Everything you need.
One API call.
GeoIPHub combines geolocation, VPN detection, threat intelligence, and fraud scoring into a single, comprehensive API response with 140+ data fields.
IP Geolocation
Accurate country, city, coordinates, and timezone from multiple authoritative sources.
Learn moreCountry & Region
RIR delegation files from all 5 registries
City-Level Precision
RFC 8805 geofeeds + rDNS hostname extraction
GPS Coordinates
Latitude & longitude with accuracy radius
Timezone Detection
Automatic timezone mapping per IP
VPN & Proxy Detection
8-layer detection with active probing across 109 ports and 13+ protocols.
Learn more8-Layer Detection
ASN matching, DNS lists, provider APIs, port probing, rDNS, WHOIS, RIPE Atlas
Protocol Detection
OpenVPN, WireGuard, SOCKS5, IPSec, Shadowsocks, V2Ray, and more
109-Port Scanning
Active probing across 13+ protocols in parallel
Behavioral Analysis
Residential proxy detection via UA diversity & burst patterns
Threat Intelligence
Detect botnets, spam, scanners, and Tor exit nodes from 30+ blocklist sources.
Learn moreBotnet Detection
C2 tracking via abuse.ch Feodo Tracker, URLhaus, SSLBL
Spam Detection
7 DNSBL zones + 25 blocklist sources
Scanner Detection
10+ operator fingerprints with 4-tier verification
Honeypot Tracking
IPs hitting honeypots in the last 30 days
44 Fraud Signals
Individually weighted and configurable signals
Risk Score 0-100
Composite score combining all detection data
Recommended Actions
Allow (0-25), review (26-50), step-up (51-75), block (76-100)
Context-Aware
Residential + threat scored higher than datacenter + threat
Ready to get started?
5,000 free requests per month. No credit card required.