IP intelligenceto detect
Geolocation, VPN detection, and threat intelligence — powered by 60+ open sources. Self-host or use our free API.
Comprehensive IP intelligence.
One API call.
IP Geolocation
Accurate country, city, coordinates, and timezone data from multiple authoritative sources including RFC 8805 geofeeds, RIR delegation, and ASN mapping.
VPN & Proxy Detection
8-layer detection with active probing across 109 ports and 13+ protocols. Identify VPN providers by name, detect residential proxies via behavioral analysis.
Threat Intelligence
Detect botnets, spam, scanners, and Tor exit nodes in real-time. Aggregating 30+ blocklist sources including Spamhaus, Firehol, and DShield.
Fraud Prevention
Composite fraud scoring powered by 44 weighted signals. Get a risk score (0-100) and recommended action: allow, review, step-up, or block.
Three steps.
Complete IP intelligence.
1curl -H "Authorization: Bearer YOUR_KEY" \2 https://api.geoiphub.com/v1/lookup/8.8.8.8
Global IP
coverage.
Our Rust-powered scanner ingests data from all 5 Regional Internet Registries, BGP route announcements, and 22 feed modules — rebuilding the full dataset every 2 hours.
Intelligence at
scale.
Powered by 60+
intelligence sources.
Aggregating data from blocklists, RIRs, VPN providers, and threat feeds worldwide.
Transparency
by design.
Our core is open source. Every detection algorithm, every scoring signal — auditable by anyone. Self-host for complete data sovereignty.
Open-Source Core
AGPL-3.0 licensed scanning engine. Audit every line of detection and scoring logic.
HMAC Authentication
HMAC-SHA256 signed requests between services with timestamp validation.
Self-Hosted Option
Run on your own infrastructure. Your data never leaves your network.
GDPR Ready
Full data sovereignty when self-hosted. No third-party data sharing.
Built for
developers.
Simple REST API. One endpoint. Rich JSON response with 140+ fields. Get started in minutes with any language.
Simple REST API
One endpoint. Rich JSON response.
API key auth
Single key authentication. No OAuth.
140+ fields
Geo, threat, VPN, proxy, fraud — all in one call.
Self-hostable
Run on your own infra with Docker.
curl -H "Authorization: Bearer YOUR_KEY" \https://api.geoiphub.com/v1/lookup/8.8.8.8
"GeoIPHub's VPN detection is leagues ahead of what we had before. The 8-layer detection catches proxies our old provider missed entirely."
Sarah Chen
Security Engineer, Fintech Corp
95% fraud reduction
Trusted by forward-thinking teams
Simple, transparent
pricing
Start free and scale as you grow. Self-host for unlimited. No hidden fees.
Free
For developers and small projects
- 5,000 requests/month
- Core API access
- Geolocation + threat data
- Community support
- No credit card required
Support
For teams and production workloads
- Unlimited requests
- All detection features
- Priority email support
- Dedicated support channel
- Custom scoring config
- SLA guarantee
- VPN provider identification
Self-Hosted
Full control on your infrastructure
- Everything unlimited
- Full source code
- No vendor lock-in
- Complete data control
- Docker deployment
- Self-healing database
- Custom scoring config
- Your own infrastructure
All plans include geolocation, VPN detection, threat intelligence, and fraud scoring. View all features
Ready to secure
your traffic?
Start with 5,000 free API requests. Self-host for unlimited. No credit card required.
No credit card required