IP2Location tells you a user is in London. CandycornDB tells you they are exiting through a Tor relay on M247 with 18 dirty /24 neighbors, and returns the audit receipt. v2.3 Base-Zero scoring with scoreReasons on every call. p99 under 50ms cached.
100 calls per day on the Developer tier. Free forever.
No Risk Data
Actionable Intel
A geolocation snapshot cannot answer the questions a v2.3 receipt does.
| Capability | CandycornDB v2.3 | IP2Location |
|---|---|---|
| Primary Goal | Fraud and abuse prevention | Geolocation and analytics |
| Data Freshness | Live, write-behind cache | CSV refresh, monthly or daily |
| Subnet-Aware Scoring |
/24 CIDR clusters, +25
|
Per-IP only |
| Wholesale Landlord ID | Clouvider, M247, Tesonet | ASN string only |
| Base-Zero Transparency |
scoreReasons[] on every call
|
No score returned |
| Tor and VPN Detection | Tor consensus, ASN landlord, hostname pattern | Basic boolean flags |
| Cached Lookup p99 | < 50ms | Local DB lookup, varies |
A country and a ZIP code do not stop a Tor exit on M247. The architecture decides what the receipt can say.
Geographic snapshot for analytics. Not designed for fraud prevention.
Pipeline model with native risk scoring and signed receipts.
asns.prefixes, O(log N). networkCluster +25 when neighbors are dirty.asnType, isProxy.scoreReasons[] returned together. No glue code required.A Tor exit IP that IP2Location labels "London, GB." CandycornDB labels it score 100 with a five-component receipt.
A ZIP code is not a fraud signal. A signed receipt is.
100 calls per day on the Developer tier. v2.3 Base-Zero engine. scoreReasons on every call.