IPQualityScore IP Risk Score API provides real-time IP address fraud detection and risk scoring capabilities. The service analyzes IP addresses using algorithms trained on data collected from a proprietary network of honeypots, fraud traps, and abuse sensors deployed across over 150 countries. The API evaluates IP addresses through multi-layered risk scoring analysis to detect various threats including botnets, proxies, VPNs, anonymizing services, account takeover attacks, stolen credentials, brute force attempts, and spam campaigns. The system assigns risk scores to IP addresses, with high-risk addresses scoring 90 or higher when malicious activity is identified with high confidence. The service offers multiple query methods including a REST API for real-time IP lookups, JavaScript analysis tags for client-side detection, and batch processing capabilities through CSV file uploads. The API provides geolocation data, proxy and VPN detection, and identifies residential proxy connections, emulators, and other high-risk behavior signals. Risk analysis categories include connection type detection, abuse velocity tracking, recent abuse history, bot detection, and identification of TOR exit nodes. The system builds risk profiles in real-time by harvesting live malicious traffic data, allowing detection of threats before they appear in public blocklists.