IP Risk Score — assess IP reputation by ASN and country

Score IP Risk API

What it does

IP Risk Score checks an IP address and returns a heuristic risk assessment based on ASN type and country. Send an ip query value and get back the IP, ASN, ASN description, ASN country code, a risk_score from 0 to 100, a risk_level of low, medium, or high, and any flags the service identifies.

Use it when you need a quick signal for login protection, abuse detection, fraud screening, or bot filtering. The response is compact and easy to feed into allow/deny rules, step-up verification flows, or internal triage dashboards.

Because the score is heuristic, it’s best used as one input alongside your own behavioral checks and account history. The returned ASN fields help you understand why an address was scored the way it was, without adding extra lookup steps.

IP Risk Score fits workflows where you need to evaluate traffic in real time and make an immediate decision from a single IP lookup.

What you'll get back

Returns a JSON object with these top-level fields: ip (string), asn (string or null), flags (array of string), risk_level (string enum: low, medium, or high), risk_score (integer from 0 to 100), asn_description (string or null), and asn_country_code (string).

{
  "ip": "8.8.8.8",
  "asn": "AS15169",
  "flags": ["dns"],
  "risk_level": "low",
  "risk_score": 12,
  "asn_description": "Google LLC",
  "asn_country_code": "US"
}

About this endpoint

What it does

Returns a heuristic risk assessment for an IP address based on ASN type and country. You provide an ip query parameter, and the response includes the IP plus risk-related fields such as risk_level and risk_score.

Query Parameter(s)

Attribute	Type	Mandatory	Description
ip	String	Yes	The IP address to evaluate.

Response

Returns a JSON object with ip, asn, flags, risk_level, risk_score, asn_description, and asn_country_code fields. risk_level is an enum with values low, medium, or high, and risk_score is an integer from 0 to 100.

Parameter	Type	Mandatory	Description
ip	String	No	The IP address evaluated.
asn	String	No	The ASN associated with the IP. Nullable.
flags	String Array	No	A list of string flags associated with the risk assessment.
risk_level	ENUM	No	The risk level. Allowed values: `low`, `medium`, `high`.
risk_score	Integer	No	The numeric risk score. Minimum 0, maximum 100.
asn_description	String	No	Description of the ASN. Nullable.
asn_country_code	String	No	The ASN country code.

Query parameters

Name

Type

Description

ipREQUIRED

string

—

Score IP Risk API

What it does

Quickstart

What you'll get back

About this endpoint

What it does

Query Parameter(s)

Response

Query parameters

Errors any endpoint can return