IP Verification Advanced

Advanced IP Verification allows you to detect within seconds whether an IP address is associated with an anonymous or potentially risky connection, such as proxy, VPN, or Tor nodes.

The service analyzes the user's IP network, assigns a risk score, and flags any abuse or suspicious activity linked to the IP, helping to prevent online fraud such as identity theft, fake accounts, and chargebacks.

Advanced IP Verification is available worldwide.

IP Information Request

REQUEST EXAMPLE

POST /ip-advanced

To use the service, simply make a POST request to the /ip-advanced endpoint by passing the IP you want to verify as a parameter.

POST /ip-advanced/+393331234567

The response usually takes a few seconds, but if you want to receive a notification when all response data is available, you can set up a callback.

{
  "callback": {
    "url": "https://your-server.site/123232",
    "custom": 123
  }
}

NOTE: When configuring the callback, it is mandatory to include a valid URL capable of handling POST requests. You can also populate the 'custom' field with any additional data you wish to include in the callback response.

RESPONSE EXAMPLE

POST /ip-advanced

The response includes over 25 pieces of information about the IP address, such as:

• id, needed later to retrieve the request data
• fraud score related to the IP (=75 suspicious but not necessarily fraudulent, =88 extremely suspicious)
• frequency of abuse activity involving the IP in the IPQualityScore network (values: high, medium, low). Can be used together with the Fraud Score to identify misconduct
• presence of recent abuse connected to this IP (e.g., compromised device, fake app installation)
• identification of IPs with a consistent history of abusive behavior over 6 months or more
• suspected connection via VPN
• suspected connection via TOR network
• suspected connection via proxy (SOCKS, Elite, Anonymous, VPN, Tor, etc.)
• indication that bots or non-human traffic have recently used this IP for automated fraudulent behavior
• indication that the IP uses a dynamic assignment protocol. This means that users with this IP will likely be assigned a different IP by the provider in the future
• certification that the IP is scanned by a security scanner from a trusted provider such as Tenable, Qualys, etc.
• IPs likely to be used by multiple users simultaneously, such as libraries, cafés, hotel lobbies, hospitals, corporate VPNs, etc.
• identification of enterprise networks or access points with low abuse rates and high security protocols. These IPs may still be compromised by malware, but the network as a whole will be considered trustworthy if this value is 'true'
• transaction-related data (useful for user data scoring). Includes shipping/billing address, email, phone, and company name
• hostname and ISP
• crawler detection (e.g., Googlebot, Bingbot)
• organization (e.g., Google Workspace)
• connection type (residential, corporate, etc.)
• operating system and version
• browser and version
• device brand and model
• IP time zone
• latitude and longitude of the IP
• country code (ISO)
• region, city, and ZIP code associated with the IP
• request status (NEW, WAIT, DONE)

"data": {
        "ip": "142.251.209.46",
        "createdAt": "2025-07-29T12:17:11+00:00",
        "updatedAt": "2025-07-29T12:17:11+00:00",
        "state": "DONE",
        "message": "Success",
        "success": true,
        "proxy": false,
        "host": "mil04s51-in-f14.1e100.net",
        "isp": "-",
        "organization": "Google Workspace",
        "asn": "-",
        "country_code": "IT",
        "city": "Milan",
        "region": "Lombardia",
        "timezone": "Europe/Rome",
        "latitude": 45.47000122,
        "longitude": 9.19999981,
        "zip_code": "N/A",
        "is_crawler": false,
        "connection_type": "Data Center",
        "recent_abuse": false,
        "abuse_velocity": "none",
        "bot_status": false,
        "vpn": false,
        "tor": false,
        "active_vpn": false,
        "active_tor": false,
        "mobile": false,
        "fraud_score": 0,
        "frequent_abuser": "-",
        "high_risk_attacks": "-",
        "shared_connection": "-",
        "dynamic_connection": "-",
        "security_scanner": "-",
        "trusted_network": "-",
        "operating_system": [],
        "browser": [],
        "device_brand": [],
        "device_model": [],
        "transaction_details": [],
        "errors": [],
        "id": "6888bbc73eb5c5964009f933"
    }

If it cannot be handled within the first 10 seconds, a partial response is returned with status NEW and an id to handle the request asynchronously.

In this case, a second (free) request will be needed to obtain the full data.

Retrieve IP Details

GET /ip-advanced/

Using the GET /ip-advanced/ endpoint, you can retrieve the data requested in the POST call by simply providing the id.

REQUEST EXAMPLE

GET /ip-advanced

The endpoint to check the status of the request is /ip-advanced and the method used is GET. If a callback is implemented, you will be notified when your request is processed and the data is available.

This is an example of a request using the id obtained in the previous POST call

GET/ip-advanced/66db0a03e8ba8710290e3c0f

The response will return the same data described above, obtained via the POST method.

The Advanced IP Verification service is designed for companies operating in areas such as e-commerce, financial services, advertising, streaming, lead generation, and digital platforms, where it is essential to detect and block suspicious activity related to anonymous browsing.

Specifically, the service allows you to:

• detect the use of VPN, proxy, Tor, or anonymous connections, flagging potentially fraudulent or automated access
• assess the risk linked to an IP address through fraud scores and abuse frequency scores
• filter untrustworthy traffic in onboarding, login, checkout, or conversion flows
• prevent fraud in marketing or lead generation activities by identifying repetitive access, bots, or fake users
• gain the right information to strengthen antifraud measures on digital platforms, improving the reliability of real-time decision-making processes

Thanks to its fast analysis and accurate data output, Advanced IP Verification supports any organization seeking to protect its infrastructure and optimize incoming traffic quality.