Real-time IP intelligence API

IP intelligence API to geolocate, detect VPNs, proxies, and residential proxies, score every IP, protect, and secure your traffic

Pinpoint IP geolocation, detect VPNs, proxies, and residential proxies, and score every IP from 0–100 — all in a single API call. 60+ intelligence sources, 140+ data fields per lookup. Free tier with 2,000 requests/day, no credit card required.

60+intelligence sourcesAGGREGATED
109ports scannedACTIVE PROBING
140+data fields per IPENRICHMENT
99.99%IP coverageGLOBAL
60+intelligence sourcesAGGREGATED
109ports scannedACTIVE PROBING
140+data fields per IPENRICHMENT
99.99%IP coverageGLOBAL
Core capabilities

Comprehensive IP intelligence.
One API call.

01

IP Geolocation

Accurate country, city, GPS coordinates, timezone, and accuracy radius — sourced from authoritative registry data and continuously refreshed, never a stale CSV blob.

02

VPN, Proxy & Residential-Proxy Detection

8-layer detection engine with 109-port active scanning across 13+ protocols. Behavioral analysis catches the residential proxies and consumer VPNs other providers miss.

03

Threat Intelligence

In-house threat-intel engine flags botnets, malware C2, spam sources, scanners, crawlers, and Tor — every verdict ships with confidence and a recommended action.

AB
04

Fraud Risk Scoring

Composite 0–100 fraud score from 44 individually weighted signals — plus a clear policy verdict on every IP: allow, review, step-up auth, or block.

Process

Three steps.
Complete IP intelligence.

workflow.ts
1curl -H "Authorization: Bearer YOUR_KEY" \
2  https://api.geoiphub.com/v1/lookup/8.8.8.8
Ready
Data pipeline

Global IP
coverage.

Our Rust-powered scanner ingests data from all 5 Regional Internet Registries, BGP route announcements, and 22 feed modules — rebuilding the full dataset every 2 hours.

5
RIR sources
22
Feed modules
2h
Refresh cycle
Edge NetworkAll operational
ARIN
North America
RIR
RIPE NCC
Europe / Middle East
RIR
APNIC
Asia Pacific
RIR
LACNIC
Latin America
RIR
AFRINIC
Africa
RIR
BGP Routes
Global
Live
Live metrics

Intelligence at
scale.

Live|--:--:--
0+
Intelligence sources
0
Ports actively scanned
0+
Data fields per IP
0+
Blocklist sources
Detection engine

One engine.
Every IP signal you need.

Our in-house detection engine analyzes every IP across 12+ signal categories — from smart proxy detection to a 0–100 risk score — in a single API call.

Smart Proxy Detection
8-layer engine
Residential Proxy Analysis
Behavioral signals
VPN Identification
Provider-level
Tor Exit Detection
Real-time
Datacenter Classification
ASN-aware
Bot & Scanner Detection
Active probing
Botnet & C2 Signals
Threat intel
Fraud Risk Scoring
44 weighted signals
ASN & Network Intel
Connection type
IP Geolocation
City-level accuracy
Reputation Engine
Continuous decay
Confidence Scoring
0–100 per IP
Smart Proxy Detection
8-layer engine
Residential Proxy Analysis
Behavioral signals
VPN Identification
Provider-level
Tor Exit Detection
Real-time
Datacenter Classification
ASN-aware
Bot & Scanner Detection
Active probing
Botnet & C2 Signals
Threat intel
Fraud Risk Scoring
44 weighted signals
ASN & Network Intel
Connection type
IP Geolocation
City-level accuracy
Reputation Engine
Continuous decay
Confidence Scoring
0–100 per IP
Confidence Scoring
0–100 per IP
Reputation Engine
Continuous decay
IP Geolocation
City-level accuracy
ASN & Network Intel
Connection type
Fraud Risk Scoring
44 weighted signals
Botnet & C2 Signals
Threat intel
Bot & Scanner Detection
Active probing
Datacenter Classification
ASN-aware
Tor Exit Detection
Real-time
VPN Identification
Provider-level
Residential Proxy Analysis
Behavioral signals
Smart Proxy Detection
8-layer engine
Confidence Scoring
0–100 per IP
Reputation Engine
Continuous decay
IP Geolocation
City-level accuracy
ASN & Network Intel
Connection type
Fraud Risk Scoring
44 weighted signals
Botnet & C2 Signals
Threat intel
Bot & Scanner Detection
Active probing
Datacenter Classification
ASN-aware
Tor Exit Detection
Real-time
VPN Identification
Provider-level
Residential Proxy Analysis
Behavioral signals
Smart Proxy Detection
8-layer engine
Use cases

One API.
Every IP-driven decision.

Teams use GeoIPHub to stop fraud, block VPNs and proxies, defend against bots, enforce geo-compliance, and harden account security — all from a single real-time API.

44 fraud signals

Fraud & Chargeback Prevention

Block payment fraud, account takeovers, and bonus abuse with a 0–100 risk score on every checkout, signup, and login.

8-layer detection

VPN & Proxy Filtering

Identify VPNs, residential proxies, and Tor exits with provider-level accuracy. Block, challenge, or step-up auth on suspicious IPs.

Real-time scoring

Bot & Scraper Defense

Stop credential stuffing, scraping, and automated abuse before it touches your origin. Datacenter and bot signals on every request.

City-level accuracy

Geo Compliance & Targeting

Enforce regional licensing, route users to the right market, and personalize by city — using authoritative RIR-grade location data.

Per-login risk

Account Security & ATO

Spot impossible-travel logins, anonymizer use, and high-risk ASNs in your auth flow. Trigger 2FA only when the risk score warrants it.

Sub-100ms p95

Ad-Tech & Click Fraud

Protect ad spend by filtering datacenter, VPN, and bot traffic before it counts as a click. Pre-bid IP intelligence with sub-100ms latency.

For developers

Built for
developers.

Simple REST API. One endpoint. Rich JSON response with 140+ fields. Get started in minutes with any language.

Simple REST API

One endpoint. Rich JSON response.

API key auth

Single key authentication. No OAuth.

140+ fields

Geo, threat, VPN, proxy, fraud — all in one call.

SDK-friendly

Idiomatic clients for Python, Node.js, Go, and PHP.

curl -H "Authorization: Bearer YOUR_KEY" \
  https://api.geoiphub.com/v1/lookup/8.8.8.8
What people say
01 / 04

"GeoIPHub's VPN detection is leagues ahead of what we had before. The 8-layer detection catches proxies our old provider missed entirely."

S

Sarah Chen

Security Engineer, Fintech Corp

Key Result

95% fraud reduction

Trusted by forward-thinking teams

Meridian LabsFlux SystemsBeacon AIPrism AnalyticsNova TechQuantum CorpAtlas DigitalVertex Labs
Meridian LabsFlux SystemsBeacon AIPrism AnalyticsNova TechQuantum CorpAtlas DigitalVertex Labs
Pricing

Simple, transparent
pricing

Pick the plan that fits your traffic. Upgrade or cancel anytime — no setup fees, no hidden charges.

01

Free

Try GeoIPHub — perfect for prototypes and side projects

$0forever

1,000 requests / day

  • Geolocation (country, region, city)
  • ASN & ISP lookup
  • Basic metadata
  • 1 API key
  • 7-day request log retention
  • Community support
  • VPN / proxy / Tor detection
  • Threat intelligence
  • WHOIS, DNS, fraud scoring
Start free
Most Popular
02

Starter

Production-grade IP intelligence with VPN, proxy, and threat detection

$39/ mo

25,000 requests / day

  • Everything in Free
  • VPN / proxy / Tor / hosting detection
  • Threat intelligence (blocklists, botnets)
  • Network metadata (ports, abuse contact)
  • 5 API keys
  • 30-day request log retention
  • Bulk lookup endpoint
  • Email support
  • WHOIS, DNS, fraud scoring
Contact sales
03

Business

Full fraud-prevention stack — WHOIS, DNS, ML scoring, webhooks

$199/ mo

250,000 requests / day

  • Everything in Starter
  • WHOIS data
  • PTR record / FCrDNS validation
  • Composite fraud score (0–100)
  • Recommended action (allow / review / block)
  • Webhook events
  • 50 API keys
  • 365-day request log retention
  • Priority support + 99.9% SLA
Contact sales
04

Enterprise

Custom SLA, dedicated infrastructure, on-prem MMDB downloads

Custom

Unlimited requests

  • Everything in Business
  • Unlimited requests
  • Custom SLA up to 99.99%
  • Dedicated support engineer
  • MMDB download for offline lookups
  • Custom data retention
  • Volume pricing
  • On-prem deployment options
  • Procurement & MSA review
Contact sales

All plans billed in USD. Cancel anytime — your plan stays active until the end of the current billing period. See our refund & cancellation policy.

Need something specific? Book a demo or email us.

Ready to secure
your traffic?

Start with 2,000 free API requests every day. No credit card required.

No credit card required