/ip-intelligence/ — IPQualityScore
Use proxy and VPN detection with network/location enrichment and contextual fraud scoring. Distinguish suspected from active VPN/Tor signals, check Enterprise-only fields, and arrange downloadable database access separately.
IP intelligence. Official documentation · Checked · Review due .
Choose a product and access method
documented decisionSwipe or scroll the table to compare response checks and billing.
| Starting point | Access method | Check before use | Billing basis |
|---|---|---|---|
| You need anonymity signals alongside location and ASN | Use the Proxy & VPN Detection API with an account key. | Check response-field entitlements; full examples include some Enterprise-only fields. | The product advertises 1,000 free monthly IP lookups; subsequent usage depends on the selected credit plan.[1][2][3][5] |
| You need to distinguish current activity from broader classifications | Inspect active_vpn/active_tor separately from vpn/tor. | Suspected VPN/Tor flags can include infrastructure that is not currently active. Fraud scores also depend on optional request context. | These are fields in a lookup; enriched Enterprise data requires the relevant entitlement.[2][1][5] |
| You want local reputation lookups | Evaluate the separate downloadable/on-premise database offering. | Confirm file format, required fields, update delivery and license terms with the vendor; no format was established from the reviewed offer. | Database pricing and entitlement require a separate arrangement; API credits do not establish download rights.[4][5] |
documented capabilities
HTTP API- Delivery
- API-key-authenticated JSON or XML lookup API, plus a separate downloadable/on-premise database offering. The reviewed database page does not specify a file format.[1][4]
- Location data
- Country, region, city, postal code, coordinates and timezone are documented when known. Fields can be N/A or null.[2]
- ASN and network
- ISP, organization, ASN and connection type are documented. Connection type can distinguish Residential, Corporate, Education, Mobile and Data Center.[2]
- Privacy signals
- Documents proxy, VPN, Tor, active VPN/Tor and fraud signals. Enriched fields including frequent_abuser, shared_connection and dynamic_connection are Enterprise data points; confirm other fields against the account's entitlement.[2]
- Access and free use
- API access requires an account key. The product advertises 1,000 free IP lookups per month; terms prohibit duplicate accounts for extra free credits and allow evaluation-access limits.[1][3][5]
- Billing unit
- Each lookup/request normally consumes one query credit, with specific exclusions. Paid subscriptions and prepaid packs are documented; a current paid-price table was not exposed in the reviewed plans page.[5][6]
- IP versions
- The API reference includes IPv4/IPv6 validation. The downloadable reputation database explicitly documents both address families.[1][4]
- Suspected versus active flags
- vpn can include datacenter ranges that could become active VPNs, and tor can include previously active nodes. active_vpn and active_tor are separate response fields.[2]
Billing: API lookups consume one query credit except documented exclusions. Subscriptions and prepaid query packs are offered; the product advertises 1,000 free monthly IP lookups. Current paid prices were not verified.
Outputs: json, xml
Documented for: Proxy & VPN Detection API, Proxy Detection Database
getting started
documentation reviewed- Create an account, obtain an API key and verify the fields included in the selected entitlement.
- Choose the documented JSON or XML endpoint and provide the target public IP.
- Set strictness and public-access-point handling deliberately. If optional user-agent or language context is supplied, retain it when comparing scores.
- Handle unavailable geographic/network values, monitor query credits and arrange database access separately for local deployment.
Requirements & limitations
- More aggressive strictness can increase false positives; the documentation acknowledges that a suspicious score may reflect legitimate privacy use.
- Suspected and active VPN/Tor flags have different meanings. A classification or fraud score does not prove a user's intent.
- Current paid API prices and database file formats were not verified; free access is not evidence that every response field is included.
- Terms restrict reselling or republishing data and creating duplicate free accounts.
We reviewed the linked documentation. No live service connection, checkout or performance test is claimed for this listing.
primary sources
6 references- IPQS Proxy & VPN Detection API Getting StartedChecked 2026-10-01
- IPQS Response ParametersChecked 2026-10-01
- IPQS Proxy Detection APIChecked 2026-10-01
- IPQS Proxy Detection DatabaseChecked 2026-10-01
- IPQS Terms of ServiceChecked 2026-10-01
- IPQS Plans and PricingChecked 2026-10-01