Skip to main content
Core Service

IP Intelligence

Advanced IP analysis with proxy/VPN detection, precise geolocation, and risk scoring. Every IP lookup returns a fraud score, on every plan.

1 credit

Per Lookup

CSV

Bulk Upload

Tor

Exit Nodes Flagged

1Lookup IP lookup API result with geolocation, ISP and a low fraud risk score on a globe with location pin

Advanced IP Analysis Capabilities

Geolocation, threat, and risk intelligence for fraud prevention, security, and user experience optimization

Precise Geolocation Intelligence

Get the city, region, country, postal code, time zone and coordinates behind any IPv4 or IPv6 address, with the ISP and organization that runs it.

City-level location
IPv4 and IPv6
ISP and organization
Time zone detection

Advanced Proxy/VPN Detection

Detect VPN services, proxy servers, Tor exit nodes, and anonymization tools. Our machine learning algorithms identify even sophisticated circumvention attempts.

VPN and proxy flags
High detection accuracy
Tor network identification
Proxy chain analysis

Connection Type Intelligence

Distinguish between residential, commercial, mobile, satellite, and datacenter IPs. Essential for fraud prevention, content delivery optimization, and security policy enforcement.

ISP classification
Network topology mapping
Business vs residential
Mobile carrier detection

Threat Detection

Identify malicious IPs including botnets, known attackers, compromised hosts, and reputation blacklists. Real-time threat intelligence from 50+ security feeds.

50+ threat intelligence feeds
Botnet identification
Attack pattern analysis
Real-time reputation scoring

Risk Scoring Engine

Advanced machine learning algorithms calculate risk scores based on IP behavior, geolocation anomalies, and historical threat data.

ML-powered scoring
Behavior analysis
Historical patterns
Dynamic risk assessment

High-Performance API

One IP per API call, or a whole list by CSV upload, on the same key and credits as phone and email checks. Each API key can send 200 requests per 10 seconds, and each account can make up to 1,000 requests a minute in total across all its keys.

CSV bulk upload
High-availability infrastructure
Global edge network
200 requests per 10 seconds for each API key

Why Choose Our IP Intelligence Platform

Leading the industry in accuracy, speed, and threat detection

Location and risk in one call

One request returns the location, the ISP, proxy, hosting and mobile flags and a fraud score

One credit per lookup

Every IP lookup costs 1 credit, on the same key as phone and email checks

Detection Coverage

VPN, proxy, datacenter and Tor exit flags on every lookup

Real-Time Updates

Live threat intelligence with continuous database updates

Trusted by Security-Conscious Businesses

Real organizations protecting their infrastructure and improving user experiences

E-commerce Fraud Prevention

Protect your online store from fraudulent transactions by analyzing IP risk patterns, detecting suspicious locations, and blocking known proxy servers used by fraudsters.

Account takeover prevention
Payment fraud blocking
Fake account detection
Chargeback reduction

Content Personalization & Localization

Deliver personalized content, pricing, and experiences based on visitor location. Improve conversion rates with geo-targeted campaigns and localized user interfaces.

Dynamic pricing
Language selection
Regional compliance
Local promotions

Geographic Access Control

Ensure compliance with regional regulations like GDPR, CCPA, and export controls. Restrict access to content or services based on user location and jurisdiction.

GDPR compliance
Export control enforcement
Content licensing
Regional restrictions

Digital Advertising Protection

Protect your ad spend by identifying bot traffic, click farms, and invalid traffic sources. Ensure your advertising budget reaches real users and improves campaign ROI.

Bot traffic filtering
Click fraud prevention
Ad targeting optimization
Campaign performance

Corporate Security & Access Management

Enhance corporate security by analyzing employee access patterns, detecting unauthorized VPN usage, and enforcing location-based access policies.

VPN policy enforcement
Access anomaly detection
Location verification
Security compliance

Financial Services Risk Assessment

Strengthen KYC processes and anti-money laundering efforts by analyzing customer IP patterns, detecting location inconsistencies, and flagging high-risk connections.

KYC enhancement
AML compliance
Account verification
Transaction monitoring

IP Intelligence Market Insights

Industry research highlighting the critical importance of IP analysis and geolocation

Global IP Security at a Glance

Global VPN Users1.6B
Bad Bot Traffic32%

Market research shows over 1.6 billion people use VPN services globally, while Imperva reports 32% of web traffic consists of bad bots requiring detection.

Business Impact & ROI

Ad Fraud Losses$84B
E-commerce Fraud41%

Juniper Research estimates $84 billion in ad fraud losses globally, with LexisNexis reporting 41% of e-commerce fraud attempts use anonymization tools.

IP Intelligence Business Value

78%

Enterprises Use Geolocation

45%

Proxy/VPN Detection Need

1 credit

Per IP, One at a Time or by CSV

Forrester research indicates 78% of enterprises rely on geolocation for security decisions, while 45% actively need proxy/VPN detection. A 1Lookup IP lookup returns the location, the network and VPN, proxy and datacenter flags for 1 credit, one address at a time, by CSV upload or over the API.

Developer-Friendly IP Lookup API

Get complete IP intelligence with a single API call - geolocation, threat detection, and risk scoring

IP Lookup API
// IP lookup with fraud detection
const response = await fetch('https://app.1lookup.io/api/v1/ip', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    ip: '104.227.91.244'
  })
})

// Response
{
  "success": true,
  "data": {
    "risk_assessment": {
      "risk_level": "MEDIUM",
      "fraud_score": 40
    },
    "classification": {
      "connection_type": "DATACENTER"
    },
    "insights": {
      "location": {
        "city": "Miami",
        "country": "United States"
      }
    }
  }
}

Frequently Asked Questions

Common questions about IP lookups

Technical Specifications

Tor Exit Nodes

Flagged

Risk Flags

VPN, proxy, datacenter

Bulk Checks

CSV upload

Data Updates

Real-time

Start Analyzing IPs Today

Protect your business from fraud and deliver personalized experiences with our IP intelligence platform

Free trial credits • Setup in 5 minutes • Premium support