IP API

Identify suspicious VPN and proxy connections and pinpoint users with accurate geolocation information.

Good to know

  • Use the Fraud API if you want to use the IP API together with any of our Email API, Phone API, and Device Fingerprinting.
  • All SEON API requests are case-sensitive. Please follow the formatting below to avoid errors.
  • IP API requests are limited to 120/minute during your SEON free trial.

Request

The [ip] in the request URI should include the full IPv4 or IPv6 address, example: 1.1.1.1 or 2001:db8:3333:4444:5555:6666:7777:8888 .

Optional query string parameters

In order to request additional or receive less information, use following parameters in the request URL as in the example below:

GET

https://api.seon.io/SeonRestService/ip-api/v1.1/[ip]?include=history,flags,id&flags_timeframe_days=10

Request Attributes

ValueRequired
include
historyno
include
flagsno
include
idno
flags_timeframe_days
[number of days]no

HTTP Endpoint

GET

https://api.seon.io/SeonRestService/ip-api/v1/[ip]
PHP
Generic
Generic

Response

The endpoint returns JSON structured response.

JSON Attributes

Type
ip
string
score
number
country
string
state_prov
string
city
string
timezone_offset
string
isp_name
string
latitude
number
longitude
number
type
string
open_ports
array
tor
boolean
harmful
boolean
vpn
boolean
web_proxy
boolean
public_proxy
boolean
spam_number
integer
spam_urls
array
applied_rules
array of object
history
object
flags
array of object
id
string
Response
{
 "success": true,
 "error": {},
 "data": {
  "ip": "1.1.1.1",
  "score": 100,
  "country": "HK",
  "state_prov": "Hong Kong",
  "city": "Hong Kong",
  "timezone_offset": "+08:00",
  "isp_name": "APNIC and CloudFlare DNS Resolver Project",
  "latitude": 22.28552,
  "longitude": 114.15769,
  "type": "CDN",
  "open_ports": [
   80
  ],
  "tor": false,
  "harmful": false,
  "vpn": false,
  "web_proxy": false,
  "public_proxy": false,
  "spam_number": 3,
  "spam_urls": [
   "bl.emailbasura.org",
   "l2.apews.org",
   "dyna.spamrats.com"
  ],
  "applied_rules": [
   {
    "id": "P102",
    "name": "Port 80 is open on the IP address",
    "operation": "+",
    "score": 1
   },
   {
    "id": "P100",
    "name": "There is 1 suspicious open port on the IP address",
    "operation": "+",
    "score": 4
   },
   {
    "id": "P109",
    "name": "IP address was found on 3 spam blacklists",
    "operation": "+",
    "score": 2
   }
  ],
  "history": {
   "hits": 3,
   "customer_hits": 1,
   "first_seen": 1573567581,
   "last_seen": 1573639346
  },
  "flags": [
   {
    "note": "Blacklisted by API",
    "date": 1573138956,
    "industry": "Online gambling operator"
   }
  ],
  "id": "b06c5055-d1bf-4400-b2c9-ab3edd7171d6"
 }
}