apyhub
▣ GEOLOCATION

IP Address Lookup API

What it does

IP Address Lookup lets you send an IP address and get a structured lookup response back. The endpoint accepts a single required ip query parameter and returns an envelope with a numeric code, a success flag, and additional module data in the response body.

Use IP Address Lookup when you need to resolve an IP as part of sign-in checks, fraud signals, analytics, or request enrichment. It fits into workflows where you want to attach location-aware context to an IP without building your own lookup layer.

Because the response schema is intentionally open-ended beyond code and success, you can consume the module blocks your integration needs without assuming a fixed payload shape. That makes the service suitable for lightweight validation and broader geolocation pipelines alike.

If you are routing traffic, flagging suspicious activity, or segmenting users by network origin, IP Address Lookup gives you a simple input and a machine-readable result to build on.

GET
IP Address Look Up
https://api.eu.apyhub.com/quadlem/ip-address-look-up

QUICKSTART

GUIDE

Quickstart

Use the following request to analyze an IP address and retrieve its location, network information, threat indicators, and fraud risk assessment.

curl -X GET "https://api.eu.apyhub.com/quadlem/ip-address-look-up?ip=8.8.8.8" \
  -H "apy-token: $APY_TOKEN"

What you'll get back

A successful request returns details about the IP address, including its validity, geolocation, network provider, proxy and VPN detection results, and an overall risk assessment.

{
  "success": true,
  "code": 200,
  "IP": {
    "IP": "8.8.8.8",
    "valid": true,
    "country": "United States of America",
    "city": "Mountain View",
    "isp": "Google LLC",
    "is_proxy": false,
    "is_vpn": false,
    "is_tor": false,
    "risk_score": 0,
    "risk_level": "low",
    "recommendation": "accept",
    "summary": "This IP shows no proxy, VPN, or threat indicators (0/100 — low risk). Recommended action: accept."
  }
}

Note: Depending on the IP address and service configuration, the response may include additional network intelligence and geolocation metadata alongside the fraud and threat assessment.

TRY ITLIVE · 40 ATOMS
Loading your default key…
The full key is used to call the gateway and stays in this tab — never sent to orbit or saved.

About this endpoint

What it does

Looks up an IP address and returns geolocation, ISP/ASN details, VPN/proxy/Tor/datacenter detection, threat flags, and a fraud risk score with a recommendation.

Query Parameter(s)

AttributeTypeMandatoryDescription
ipStringYesIPv4 or IPv6 address to look up.

Response

AttributeTypeDescription
successBooleanWhether the request succeeded.
codeIntegerNumeric response code.
IPObjectIP lookup result.
IP.IPStringThe IP address submitted.
IP.ip_versionInteger4 or 6.
IP.validBooleanWhether the IP is well-formed.
IP.alpha2 / country / region / cityStringGeolocation detail.
IP.latitude / longitude / zip_code / time_zone / current_time—Location and local-time detail.
IP.isp / asnStringNetwork operator and autonomous system number.
IP.is_proxy / is_vpn / is_tor / is_datacenter / is_public_proxy / is_residential_proxyBooleanAnonymization/network-type flags.
IP.threat_typesArrayAny known threat categories associated with the IP.
IP.risk_scoreNumberFraud risk score.
IP.risk_levelStringlow, medium, or high.
IP.recommendationStringaccept, review, or reject.
IP.summaryStringPlain-language explanation of the result.

Query parameters

Name
Type
Description
ipREQUIRED
string
—
▣ COMMON ERRORS

Errors any endpoint can return

400bad_request

Required parameter missing or malformed body.

401unauthorized

API key missing, revoked, or not authorized for this service.

429rate_limited

Your plan's per-second rate exceeded. Retry with exponential backoff.

503upstream_busy

Backend temporarily unavailable. Try again in a few seconds.