Location, network owner and VPN, proxy and Tor signals for any IPv4 or IPv6 address. One HTTPS request, JSON back.
Your IP address
216.73.216.176
Columbus
Ohio, United States API response for this address
{
"ip": "216.73.216.176",
"type": "IPv4",
"geo": {
"country_code": "US",
"country": "United States",
"region": "Ohio",
"city": "Columbus",
"latitude": 39.9612,
"longitude": -82.9988,
"timezone": "America/Indiana/Vevay"
},
"network": {
"asn": 16509,
"as_name": "Amazon.com, Inc.",
"isp": "Amazon.com, Inc.",
"connection_type": "datacenter"
},
"threat": {
"is_vpn": false,
"is_proxy": false,
"is_tor": false
}
}Location and network come with every plan, Free included. VPN, proxy and Tor flags start with Starter, the 0–100 risk score with Pro.
Current geolocation data: 2026-11-01 (DB-IP Country Lite, DB-IP ASN Lite, DB-IP City Lite).
Every response has the same shape. Your plan decides which parts are filled in.
Every response also carries meta.data_version, the date of the data behind the answer.
Every company with users on the internet benefits from knowing what's behind an IP address.
A customer pays with a German credit card but the IP comes from a datacenter in Singapore. Without IP intelligence, you process the payment and eat the chargeback.
With OpenIPApi: flag datacenter IPs, detect VPNs on checkout, compare geo to billing country. Block fraud before it costs you.
Fields to check:
geo.country_code
threat.is_vpn
threat.is_proxy
Abusers create hundreds of free trial accounts using VPNs and datacenter IPs. Each fake account costs you server resources and skews your metrics.
With OpenIPApi: detect datacenter + VPN IPs at signup and require step-up verification for suspicious connections. Reduces automated trial abuse when combined with email verification, rate limiting, and account behavior checks.
Fields to check:
threat.is_vpn
threat.is_proxy
threat.threat_score
Regulators require you to block users from restricted jurisdictions. If someone connects via VPN from a blocked country and you miss it, you face fines.
With OpenIPApi: verify country, detect VPNs and proxies, flag Tor. Ensure compliance is based on real connection data, not just what the user claims.
Fields to check:
geo.country_code
threat.is_vpn
threat.is_tor
Account takeover attacks often show up as logins from a new country or through an anonymizing proxy. By the time you notice, the money is gone.
With OpenIPApi: detect impossible travel (login from Prague, then Lagos in 10 minutes), flag Tor and proxy usage, trigger step-up authentication.
Fields to check:
geo.country_code
geo.city
threat.is_tor
Bots running in datacenters click your ads, draining your budget. Competitors use proxies to inflate your spend with zero real conversions.
With OpenIPApi: flag datacenter, proxy and VPN traffic in your impressions and clicks before you pay for it.
Fields to check:
threat.is_proxy
threat.is_vpn
network.asn
Licensing agreements restrict content to specific regions. Users bypass restrictions with VPNs, putting your licensing deals at risk.
With OpenIPApi: check the country of every session and flag VPN and proxy users who try to get around region locks.
Fields to check:
geo.country_code
threat.is_vpn
threat.is_proxy
Beyond the API: a full dashboard with watchlists, webhooks, bulk tools, and offline databases.
Look up multiple IPs in a single request — 100 per request on Starter, 500 on Pro, 1,000 on Business, up to 5,000 on Enterprise. Ideal for processing access logs, fraud screening pipelines, and security audits.
Dedicated fraud endpoint returns risk level (low/medium/high/critical) and actionable recommendation (allow/review/challenge/block).
Binary MMDB databases for offline and edge lookups. They work with any MMDB reader library.
HTTP POST notifications when a watched IP becomes a VPN, Tor exit or proxy, or crosses your threat-score threshold. Payloads are signed with HMAC-SHA256.
Monitor specific IPs for status changes. Get email alerts when an address you care about turns into a VPN, Tor exit, or suddenly gains a high threat score.
Attribute IPs to specific residential proxy pools and VPN providers. The fraud blind spot: "residential" IP that's actually a Bright Data or Hola exit node.
Plain HTTPS with an X-API-Key header, or one of the SDKs we host ourselves.
These SDKs are hosted directly by OpenIPApi. Package registry versions for npm, PyPI and Packagist may be added later.
$ curl https://api.openipapi.com/v1/lookup/185.220.101.45 \
-H "X-API-Key: YOUR_API_KEY"Feature-by-feature comparison with the largest IP intelligence providers.
| Feature | OpenIPApi | IPinfo | ipstack |
|---|---|---|---|
| Geolocation | |||
| ASN / ISP data | |||
| VPN detection | Add-on | — | |
| Proxy detection | Add-on | — | |
| Tor detection | Add-on | — | |
| Threat score | — | — | |
| Fraud scoring | — | — | |
| Abuse contact | — | ||
| Batch API | — | ||
| MMDB download | Paid only | — | |
| Webhooks & watchlist | — | — | |
| Free tier | 10,000/mo | 50,000/mo | 100/mo |
| Starting price | $15/mo | $49/mo | $10/mo |
Comparison is based on publicly available pricing and feature information as of May 2026 and may change over time. Always verify current vendor pricing before making a purchasing decision.
10,000 free lookups every month. No credit card required.
Paid plans start at $15 a month and add VPN, proxy and Tor flags, batch lookups and higher limits.
Part of the Open API ecosystem