BYTETOOLS

ipapi.is API

Free IP intelligence API with no key: geolocation plus VPN, proxy, Tor, datacentre and known-abuser detection, with ASN and company data. Tested example.

No API key requiredCORS enabledHTTPSFree tier

Endpoint tested and returned HTTP 200 on 20 Aug 2026

What is the ipapi.is API?

ipapi.is is a free, key-free IP intelligence API returning geolocation alongside risk signals — whether an address is a VPN, proxy, Tor node, datacentre IP or known abuser — plus ASN, company and network details.

Like ipquery, this goes beyond plain geolocation to flag anonymisation and abuse signals, which is what fraud prevention actually needs. Getting that without a key is unusual — comparable commercial services charge for exactly these fields.

It also returns detailed network context: the ASN, the owning company, the network range and its type. For distinguishing a residential connection from a cloud provider, that is often more informative than the boolean flags alone.

Quick facts

Base URL
https://api.ipapi.is
Authentication
Free tier needs no key at a limited daily volume. A key raises the allowance.
Rate limit
Roughly 1,000 requests per day on the free keyless tier.
Pricing
Free tier; paid plans for higher volume.
CORS
Enabled — callable directly from browser JavaScript
Official docs
Read the docs

How to use the ipapi.is API

Every request below was executed against the live API on 20 Aug 2026, and the response shown is the real body it returned — not an illustration.

1. Look up IP intelligence data

GET https://api.ipapi.is/?q=8.8.8.8

curl
curl 'https://api.ipapi.is/?q=8.8.8.8'
JavaScript (fetch)
const res = await fetch("https://api.ipapi.is/?q=8.8.8.8");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);
Python (requests)
import requests

res = requests.get("https://api.ipapi.is/?q=8.8.8.8", timeout=20)
res.raise_for_status()
print(res.json())
Response — HTTP 200
{
  "ip": "8.8.8.8",
  "is_bogon": false,
  "is_datacenter": true,
  "is_tor": false,
  "is_proxy": false,
  "is_vpn": true,
  "is_abuser": true,
  "company_name": "Google LLC",
  "asn_num": 15169,
  "asn_org": "Google LLC",
  "cc": "US",
  "lat": 37.38605,
  "lon": -122.08385
}

Parameters

ParameterTypeRequiredDescription
qstringOptionalIP address to look up. Omit for the caller's own IP. 8.8.8.8
keystringOptionalOptional API key for higher limits. your-key

Response fields

ipstring
The queried address.
is_datacenter / is_vpn / is_proxy / is_torboolean
Anonymisation and hosting signals.
is_abuserboolean
Whether the address appears on abuse lists.
companyobject
Owning organisation with name, domain and network type.
asnobject
Autonomous system number, organisation and network range.
locationobject
Country, city, coordinates and timezone.
is_bogonboolean
Whether it is a reserved or unroutable address.

What you can build with the ipapi.is API

  • Flag high-risk signups from VPNs or datacentre IPs
  • Distinguish residential users from cloud infrastructure
  • Enrich fraud scoring with network reputation
  • Localise content while detecting spoofed locations

Common errors and how to fix them

is_bogon true

The address is reserved or unroutable.

Fix: Filter private and reserved ranges before querying.

Legitimate users flagged as VPN

Many people use VPNs for ordinary privacy.

Fix: Use the flags to trigger additional verification, never to block outright.

Daily quota exhausted

The keyless tier allows around 1,000 per day.

Fix: Cache by IP — the result is stable for weeks.

ipapi.is API — frequently asked questions

Is ipapi.is free?

Yes, the free tier works with no API key at roughly 1,000 requests per day, which is generous for an API including VPN and abuse detection.

How reliable is the VPN detection?

It is a strong signal but never definitive — residential proxies in particular are hard to detect. Use it to trigger extra verification rather than to block.

What is is_datacenter useful for?

It indicates the IP belongs to a hosting provider rather than a consumer ISP, which usually means a bot, scraper or VPN rather than someone browsing from home.

How does it compare with ipquery.io?

Very similar feature sets, both free and keyless. Running both and comparing is reasonable when a signal matters, since their detection lists differ.

Tools that pair with this API

Alternatives to ipapi.is API

If ipapi.is does not fit, these geolocation & ip apis cover similar ground. Every one was called before publishing, and each links to its own reference page with a working curl command and the response it returned.

APIWhat it doesAuthCORSLast verified
ipifyipify is a free, unlimited API that returns your public IP address as text, JSON or JSONP. No key, no rate limit, IPv4 and IPv6 endpoints. Live curl example.No keyYes19 Aug 2026
ip-api.comFree IP geolocation API returning country, city, coordinates, timezone and ISP for any IP. No key on the free tier, 45 requests per minute. Tested curl example.No keyYes19 Aug 2026
ipwho.isFree IP geolocation API with HTTPS and no API key. Returns country, city, coordinates, timezone, currency and connection data. 10,000 requests/month free.No keyYes19 Aug 2026
Nominatim (OpenStreetMap)Free OpenStreetMap geocoding API: convert addresses to coordinates and back. No API key, open data, 1 request per second. Tested curl example and usage policy.No keyNo19 Aug 2026
ipquery.ioFree IP intelligence API with no key: geolocation, ISP, ASN plus VPN, proxy, Tor and datacentre detection in one request over HTTPS. Tested example.No keyYes19 Aug 2026
Is On WaterFree land-versus-water API with no key: tell whether any latitude and longitude falls on water or land, in milliseconds. Tested curl example and live response included.No keyYes21 Aug 2026
All Geolocation & IP APIs

ipapi.is is an independent third-party service and is not affiliated with ByteTools or ByteVancer. Details on this page were verified on 20 Aug 2026; always check the official documentation before relying on this API in production, as terms and limits can change.