The IP research tool New
Type an IP, paste a list or drop a file. Owner, operator, location, threat and VPN status in a table you can filter, star and map.
Geolocation, threat intelligence, network ownership, VPN, Tor and proxy detection, and 50+ enrichment fields — from a single API call in under 40ms.
Every web session carries an IP address that on its own tells you almost nothing.
ipdata enriches IPs with location, threat profile, blocklist reports, network ownership, mobile carrier, anonymity detection, and a reputation score.
| # | field | value |
|---|
The same lookups, with better data in every answer. Cut your bill by up to 90%, or keep the budget and look up as many as ten times the addresses.
See the plansa month, with location, network, company, VPN and threat data
Published prices on 10 October 2026, monthly billing.
Up and running since 2017, the API has held 99.999% uptime through every year of growth, from the first customers to hundreds of millions of lookups a day, which is why teams put fraud checks, sign-up gates and routing on ipdata.
uptime of the API as measured from outside by updown.io
Measured by updown.io, December 2021 to October 2026: 59 months, 57 of them at 100%, the lowest 99.945%. The probes connect cold on every call, paying dns, connect and tls each time; a client that keeps its connection open, with HTTP/2 or keep-alive, pays only the response part, under half of that.
Auto-detect visitor currency, language, and tax jurisdiction. Flag orders from VPNs, proxies, and known fraud networks before they hit your payment processor.
Route players to the nearest game server using IP geolocation. Detect VPN abuse in competitive matches and enforce region locks for licensing compliance.
Strengthen identity verification with IP context. Compare declared address against IP geolocation, flag sanctioned jurisdictions, and detect high-risk network patterns.
Content licensing is territorial. Detect when users bypass geo-restrictions with VPNs and proxies. Identify the specific provider and enforce access controls.
Online gambling regulations vary by state and country. Verify user jurisdiction in real time, block access from prohibited regions, and detect location spoofing.
Feed IP intelligence into your SIEM, WAF, or SOC workflow. Classify traffic by ASN type, cross-reference against 100+ threat feeds, and auto-block known attackers at the network edge.
Government agencies and defense contractors require network-level visibility to enforce access controls, detect foreign intrusion attempts, and comply with data sovereignty mandates.
No user onboarding friction. Detect location, language, and timezone from the first request. Enrich analytics, personalize onboarding, and segment users — all from one API.
A keyless endpoint, a research tool for looking things up by hand, a client for every language and a CLI
Type an IP, paste a list or drop a file. Owner, operator, location, threat and VPN status in a table you can filter, star and map.
+A free API key lifts the daily cap for country-level geolocation and ASN data.
1,000 city-level lookups a day per calling IP, no key or account, commercial use with attribution.
Official clients for Python, Node, Go, PHP, .NET, Ruby, Rust, Perl, Erlang, Java and Swift, each a package install away.
$ pip install ipdata
$ ipdata init <api key>
$ ipdata 41.90.64.12 -f city -f country_name
{
"city": "Nairobi",
"country_name": "Kenya",
"status": 200
}
$ ipdata batch backlog.csv --output results.csv --output-format CSV --fields ip --fields country_code
$ head -3 results.csv
ip,country_code
107.175.75.83,US
35.155.95.229,US
The Python package brings a command with it. Look up one address or your own, keep only the fields you name, and run a file of thousands into CSV or JSON lines.