IPinfo logo

IPinfo

IPinfo is an IP address data and intelligence platform that provides geolocation (country, region, city, coordinates, postal, timezone), ASN data, company association, mobile carrier identification, hosted domains lookup, privacy detection (VPN, proxy, Tor, relay, hosting), residential proxy detection, WHOIS, IP ranges, abuse contacts, and an IP-to-Places product. Data is available via a unified REST API (Lite, Core, Plus, Max, Enterprise tiers), a Batch Enrichment endpoint, and downloadable databases (CSV, MMDB, JSON, Parquet). Authentication uses access tokens via Basic Auth, Bearer Token, or query parameter; dual-stack IPv4/IPv6 endpoints are available.

1 APIs 14 Features
IP IntelligenceIP GeolocationASNPrivacy DetectionVPN DetectionThreat IntelligenceNetwork DataMobile CarrierWHOISPublic APIsDevelopment

APIs

IPinfo Core API

Unified IP intelligence REST API exposing the Lite, Core, Plus, Max, Enterprise, Places, ASN, Company, Carrier, Hosted Domains, Privacy Detection (Standard and Extended), Reside...

Features

IP Geolocation

City, region, country, postal code, coordinates, and timezone for any IP.

ASN Data

Autonomous System Number, organization, domain, type, peers, upstreams, downstreams, and prefixes.

Company Identification

Organization name, type, and domain associated with an IP block.

Mobile Carrier Detection

Carrier name, Mobile Country Code (MCC), and Mobile Network Code (MNC).

Hosted Domains

List of domains hosted on an IP address (up to 1,000 per request).

Privacy Detection

Identifies VPN, proxy, Tor, relay, and hosting provider anonymization services.

Residential Proxy Detection

Detects residential, mobile, and datacenter proxies with last-seen recency.

Abuse Contact

Network administrator address, email, and phone for reporting abuse.

WHOIS

WHOIS lookup by Net ID, IP, domain, ASN, organization, or point-of-contact.

Batch Enrichment

Bulk lookup of up to thousands of IPs in a single request.

Database Downloads

Daily-refreshed CSV, MMDB, JSON, and Parquet database files.

IPv4 and IPv6 Support

Dual-stack service with explicit v4.api.ipinfo.io and v6.api.ipinfo.io endpoints.

Field Filtering

Request a single field (plaintext) or filtered object (JSON) per lookup.

99.999% Uptime

High-availability service with 50-200 ms typical response time.

Use Cases

Fraud Prevention

Block or flag traffic from VPNs, proxies, Tor, and known abuse sources.

Geo-Targeted Content

Personalize content, pricing, and language based on visitor country and city.

Compliance and Geofencing

Enforce geographic licensing or regulatory restrictions on content access.

Cybersecurity and Threat Intelligence

Enrich SIEM, SOAR, and EDR events with IP context for faster triage.

Ad Tech and Marketing Analytics

Attribute conversions, dedupe sessions, and segment by carrier or ASN.

Log Enrichment

Add geolocation, ASN, and privacy flags to web, application, and network logs.

Bot Detection

Identify datacenter and hosting-provider IPs that are likely bots.

Account Takeover Prevention

Detect anomalous logins from unusual countries or proxy networks.

Customer Support Triage

Surface visitor location and ISP to support agents in real time.

Network Engineering

Look up ASN peering, prefixes, and abuse contacts during incident response.

Integrations

Splunk

IPinfo Splunk app and lookups for SIEM enrichment.

Elastic / Logstash

Logstash filter plugin for IPinfo MMDB database enrichment.

Cloudflare Workers

Enrich edge requests with IPinfo data inside Workers.

AWS Lambda

Serverless enrichment using IPinfo SDKs and Lambda layers.

Snowflake

Bulk database loads of IPinfo data for analytical warehouses.

Datadog

Use IPinfo enrichment in Datadog dashboards and detection rules.

Heroku

Use IPinfo SDKs (Rails, Node, Python, etc.) in Heroku apps.

Docker

Official Docker image and Compose files for self-hosted enrichment.

Homebrew

Install the IPinfo CLI and mmdbctl via Homebrew tap.

Solutions

IPinfo Lite

Free, unlimited tier with country, continent, and ASN attributes.

IPinfo Core

Paid tier with 16 attributes including city-level geolocation and basic privacy detection.

IPinfo Plus

Paid tier with 32 attributes including carrier data and named privacy services.

IPinfo Max

Paid tier with 35 attributes including residential proxy detection.

IPinfo Enterprise

Custom tier with 40+ attributes, full WHOIS, IP ranges, dedicated account manager.

IPinfo Database

Downloadable IP database in CSV, MMDB, JSON, and Parquet for offline lookups.

Semantic Vocabularies

Ipinfo Context

31 classes · 104 properties

JSON-LD

API Governance Rules

IPinfo API Rules

24 rules · 3 errors 19 warnings 2 info

SPECTRAL

Resources

🔗
ArazzoWorkflows
ArazzoWorkflows
🔗
Website
Website
🌐
DeveloperPortal
DeveloperPortal
📝
SignUp
SignUp
🔗
Login
Login
💰
Pricing
Pricing
🌐
Dashboard
Console
📰
Blog
Blog
💬
Support
Support
🟢
StatusPage
StatusPage
📄
ChangeLog
ChangeLog
📜
TermsOfService
TermsOfService
📜
PrivacyPolicy
PrivacyPolicy
🔗
Compliance
Compliance
👥
GitHubOrganization
GitHubOrganization
🔗
IPinfo CLI
CLI
🔗
mmdbctl (MMDB File Management CLI)
CLI
🔧
Summarize IPs Tool
Tools
🔧
Map IPs Tool
Tools
💻
Sample Database Repository
CodeExamples
💻
Rails Example App
CodeExamples
💻
Docker Image
CodeExamples
🔗
SpectralRules
SpectralRules
🔗
Vocabulary
Vocabulary
🔗
JSON-LD
JSON-LD
🔗
PublicAPIsListing
PublicAPIsListing

Sources

Raw ↑
aid: ipinfo
name: IPinfo
description: >-
  IPinfo is an IP address data and intelligence platform that provides geolocation (country, region, city, coordinates,
  postal, timezone), ASN data, company association, mobile carrier identification, hosted domains lookup, privacy
  detection (VPN, proxy, Tor, relay, hosting), residential proxy detection, WHOIS, IP ranges, abuse contacts, and an
  IP-to-Places product. Data is available via a unified REST API (Lite, Core, Plus, Max, Enterprise tiers), a Batch
  Enrichment endpoint, and downloadable databases (CSV, MMDB, JSON, Parquet). Authentication uses access tokens via
  Basic Auth, Bearer Token, or query parameter; dual-stack IPv4/IPv6 endpoints are available.
url: https://ipinfo.io/developers
image: https://ipinfo.io/static/images/logo.svg
specificationVersion: '0.20'
created: '2026-05-28'
modified: '2026-05-29'
x-source: public-apis/public-apis
x-category: Development
x-tier: 3
x-tier-reason: bulk-registered-from-public-apis
tags:
  - IP Intelligence
  - IP Geolocation
  - ASN
  - Privacy Detection
  - VPN Detection
  - Threat Intelligence
  - Network Data
  - Mobile Carrier
  - WHOIS
  - Public APIs
  - Development
apis:
  - name: IPinfo Core API
    description: >-
      Unified IP intelligence REST API exposing the Lite, Core, Plus, Max, Enterprise, Places, ASN, Company, Carrier,
      Hosted Domains, Privacy Detection (Standard and Extended), Residential Proxy Detection, WHOIS, IP Ranges, Abuse
      Contact, Batch Enrichment, and Tools (Summarize IPs, Map IPs) endpoints. All endpoints share the same
      `api.ipinfo.io` base URL and the same token-based authentication.
    humanURL: https://ipinfo.io/developers
    baseURL: https://api.ipinfo.io
    tags:
      - IP Intelligence
      - REST API
      - Geolocation
      - ASN
      - Privacy Detection
    properties:
      - type: Documentation
        url: https://ipinfo.io/developers
      - type: APIReference
        url: https://ipinfo.io/developers
      - type: OpenAPI
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/openapi/ipinfo-openapi.yml
      - type: GettingStarted
        url: https://ipinfo.io/developers/getting-started
      - type: Authentication
        url: https://ipinfo.io/developers#authentication
      - type: Quickstart
        url: https://ipinfo.io/developers/lite-api
      - type: JSONSchema
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/json-schema/
      - type: JSONStructure
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/json-structure/
      - type: Example
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/examples/
      - type: SDK
        title: Python SDK
        url: https://github.com/ipinfo/python
      - type: SDK
        title: Node.js SDK
        url: https://github.com/ipinfo/node
      - type: SDK
        title: Java SDK
        url: https://github.com/ipinfo/java
      - type: SDK
        title: Go SDK
        url: https://github.com/ipinfo/go
      - type: SDK
        title: Ruby SDK
        url: https://github.com/ipinfo/ruby
      - type: SDK
        title: PHP SDK
        url: https://github.com/ipinfo/php
      - type: SDK
        title: C# SDK
        url: https://github.com/ipinfo/csharp
      - type: SDK
        title: Rust SDK
        url: https://github.com/ipinfo/rust
      - type: SDK
        title: Perl SDK
        url: https://github.com/ipinfo/perl
      - type: SDK
        title: Swift SDK
        url: https://github.com/ipinfo/swift
      - type: SDK
        title: Erlang SDK
        url: https://github.com/ipinfo/erlang
      - type: SDK
        title: Django SDK
        url: https://github.com/ipinfo/django
      - type: SDK
        title: Laravel SDK
        url: https://github.com/ipinfo/laravel
      - type: SDK
        title: Spring SDK
        url: https://github.com/ipinfo/spring
      - type: SDK
        title: Rails SDK
        url: https://github.com/ipinfo/rails
      - type: SDK
        title: Node Express SDK
        url: https://github.com/ipinfo/node-express
      - type: RateLimits
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/rate-limits/ipinfo-rate-limits.yml
      - type: Plans
        url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/plans/ipinfo-plans-pricing.yml
common:
  - type: ArazzoWorkflows
    url: arazzo/
    workflows:
      - url: arazzo/ipinfo-abuse-reporting-workflow.yml
        name: IPinfo Abuse Contact and Hosted Domains
        summary: Resolve an IP to its abuse contact and the domains hosted on it.
      - url: arazzo/ipinfo-asn-prefix-recon-workflow.yml
        name: IPinfo ASN Prefix Reconnaissance
        summary: Verify token access, then pull ASN detail and the domain ranges behind it.
      - url: arazzo/ipinfo-batch-then-detail-workflow.yml
        name: IPinfo Batch Enrich then Detail
        summary: Bulk-enrich a list of IPs, then pull the full record for one focus IP.
      - url: arazzo/ipinfo-ip-to-company-workflow.yml
        name: IPinfo IP to Operating Company
        summary: Resolve an IP address to its full record and then to the company operating it.
      - url: arazzo/ipinfo-my-ip-enrichment-workflow.yml
        name: IPinfo Enrich My Current IP
        summary: Discover the caller's own public IP and then pull full IP intelligence for it.
      - url: arazzo/ipinfo-summarize-and-map-workflow.yml
        name: IPinfo Summarize and Map IP Addresses
        summary: Generate a summary report for a list of IPs, then a map visualization for them.
      - url: arazzo/ipinfo-threat-screening-workflow.yml
        name: IPinfo IP Threat Screening
        summary: Screen an IP for privacy/anonymizer signals and confirm residential proxy use.
  - type: Website
    url: https://ipinfo.io
  - type: DeveloperPortal
    url: https://ipinfo.io/developers
  - type: SignUp
    url: https://ipinfo.io/signup
  - type: Login
    url: https://ipinfo.io/login
  - type: Pricing
    url: https://ipinfo.io/pricing
  - type: Console
    title: Dashboard
    url: https://ipinfo.io/account
  - type: Blog
    url: https://ipinfo.io/blog
  - type: Support
    url: https://support.ipinfo.io
  - type: StatusPage
    url: https://status.ipinfo.io
  - type: ChangeLog
    url: https://ipinfo.io/changelog
  - type: TermsOfService
    url: https://ipinfo.io/terms-of-service
  - type: PrivacyPolicy
    url: https://ipinfo.io/privacy-policy
  - type: Compliance
    url: https://ipinfo.io/security
  - type: GitHubOrganization
    url: https://github.com/ipinfo
  - type: CLI
    title: IPinfo CLI
    url: https://github.com/ipinfo/cli
  - type: CLI
    title: mmdbctl (MMDB File Management CLI)
    url: https://github.com/ipinfo/mmdbctl
  - type: Tools
    title: Summarize IPs Tool
    url: https://ipinfo.io/tools/summarize-ips
  - type: Tools
    title: Map IPs Tool
    url: https://ipinfo.io/tools/map
  - type: CodeExamples
    title: Sample Database Repository
    url: https://github.com/ipinfo/sample-database
  - type: CodeExamples
    title: Rails Example App
    url: https://github.com/ipinfo/rails-example
  - type: CodeExamples
    title: Docker Image
    url: https://github.com/ipinfo/docker
  - type: SpectralRules
    url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/rules/ipinfo-spectral-rules.yml
  - type: Vocabulary
    url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/vocabulary/ipinfo-vocabulary.yml
  - type: JSON-LD
    url: https://raw.githubusercontent.com/api-evangelist/ipinfo/main/json-ld/ipinfo-context.jsonld
  - type: PublicAPIsListing
    url: https://github.com/public-apis/public-apis
  - type: Features
    data:
      - name: IP Geolocation
        description: City, region, country, postal code, coordinates, and timezone for any IP.
      - name: ASN Data
        description: Autonomous System Number, organization, domain, type, peers, upstreams, downstreams, and prefixes.
      - name: Company Identification
        description: Organization name, type, and domain associated with an IP block.
      - name: Mobile Carrier Detection
        description: Carrier name, Mobile Country Code (MCC), and Mobile Network Code (MNC).
      - name: Hosted Domains
        description: List of domains hosted on an IP address (up to 1,000 per request).
      - name: Privacy Detection
        description: Identifies VPN, proxy, Tor, relay, and hosting provider anonymization services.
      - name: Residential Proxy Detection
        description: Detects residential, mobile, and datacenter proxies with last-seen recency.
      - name: Abuse Contact
        description: Network administrator address, email, and phone for reporting abuse.
      - name: WHOIS
        description: WHOIS lookup by Net ID, IP, domain, ASN, organization, or point-of-contact.
      - name: Batch Enrichment
        description: Bulk lookup of up to thousands of IPs in a single request.
      - name: Database Downloads
        description: Daily-refreshed CSV, MMDB, JSON, and Parquet database files.
      - name: IPv4 and IPv6 Support
        description: Dual-stack service with explicit v4.api.ipinfo.io and v6.api.ipinfo.io endpoints.
      - name: Field Filtering
        description: Request a single field (plaintext) or filtered object (JSON) per lookup.
      - name: 99.999% Uptime
        description: High-availability service with 50-200 ms typical response time.
  - type: UseCases
    data:
      - name: Fraud Prevention
        description: Block or flag traffic from VPNs, proxies, Tor, and known abuse sources.
      - name: Geo-Targeted Content
        description: Personalize content, pricing, and language based on visitor country and city.
      - name: Compliance and Geofencing
        description: Enforce geographic licensing or regulatory restrictions on content access.
      - name: Cybersecurity and Threat Intelligence
        description: Enrich SIEM, SOAR, and EDR events with IP context for faster triage.
      - name: Ad Tech and Marketing Analytics
        description: Attribute conversions, dedupe sessions, and segment by carrier or ASN.
      - name: Log Enrichment
        description: Add geolocation, ASN, and privacy flags to web, application, and network logs.
      - name: Bot Detection
        description: Identify datacenter and hosting-provider IPs that are likely bots.
      - name: Account Takeover Prevention
        description: Detect anomalous logins from unusual countries or proxy networks.
      - name: Customer Support Triage
        description: Surface visitor location and ISP to support agents in real time.
      - name: Network Engineering
        description: Look up ASN peering, prefixes, and abuse contacts during incident response.
  - type: Integrations
    data:
      - name: Splunk
        description: IPinfo Splunk app and lookups for SIEM enrichment.
      - name: Elastic / Logstash
        description: Logstash filter plugin for IPinfo MMDB database enrichment.
      - name: Cloudflare Workers
        description: Enrich edge requests with IPinfo data inside Workers.
      - name: AWS Lambda
        description: Serverless enrichment using IPinfo SDKs and Lambda layers.
      - name: Snowflake
        description: Bulk database loads of IPinfo data for analytical warehouses.
      - name: Datadog
        description: Use IPinfo enrichment in Datadog dashboards and detection rules.
      - name: Heroku
        description: Use IPinfo SDKs (Rails, Node, Python, etc.) in Heroku apps.
      - name: Docker
        description: Official Docker image and Compose files for self-hosted enrichment.
      - name: Homebrew
        description: Install the IPinfo CLI and mmdbctl via Homebrew tap.
  - type: Solutions
    data:
      - name: IPinfo Lite
        description: Free, unlimited tier with country, continent, and ASN attributes.
      - name: IPinfo Core
        description: Paid tier with 16 attributes including city-level geolocation and basic privacy detection.
      - name: IPinfo Plus
        description: Paid tier with 32 attributes including carrier data and named privacy services.
      - name: IPinfo Max
        description: Paid tier with 35 attributes including residential proxy detection.
      - name: IPinfo Enterprise
        description: Custom tier with 40+ attributes, full WHOIS, IP ranges, dedicated account manager.
      - name: IPinfo Database
        description: Downloadable IP database in CSV, MMDB, JSON, and Parquet for offline lookups.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com