IPAPI.GR for Laravel

// config/services.php
'ipapi' => [
    'key' => env('IPAPI_KEY'),
],

// .env
// IPAPI_KEY=your_api_key_here

<?php
// app/Http/Middleware/IpapiGeo.php: adds the visitor's lookup to the request.

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Client\ConnectionException;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Cache;
use Illuminate\Support\Facades\Http;
use Symfony\Component\HttpFoundation\Response;

class IpapiGeo
{
    private const LOOKUP = 'https://ipapi.gr/api/lookup/';
    private const AI_CLAIM = '/GPTBot|OAI-SearchBot|ChatGPT-User|ClaudeBot|Claude-SearchBot|Claude-User|PerplexityBot|Perplexity-User/i';

    public function handle(Request $request, Closure $next): Response
    {
        $ip = $request->ip(); // honours TrustProxies, see bootstrap/app.php
        $geo = null;

        // Private and reserved addresses have no public location: skip them.
        if ($ip && filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
            $geo = Cache::remember('ipapi:'.$ip, now()->addHour(), fn () => $this->lookup($ip));
        }
        $request->attributes->set('geo', $geo);

        // Paid plans return risk flags: refuse self-declared AI crawlers whose address is not a known AI crawler.
        $risk = $geo['risk'] ?? null;
        if ($risk && preg_match(self::AI_CLAIM, (string) $request->userAgent()) && ! $risk['is_ai']) {
            abort(403, 'Unverified crawler');
        }

        return $next($request);
    }

    private function lookup(string $ip): ?array
    {
        try {
            $response = Http::timeout(2)->get(self::LOOKUP.rawurlencode($ip), [
                'key' => config('services.ipapi.key'),
            ]);
        } catch (ConnectionException) {
            return null; // timeout or network error: fail open
        }
        if (! $response->ok()) {
            return null;
        }

        // Missing values come back as the string "No Data".
        $known = fn ($value) => in_array($value, [null, '', 'No Data'], true) ? null : $value;

        return [
            'country' => $known($response->json('country')),
            'country_code' => $known($response->json('country_code')),
            'city' => $known($response->json('city')),
            'timezone' => $known($response->json('timezone')),
            'asn' => $known($response->json('asn')),
            'isp' => $known($response->json('isp')),
            'risk' => $response->json('risk'), // ['is_ai' => …, 'is_crawler' => …, 'is_scanner' => …] on paid plans only
        ];
    }
}

<?php
// bootstrap/app.php (Laravel 11 and later)
use App\Http\Middleware\IpapiGeo;
use Illuminate\Foundation\Application;
use Illuminate\Foundation\Configuration\Middleware;

return Application::configure(basePath: dirname(__DIR__))
    // ->withRouting(...)
    ->withMiddleware(function (Middleware $middleware) {
        // Behind a load balancer: trust it, so $request->ip() is the visitor, not the balancer.
        $middleware->trustProxies(at: ['10.0.0.0/8']);
        $middleware->web(append: IpapiGeo::class);
    })
    ->create();

// In a controller or view
$geo = $request->attributes->get('geo');      // null when unknown
$country = $geo['country_code'] ?? null;      // e.g. "GR"
$timezone = $geo['timezone'] ?? 'UTC';