BYTETOOLS

ipapi.is API

Free IP intelligence API with no key: geolocation plus VPN, proxy, Tor, datacentre and known-abuser detection, with ASN and company data. Tested example.

No API key requiredCORS enabledHTTPSFree tier

Endpoint tested and returned HTTP 200 on 2026-08-20

What is the ipapi.is API?

ipapi.is is a free, key-free IP intelligence API returning geolocation alongside risk signals — whether an address is a VPN, proxy, Tor node, datacentre IP or known abuser — plus ASN, company and network details.

Like ipquery, this goes beyond plain geolocation to flag anonymisation and abuse signals, which is what fraud prevention actually needs. Getting that without a key is unusual — comparable commercial services charge for exactly these fields.

It also returns detailed network context: the ASN, the owning company, the network range and its type. For distinguishing a residential connection from a cloud provider, that is often more informative than the boolean flags alone.

Quick facts

Base URL
https://api.ipapi.is
Authentication
Free tier needs no key at a limited daily volume. A key raises the allowance.
Rate limit
Roughly 1,000 requests per day on the free keyless tier.
Pricing
Free tier; paid plans for higher volume.
CORS
Enabled — callable directly from browser JavaScript
Official docs
Read the docs

How to use the ipapi.is API

Every request below was executed against the live API on 2026-08-20, and the response shown is the real body it returned — not an illustration.

1. Look up IP intelligence data

GET https://api.ipapi.is/?q=8.8.8.8

curl
curl 'https://api.ipapi.is/?q=8.8.8.8'
JavaScript (fetch)
const res = await fetch("https://api.ipapi.is/?q=8.8.8.8");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);
Python (requests)
import requests

res = requests.get("https://api.ipapi.is/?q=8.8.8.8", timeout=20)
res.raise_for_status()
print(res.json())
Response — HTTP 200
{
  "ip": "8.8.8.8",
  "is_bogon": false,
  "is_datacenter": true,
  "is_tor": false,
  "is_proxy": false,
  "is_vpn": true,
  "is_abuser": true,
  "company_name": "Google LLC",
  "asn_num": 15169,
  "asn_org": "Google LLC",
  "cc": "US",
  "lat": 37.38605,
  "lon": -122.08385
}

Parameters

ParameterTypeRequiredDescription
qstringOptionalIP address to look up. Omit for the caller's own IP. 8.8.8.8
keystringOptionalOptional API key for higher limits. your-key

Response fields

ipstring
The queried address.
is_datacenter / is_vpn / is_proxy / is_torboolean
Anonymisation and hosting signals.
is_abuserboolean
Whether the address appears on abuse lists.
companyobject
Owning organisation with name, domain and network type.
asnobject
Autonomous system number, organisation and network range.
locationobject
Country, city, coordinates and timezone.
is_bogonboolean
Whether it is a reserved or unroutable address.

What you can build with the ipapi.is API

  • Flag high-risk signups from VPNs or datacentre IPs
  • Distinguish residential users from cloud infrastructure
  • Enrich fraud scoring with network reputation
  • Localise content while detecting spoofed locations

Common errors and how to fix them

is_bogon true

The address is reserved or unroutable.

Fix: Filter private and reserved ranges before querying.

Legitimate users flagged as VPN

Many people use VPNs for ordinary privacy.

Fix: Use the flags to trigger additional verification, never to block outright.

Daily quota exhausted

The keyless tier allows around 1,000 per day.

Fix: Cache by IP — the result is stable for weeks.

ipapi.is API — frequently asked questions

Is ipapi.is free?

Yes, the free tier works with no API key at roughly 1,000 requests per day, which is generous for an API including VPN and abuse detection.

How reliable is the VPN detection?

It is a strong signal but never definitive — residential proxies in particular are hard to detect. Use it to trigger extra verification rather than to block.

What is is_datacenter useful for?

It indicates the IP belongs to a hosting provider rather than a consumer ISP, which usually means a bot, scraper or VPN rather than someone browsing from home.

How does it compare with ipquery.io?

Very similar feature sets, both free and keyless. Running both and comparing is reasonable when a signal matters, since their detection lists differ.

Tools that pair with this API

ipapi.is is an independent third-party service and is not affiliated with ByteTools or ByteVancer. Details on this page were verified on 2026-08-20; always check the official documentation before relying on this API in production, as terms and limits can change.