Accurate IP Geolocation, VPN & Proxy Detection, and Risk Scoring
GeoIPHub is a real-time IP intelligence API. A single REST call returns precise IP geolocation with ASN and ISP, active VPN, proxy and Tor detection, and an explainable 0 to 100 IP risk score.
- City-level IP geolocation. Coordinates, timezone, ASN and ISP for every address, mapped to the live route rather than a months-old database.
- VPN, proxy and Tor detection. Residential and datacenter proxies confirmed by active probing rather than recycled blocklists.
- Explainable IP risk score. A 0 to 100 fraud score that shows every signal behind it, so you can justify a block instead of guessing.
1,500 free lookups a day · no card required · book a demo
Works with the stack you already run, from any language or framework.
Every lookup judged in real time
GeoIPHub helps engineering and fraud teams identify VPNs, proxies, and high-risk addresses before they reach a signup form, checkout, or login endpoint.
The moment a lookup lands, the address is scored against network ownership, open-port probes, blocklist intelligence, and behavioral signals. The verdict comes back as clean JSON: a risk score, the flags that fired, and a recommendation you can act on.
<50ms
request to verdict
40+
weighted signals per lookup
100%
flags backed by evidence
Lookup received
12:04:51
Signals scored
40+ checks
Verdict reached
score 87
RISK_SCORE · top signals
Everything You Need to Know About Any IP
Every GeoIPHub response returns IP geolocation, VPN and proxy detection, ASN and network data, and an explainable risk score: the IP intelligence that legacy databases gate behind enterprise tiers.
Accurate IP Geolocation
Resolve any IP address to country, region, city, coordinates, timezone, ASN, and ISP in real time. When a field cannot be verified, the API returns null instead of a confident guess.
VPN & Proxy Detection
VPNs, residential and datacenter proxies, and Tor exit nodes, with the named provider and a confidence score from live handshakes.
Explainable Risk Score
A 0 to 100 fraud score from 40+ weighted signals, with the exact methods that fired.
ASN & Classification
Residential, datacenter, mobile, or hosting, with full ASN and company.
Real-Time IP Classification
Unseen IP addresses are classified live in under 2.5 seconds, then served from memory in milliseconds.
WHOIS, rDNS & Abuse Contacts
Reverse DNS, WHOIS registry ownership, allocation history, and the published abuse contact in the same call.
IP intelligence for every fraud and trust workflow
One API powers account security, payment screening, bot detection, and geo-compliance — geolocation, VPN/proxy detection, threat intelligence, and risk scoring in a single lookup.
Trusted by Developers and Fraud Teams
Engineering and trust-safety teams rely on GeoIPHub every day to score IPs, block abuse, and keep real users moving.
“GeoIPHub gives our fraud team a single risk score we can act on at login and checkout — the proxy and VPN flags caught patterns our old stack missed entirely.”
IP intelligence guides and research
Practical guides on IP geolocation, VPN & proxy detection, and turning fraud signals into decisions.
How to Add Real-Time IP Fraud Detection to Your App in 10 Minutes (Free API)
A step-by-step guide to scoring every signup, login, and checkout for VPNs, proxies, and fraud with one API call — using GeoIPHub's free tier. cURL, Node, and Python examples included.
Not All Anonymous Traffic Is Fraud: Detecting VPNs and Privacy Tools Without Blocking Real Customers
Apple Private Relay, Cloudflare WARP, corporate VPNs, and mobile CGNAT all hide a user's IP — and most of those users are legitimate. Here is how to separate real customers from residential-proxy fraud in 2026 without false declines.
Residential Proxy Fraud in 2026: Why the IPs You Trust Most Are Now the Riskiest
Residential proxy networks crossed 500 billion queries a month and powered 94% of anonymized attacks in 2026. Here is how residential proxy fraud works, why legacy IP checks miss it, and how to detect it with live IP intelligence.
Answers to the Most Common Questions
Everything you need to know about IP geolocation accuracy, VPN and proxy detection, risk scoring, and getting started on the free tier.
Country-level accuracy is typically 99%+, with city-level accuracy varying by region and network type. Every lookup returns the complete response — location, ASN, connection type, timezone, currency, and more — cross-checked against multiple independent sources.
Each IP passes through seven verification method families — ASN classification, official provider lists, and active protocol probing on 25+ ports across 11 VPN and proxy protocols, combined with datacenter range analysis, residential-proxy network mapping, and live Tor exit node tracking — so anonymized traffic is flagged the moment it hits your API.
The free tier gives you 2,000 requests per day with no credit card required. You get full access to geolocation, VPN/proxy detection, and risk scoring — enough to integrate, test, and run smaller production workloads before upgrading.
Lookups are served from an in-memory dataset, so most responses return in well under 100 milliseconds. The API is built for inline use — score an IP inside your login, checkout, or signup flow without adding noticeable latency.
Threat intelligence is aggregated from 30+ blocklist sources alongside our own network measurements, port scans, and registry data. The 0–100 risk score weighs 40+ distinct fraud signals, and datasets are refreshed continuously so detections stay current.
GeoIPHub is built GDPR-aware: lookups process the IP address you send and nothing else, no personal profiles are built, and no PII is stored from lookup traffic. All requests are encrypted in transit. See our compliance page for full details.
One API lookup of one IP address equals one request, regardless of how many data fields the response includes. Repeated lookups of the same IP each count separately, and batch endpoints count one request per IP in the batch.
Yes — paid plans are covered by our refund policy. If GeoIPHub is not the right fit, contact us and we will make it right. We recommend starting on the free tier first so you can validate accuracy and coverage against your own traffic.
Start Scoring IPs in Minutes
Get 1,500 free requests per day — geolocation, VPN and proxy detection, threat intelligence, and a 0–100 risk score from a single API call. No credit card required.