Engineering & Research

Network intelligence, from the BGP table up

Technical dispatches on IPv4 and IPv6 routing physics, RFC 8805 geofeed verification, sub-microsecond MMDB binary radix trees, and active anonymizer telemetry.

10 dispatchesGeolocation, Databases, Security & Engineering
ASN + RFC 8805Production routing & probe architecture notes
All dispatches Showing 1-9 of 10 articles
EngineeringOct 27, 2026·12 min read

ipscope vs. MaxMind, IPinfo, IPLocate, IPGeolocation, and IPScanner: The 2026 Engineering Comparison

An architectural and pricing comparison of IP intelligence providers: evaluating declared vs. physical geolocation, VPN and residential proxy detection, MMDB and Parquet database parity, and total cost of ownership.

#Comparison #MaxMind #IPinfo
Hasan Muzak · Principal Systems Architect
GeolocationOct 24, 2026·14 min read

Why Registration Records Lie: Separating Declared and Physical IP Geolocation

How cross-border BGP announcements, IPv4 leasing marketplaces, and stale geofeeds break traditional GeoIP databases, and how active RTT triangulation resolves physical router location.

#BGP #Geolocation #RTT
Hasan Muzak · Principal Systems Architect
SecurityOct 22, 2026·14 min read

Scoring Real-Time Abuse Velocity: How security_extensions Detects Scanners and Credential Stuffing

How ipscope aggregates distributed darknet sensor hits, SSH/TLS brute-force telemetry, and port-sweep cadence into a calibrated 0-to-100 abuse_velocity_score with exponential time decay.

#Security #Abuse Velocity #Scanners
Hasan Muzak · Principal Systems Architect
DatabasesOct 20, 2026·15 min read

Inside the ipscope MMDB Compiler: Packing 35.3M Prefixes into a Zero-Copy Radix Tree

How we compile unified IPv4 and IPv6 routing tables into open MMDB v2.0 binary artifacts with structural DAG deduplication, compact pointer encoding, and sub-microsecond mmap lookups.

#MMDB #Radix Tree #Performance
Hasan Muzak · Principal Systems Architect
GeolocationOct 18, 2026·14 min read

Why Cellular 5G CGNAT Breaks Naive Rate Limiters and City Geolocation

How carrier-grade NAT pools share a single public IPv4 address across thousands of mobile subscribers, and how to use connection.is_mobile and accuracy_radius_km in production.

#CGNAT #5G #Mobile
Hasan Muzak · Principal Systems Architect
SecurityOct 15, 2026·14 min read

Deterministic VPN & Residential Proxy Detection with Explainable Reason Codes

Why black-box fraud scores fail in production, and how ipscope combines WireGuard/OpenVPN protocol probes, MTU/MSS telemetry, and ASN classification to emit auditable reason codes.

#VPN #Proxy #Tor
Hasan Muzak · Principal Systems Architect
EngineeringOct 10, 2026·15 min read

Enriching 100,000+ IPs in Under 350 KB of RAM with Official IPScope Server SDKs

How we designed lookupBatchStream across Python, Node.js, Go, Rust, Java, .NET, Ruby, and PHP with bounded O(1) LRU caching, singleflight deduplication, and zero-allocation chunking.

#SDKs #Python #Node.js
Hasan Muzak · Principal Systems Architect
DatabasesOct 8, 2026·15 min read

Zero-Downtime MMDB Hot-Reloads: Atomic POSIX mmap Swaps in Go, Rust, and Node.js

How to download, verify SHA-256 checksums, and hot-swap memory-mapped ipscope .mmdb databases in live production processes without SIGBUS crashes or dropped requests.

#MMDB #Zero Downtime #mmap
Hasan Muzak · Principal Systems Architect
GeolocationOct 4, 2026·13 min read

Automating RFC 8805 Geofeed Ingestion: Validating Operator Claims Against RPKI

How network operators publish self-hosted RFC 8805 CSV geofeeds, and how our compiler authenticates RPSL remarks, verifies RPKI ROAs, and filters out spoofed latency claims.

#RFC 8805 #RFC 9092 #Geofeed
Hasan Muzak · Principal Systems Architect

Start with 30K free lookups a month.

No card, no trial clock. Upgrade when your traffic does, or download the database when you would rather keep it in-house.