Dev.to Security 🔐 Cybersecurity 👁 1

IP geolocation + ASN in one call (and why ASN matters for fraud)

Country lookup is the obvious use of IP data. The underrated field is the ASN/organization: it tells you if a signup comes from a home ISP or from a cloud provider like AWS, Hetzner or OVH, which is a strong bot signal.

Country lookup is the obvious use of IP data. The underrated field is the ASN/organization: it tells you if a signup comes from a home ISP or from a cloud provider like AWS, Hetzner or OVH, which is a strong bot signal.

Request

curl "https://geoip-ip-geolocation-asn-isp-lookup.p.rapidapi.com/lookup?ip=8.8.8.8" \
  -H "X-RapidAPI-Key: $KEY" \
  -H "X-RapidAPI-Host: geoip-ip-geolocation-asn-isp-lookup.p.rapidapi.com"
{"ip":"8.8.8.8","country_code":"US","continent":"North America","is_eu":false,
 "asn":15169,"organization":"Google LLC"}

Ideas

  • Flag signups where organization is a hosting company.
  • Use is_eu to show the GDPR cookie banner only where it's needed.
  • Set currency and language defaults from country_code.
  • GET /me returns the caller's own IP; POST /bulk handles 100 IPs per call for log analysis.

IPv4 and IPv6 are both supported. Data: DB-IP Lite (CC BY 4.0). Free tier: 200 calls/month. GeoIP on RapidAPI

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.