every lookup judged in real time
GeoIPHub helps engineering and fraud teams identify VPNs, proxies, and high-risk addresses before they reach a signup form, checkout, or login endpoint.
The moment a lookup lands, the address is scored against network ownership, open-port probes, blocklist intelligence, and behavioral signals. The verdict comes back as clean JSON: a risk score, the flags that fired, and a recommendation you can act on.
<50ms
request to verdict
40+
weighted signals per lookup
100%
flags backed by evidence
Lookup received
12:04:51
Signals scored
40+ checks
Verdict reached
score 87
RISK_SCORE · top signals
Everything You Need to Know About Any IP
Every GeoIPHub response returns IP geolocation, VPN and proxy detection, ASN and network data, and an explainable risk score: the IP intelligence that legacy databases gate behind enterprise tiers.
Accurate IP Geolocation
Resolve any IP address to country, region, city, coordinates, timezone, ASN, and ISP in real time. When a field cannot be verified, the API returns null instead of a confident guess.
VPN & Proxy Detection
VPNs, residential and datacenter proxies, and Tor exit nodes, with the named provider and a confidence score from live handshakes.
Explainable Risk Score
A 0 to 100 fraud score from 40+ weighted signals, with the exact methods that fired.
ASN & Classification
Residential, datacenter, mobile, or hosting, with full ASN and company.
Real-Time IP Classification
Unseen IP addresses are classified live in under 2.5 seconds, then served from memory in milliseconds.
WHOIS & Abuse Contacts
WHOIS registry ownership: netname, allocation status, registration and last-changed dates, and the published abuse contact in the same call.
IP intelligence for every fraud and trust workflow
One API powers account security, payment screening, bot detection, and geo-compliance — geolocation, VPN/proxy detection, threat intelligence, and risk scoring in a single lookup.
Trusted by Developers and Fraud Teams
Engineering and trust-safety teams rely on GeoIPHub every day to score IPs, block abuse, and keep real users moving.
“GeoIPHub gives our fraud team a single risk score we can act on at login and checkout — the proxy and VPN flags caught patterns our old stack missed entirely.”
IP intelligence guides and research
Practical guides on IP geolocation, VPN & proxy detection, and turning fraud signals into decisions.
How to Detect Click Fraud by IP Address (Without an Exclusion List)
IP exclusion lists cap at 500 per campaign and fraud IPs rotate faster than you can add them. Here is how to detect click fraud by IP with scoring instead.
How Geolocation Data Enhances Regional Content Licensing
Regional content licensing limits distribution to specific territories. How IP geolocation enforces it on every request — and why VPN detection is essential.
What Is a VPN and How to Detect VPN Traffic on Your Site
What a VPN is, how it hides a user's real IP address, and how to detect VPN traffic on your site — including how to score VPN orders at your Shopify checkout.
Answers to the Most Common Questions
Everything you need to know about IP geolocation accuracy, VPN and proxy detection, risk scoring, and getting started on the free tier.
Country-level accuracy is typically 99%+, with city-level accuracy varying by region and network type. Every lookup returns the complete response — location, ASN, connection type, timezone, currency, and more — cross-checked against multiple independent sources.
Each IP passes through seven verification method families — ASN classification, official provider lists, and active protocol probing on 25+ ports across 11 VPN and proxy protocols, combined with datacenter range analysis, residential-proxy network mapping, and live Tor exit node tracking — so anonymized traffic is flagged the moment it hits your API.
The free tier gives you 2,000 requests per day with no credit card required. You get full access to geolocation, VPN/proxy detection, and risk scoring — enough to integrate, test, and run smaller production workloads before upgrading.
Lookups are served from an in-memory dataset, so most responses return in well under 100 milliseconds. The API is built for inline use — score an IP inside your login, checkout, or signup flow without adding noticeable latency.
Threat intelligence is aggregated from 30+ blocklist sources alongside our own network measurements, port scans, and registry data. The 0–100 risk score weighs 40+ distinct fraud signals, and datasets are refreshed continuously so detections stay current.
GeoIPHub is built GDPR-aware: lookups process the IP address you send and nothing else, no personal profiles are built, and no PII is stored from lookup traffic. All requests are encrypted in transit. See our compliance page for full details.
One API lookup of one IP address equals one request, regardless of how many data fields the response includes. Repeated lookups of the same IP each count separately, and batch endpoints count one request per IP in the batch.
Yes — paid plans are covered by our refund policy. If GeoIPHub is not the right fit, contact us and we will make it right. We recommend starting on the free tier first so you can validate accuracy and coverage against your own traffic.
Start Scoring IPs in Minutes
Get 1,500 free requests per day — geolocation, VPN and proxy detection, threat intelligence, and a 0–100 risk score from a single API call. No credit card required.