SEON user docs logoSEON user docs logoSEON user docs logo
Search input icon

IP API

Identify suspicious VPN and proxy connections and pinpoint users with accurate geolocation information.

Good to know

  • Use the Fraud API if you want to use the IP API together with any of our Email API, Phone API, and Device Fingerprinting.
  • All SEON API requests are case-sensitive. Please follow the formatting below to avoid errors.
  • IP API requests are limited to 120/minute during your SEON free trial.

Request

The [ip] in the request URI should include the full IPv4 or IPv6 address, example: 1.1.1.1 or 2001:db8:3333:4444:5555:6666:7777:8888 .

Optional query string parameters

In order to request additional or receive less information, use following parameters in the request URL as in the example below:

GET

https://api.seon.io/SeonRestService/ip-api/v1/[ip]?include=history,flags,id&flags_timeframe_days=10

Request Attributes

ValueRequired
include
historyno
include
flagsno
include
idno
flags_timeframe_days
[number of days]no

HTTP Endpoint

GET

https://api.seon.io/SeonRestService/ip-api/v1/[ip]
PHP
Generic
Generic

Response

The endpoint returns JSON structured response.

JSON Attributes

Type
ip
string
score
number
country
string
state_prov
string
city
string
timezone_offset
string
isp_name
string
latitude
number
longitude
number
type
string
open_ports
array
tor
boolean
harmful
boolean
vpn
boolean
web_proxy
boolean
public_proxy
boolean
spam_number
integer
spam_urls
array
applied_rules
array of object
history
object
flags
array of object
id
string
Response
{
 "success": true,
 "error": {},
 "data": {
  "ip": "1.1.1.1",
  "score": 100,
  "country": "HK",
  "state_prov": "Hong Kong",
  "city": "Hong Kong",
  "timezone_offset": "+08:00",
  "isp_name": "APNIC and CloudFlare DNS Resolver Project",
  "latitude": 22.28552,
  "longitude": 114.15769,
  "type": "CDN",
  "open_ports": [
   80
  ],
  "tor": false,
  "harmful": false,
  "vpn": false,
  "web_proxy": false,
  "public_proxy": false,
  "spam_number": 3,
  "spam_urls": [
   "bl.emailbasura.org",
   "l2.apews.org",
   "dyna.spamrats.com"
  ],
  "applied_rules": [
   {
    "id": "P102",
    "name": "Port 80 is open on the IP address",
    "operation": "+",
    "score": 1
   },
   {
    "id": "P100",
    "name": "There is 1 suspicious open port on the IP address",
    "operation": "+",
    "score": 4
   },
   {
    "id": "P109",
    "name": "IP address was found on 3 spam blacklists",
    "operation": "+",
    "score": 2
   }
  ],
  "history": {
   "hits": 3,
   "customer_hits": 1,
   "first_seen": 1573567581,
   "last_seen": 1573639346
  },
  "flags": [
   {
    "note": "Blacklisted by API",
    "date": 1573138956,
    "industry": "Online gambling operator"
   }
  ],
  "id": "b06c5055-d1bf-4400-b2c9-ab3edd7171d6"
 }
}