Paste a list of IP addresses — from server logs, a spam report or an export — and we'll email you a full geolocation and threat report for every one of them.
For every IP: country, city, ISP, and the three anonymization flags (VPN, proxy, Tor) plus a 0–100 threat score. The data comes from the same continuously-updated database that serves our API — not a stale GeoIP dump.
The batch endpoint of our API handles up to 1,000 IPs per request with the full response schema — abuse contacts, ASN details, connection type and more. The free plan includes 10,000 lookups a month.
More free tools
The same data behind these tools is one API call away — 10,000 free lookups every month.