Free tool

IP Address Lookup

Name: GeoIPHub API
Availability: InStock
Author: GeoIPHub

Look up any IPv4 or IPv6 address and get the full GeoIPHub response: location, network ownership, anonymizer detection, threat evidence, and an explainable 0–100 risk score. No signup.

Coordinates are approximate and must not be used to identify a particular address or household.

What you get

What an IP lookup reveals.

An IP address is the most honest identifier in a web request: it cannot be edited like a user-agent header, and it carries verifiable history. A single lookup here returns a response organized into 10 groups: ip, asn, geo, whois, network, detection, threat, dns, scoring, and meta.

The geo group places the address at country, region, and city level with coordinates, a timezone, and a confidence value. The asn and whois groups tell you who operates the network: the autonomous system, the registered organization, and whether the registration text contains VPN or hosting keywords (checked against 46 VPN and 27 hosting keywords across all 5 RIRs).

The detection group is where GeoIPHub differs from passive databases: VPN and proxy verdicts are verified with real protocol handshakes on 25+ ports across 11 protocols before an IP is flagged, and VPN exits are attributed to one of 10 providers from their own published server lists. The threat group adds blocklist, spam, scanner, botnet, and verified-crawler evidence, and scoring condenses everything into a 0–100 fraud score with the exact signals that fired. Read more on the IP geolocation and VPN & proxy detection product pages.

Same lookup, from your terminal

One curl away.

No API key required for up to 30 lookups per minute. Add an x-api-key header to raise the limit to 1,500 lookups per day on the free tier.

request

curl https://api.geoiphub.com/v1/lookup/8.8.8.8

response (abridged)

{
  "ip": "8.8.8.8",
  "asn": { "asn": 15169, "org": "GOOGLE", "asn_type": "hosting", "connection_type": "datacenter" },
  "geo": { "country_code": "US", "country_name": "United States", "city": "Mountain View",
           "latitude": 37.422, "longitude": -122.085, "geo_confidence": 0 },
  "detection": { "is_vpn": false, "is_proxy": false, "is_tor": false,
                 "is_hosting": true, "is_relay": false, "vpn_provider": "none" },
  "threat": { "is_abusive": false, "is_crawler": false, "blocklist_count": 0 },
  "scoring": { "fraud_score": 0, "confidence": 0.1,
               "recommended_action": "allow", "detection_methods": [] }
}

FAQ

Frequently asked questions

How accurate is the geolocation?

Country-level placement is the most reliable signal. City-level placement comes from DB-IP and can lag when infrastructure moves, which is why every response includes geo.geo_confidence so you can decide how much weight to give it. Coordinates are approximate and must never be used to identify a household.

Can I look up IPv6 addresses?

Yes. The lookup accepts both IPv4 and IPv6, and the response shape is identical, with the same fields and the same 10 groups.

Is this the same data as the paid API?

Yes, exactly the same endpoint and the same response. GeoIPHub has no field paywall: anonymous requests, the free tier, and paid plans all receive every field. Plans differ only in request volume.

What happens if the IP has never been seen before?

Known IPs are answered in under a millisecond from a memory-mapped database. An IP that is not in the database yet is classified live in under 2.5 seconds, probes, feeds, and WHOIS included, and then persisted for the next lookup.

More free tools