Free IP Lookup: Check Any IP Address Instantly
A raw IP address tells you almost nothing on its own. Look up any IP and get the location, ISP, ASN, timezone, and the security signals that matter: VPN, proxy, Tor, hosting, and abuse history. No signup required.
What you get from an IP lookup
Country, region, city, postal code, latitude, longitude, ISP, ASN, and timezone. Every IP returns the full address.
Flags IPs masked by commercial VPNs, open proxies, or Tor exit nodes. Separates real visitors from privacy-tooling traffic.
Identifies datacenter and cloud IPs (AWS, GCP, Azure, OVH, and others) and IPs with prior abuse history from public reputation sources.
Lookups happen server-side against public databases. The IP you check, your request body, and the response are not stored after the request completes.
Trusted for IP intelligence by teams at
4.8 from 1,863 votes
.svg)
How IP lookup works
Every lookup queries six data sources in parallel. Results return in under 200ms.
Geo database
Matches the IP against a maintained geolocation database that maps IP ranges to country, region, city, postal code, and coordinates.
ASN registry
Resolves the IP to its Autonomous System Number using ARIN, RIPE, APNIC, LACNIC, and AFRINIC. Returns the ISP or organization that owns the address block.
Hosting and datacenter
Cross-references the IP against published ranges from major cloud and hosting providers (AWS, GCP, Azure, OVH, Hetzner, DigitalOcean) and flags datacenter traffic.
VPN database
Checks the IP against a curated list of commercial VPN exit nodes, refreshed daily. Catches the major providers and most boutique services.
Proxy detection
Combines public open-proxy lists with behavioral signals to identify IPs forwarding traffic on behalf of someone else, including residential proxy networks.
Tor and abuse history
Cross-checks the IP against public Tor exit-node lists and aggregated abuse reports from public reputation sources, returning a single boolean for each.
Get IP intelligence in your code
4.8 from 1,863 votes
The same intelligence the tool above returns, available as an API.
No credit card required
Why look up an IP
Fraud screening at signup
Catch high-risk IPs before they create accounts. VPN, Tor, and abuse-history signals flag the patterns most often associated with promo abuse, trial farming, and fake account creation, without adding friction for real users.
Compliance and licensing
Block traffic from regions where you cannot legally serve users. IP geolocation supports sanctions screening, age-restricted content gating, gambling licensing, and other rule-driven access controls.
Geo-aware personalization
Show the right currency, language, and content from the first request, before the visitor reaches an account or login. IP-based personalization works for anonymous traffic where account-based targeting cannot.
Network and security debugging
Investigate suspicious traffic in your logs. Get the source ISP, ASN, hosting provider, and abuse history for any IP in your incident timeline, without leaving your dashboard.
For more information check our
More IP intelligence tools
VPN Checker
Check whether an IP belongs to a known commercial VPN service.
Try it free
Proxy Checker
Identify anonymous, transparent, and datacenter proxy connections.
Try it free
Tor Checker
Determine whether an IP belongs to the Tor anonymity network.
Try it free
IP Abuse Check
Look up abuse reports and threat intelligence for any IP address.
Try it free
Explore all Abstract tools
See what the API returns
Every IP lookup returns a structured JSON response. The same data the tool shows above is available through the API, from one request to millions per month.
Response parameters
ip_address
String
The IP address submitted for geolocation.
security.is_vpn
Boolean
Whether the IP address is being used from a VPN.
security.is_proxy
Boolean
Whether the IP address is being used from a Proxy.
security.is_tor
Boolean
Whether the IP address is part of the TOR network.
security.is_hosting
Boolean
Whether the IP address is an internet service hosting IP address.
security.is_relay
Boolean
Whether the IP address is being used as a relay server.
security.is_mobile
Boolean
Whether the IP address belongs to a mobile network.
security.is_abuse
Boolean
Whether the IP address has been flagged for abusive behavior.
asn.asn
Integer
The Autonomous System Number (ASN) associated with the IP address.
asn.name
String
The name of the organization or ISP associated with the ASN.
asn.domain
String
The domain associated with the ASN.
asn.type
String
The type of organization, such as ISP or hosting.
company.name
String
The name of the company associated with the IP address.
company.domain
String
The company's domain name.
company.type
String
The type of company, such as ISP or hosting.
domains.domains
Array
A list of domains associated with the IP address.
location.city
String
City's name.
location.city_geoname_id
Integer
City's geoname ID.
location.region
String
State or province in which the city is located.
location.region_iso_code
Integer
State or province's ISO 3166-2 code.
location.region_geoname_id
String
State or province's geoname ID.
location.postal_code
String
ZIP or postal code.
location.country
String
Country's name.
location.country_code
Integer
Country's ISO 3166-1 alpha-2 code.
location.country_geoname_id
Integer
Country's geoname ID.
location.is_country_eu
Boolean
True if the country is in the EU, false if it is not.
location.continent
String
Continent's name.
location.continent_code
String
2 letter continent code: AF, AS, EU, NA, OC, SA, AN.
location.continent_geoname_id
Integer
Continent's geoname ID.
location.longitude
Float
Decimal of the longitude.
location.latitude
Float
Decimal of the latitude.
timezone.name
String
Timezone's name from the IANA Time Zone Database.
timezone.abbreviation
String
Timezone's abbreviation, also from the IANA Time Zone Database.
timezone.utc_offset
Integer
The UTC offset for the timezone.
timezone.local_time
String
Current time in the local time zone.
timezone.is_dst
Boolean
True if the location is currently in Daylight Savings Time (DST).
flag.emoji
String
Country's flag as an emoji.
flag.unicode
String
Country's flag in unicode.
flag.png
String
Link to a hosted version of the country's flag in PNG format.
flag.svg
String
Link to a hosted version of the country's flag in SVG format.
currency.name
String
The currency's name.
currency.code
String
The currency's code in ISO 4217 format.
currency.symbol
String
The currency's symbol.
API Endpoint
curl --request GET \
--url https://ip-intelligence.abstractapi.com/v1API Response
{
"ip_address": "185.197.192.65",
"security": {
"is_vpn": true,
"is_proxy": true,
"is_tor": false,
"is_hosting": false,
"is_relay": false,
"is_mobile": false,
"is_abuse": false,
},
"asn": {
"asn": 136787,
"name": "PacketHub S.A.",
"domain": "packethub.tech",
"type": "isp",
},
"company": {
"name": "PacketHub S.A.",
"domain": "packethub.tech",
"type": "isp",
},
"domains": {
"domains": []
},
"location": {
"city": "Miami",
"city_geoname_id": 4164138,
"region": "Florida",
"region_iso_code": "FL",
"region_geoname_id": 4155751,
"postal_code": "33197",
"country": "United States",
"country_code": "US",
"country_geoname_id": 6252001,
"is_country_eu": false,
"continent": "North America",
"continent_code": "NA",
"continent_geoname_id": 6255149,
"longitude": -80.1946,
"latitude": 25.7689,
},
"timezone": {
"name": "America/New_York",
"abbreviation": "EST",
"utc_offset": -5,
"local_time": "12:07:51",
"is_dst": false,
},
"flag": {
"emoji": "🇺🇸",
"unicode": "U+1F1FA U+1F1F8",
"png": "https://static.abstractapi.com/country-flags/US_flag.png",
"svg": "https://static.abstractapi.com/country-flags/US_flag.svg",
},
"currency": {
"name": "US Dollar",
"code": "USD",
"symbol": "$"
}
}IP lookup vs geolocation vs intelligence
Three terms that sound similar but solve different problems. Lookup gives you the basics. Geolocation gives you precise location. Intelligence gives you risk.
IP lookup
Returns the country, region, city, and ISP for an IP. The information most consumer tools show.
start for free
WHAT IT DOES
- Country
- Region and city
- ISP / ASN
- Postal code and coordinates
- Timezone
- Country flag
- VPN detection
- Proxy detection
- Tor detection
- Hosting / datacenter detection
- Abuse history
- Speed: Instant (database lookup)
- Cost: Free
- Best for: Casual lookups, debugging a single IP
IP geolocation
Adds precise location data, timezone, country flag, and postal code. The data most apps need to localize content.
start for free
WHAT IT DOES
- Country
- Region and city
- ISP / ASN
- Postal code and coordinates
- Timezone
- Country flag
- VPN detection
- Proxy detection
- Tor detection
- Hosting / datacenter detection
- Abuse history
- Speed: Under 200ms
- Cost: Per-request API, free tier available
- Best for: Localization, currency selection, timezone-aware UI
IP intelligence
Everything geolocation returns, plus VPN, proxy, Tor, hosting, and abuse signals. The data fraud and security teams need.
start for free
WHAT IT DOES
- Country
- Region and city
- ISP / ASN
- Postal code and coordinates
- Timezone
- Country flag
- VPN detection
- Proxy detection
- Tor detection
- Hosting / datacenter detection
- Abuse history
- Speed: Under 200ms
- Cost: Per-request API, free tier available
- Best for: Fraud screening, geo-blocking, abuse mitigation, oncall debugging
The best build
on Abstract
We started off using basic free services for IP geolocation as well as the avatar APIs, but quickly found how limited they were: slow, inaccurate, easily fooled by VPNs, etc. But once we found and started testing out Abstract's IP geolocation API, we were hooked. Awesome data quickly, always fast, and great documentation.
Chris Stanley, Scope
IP intelligence guides
FAQ about Abstract's IP Lookup
Can I look up an IP address without the owner knowing?
Yes. An IP lookup queries public databases (geolocation, ASN registries, VPN and proxy lists, abuse history) without contacting the IP itself. The owner of the IP receives no signal that you ran the lookup. Lookups return only the data those public sources hold.
How accurate is IP geolocation?
Country accuracy is typically above 99%. City accuracy varies between 55% and 80% depending on the region and the IP type. Mobile and VPN IPs are less accurate by design. IP geolocation places you near the IP's registered region, not at a precise street address. Treat city as a strong hint, not a fact.
What does it mean when an IP is flagged as VPN, proxy, or Tor?
VPN means the IP belongs to a known commercial VPN service (NordVPN, ExpressVPN, and similar). Proxy means the IP is in a list of open or anonymous proxies that forward traffic on behalf of someone else. Tor means the IP is a public Tor exit node. All three indicate the visitor's real location and identity are intentionally hidden. None of them prove malicious intent on their own.
Can someone look up my IP address?
Yes. Your public IP is visible to every server you connect to (websites, apps, email servers). Anyone with that IP can run the same kind of lookup the tool above performs. The lookup will reveal your approximate location, your ISP, and whether you are using a VPN or proxy. To check what your own IP exposes, see the What Is My IP page.
Is it legal to look up an IP address?
In most jurisdictions, yes. IP addresses are publicly visible and the metadata returned by a lookup (country, region, ISP, ASN) is also public. Using the data to identify a specific person or to harass them can cross into illegal territory depending on local privacy law. Standard business uses (fraud screening, geo-blocking, traffic analytics) are not restricted.
What is the difference between an IP lookup and a WHOIS lookup?
An IP lookup returns geolocation, ISP, ASN, timezone, and security signals (VPN, proxy, Tor, hosting, abuse). A WHOIS lookup queries the regional internet registry (ARIN, RIPE, APNIC, LACNIC, AFRINIC) for the organization that owns the IP block, plus contact details and allocation date. WHOIS is useful when you need the registered owner of an IP range. IP lookup is useful when you need the visitor's location and risk profile.
Is the IP lookup tool free?
Yes. The online tool is free with no signup required for individual lookups. For programmatic access, Abstract's IP Intelligence API offers a free tier with 1,000 requests per month. View pricing for higher-volume plans.
Start looking up IPs for free
4.8 from 1,863 votes
1,000 free requests per month to start. No credit card required.
get free api key
No credit card required
