BYTETOOLS

ipquery.io API

Free IP intelligence API with no key: geolocation, ISP, ASN plus VPN, proxy, Tor and datacentre detection in one request over HTTPS. Tested example.

No API key requiredCORS enabledHTTPSFree tier

Endpoint tested and returned HTTP 200 on 2026-08-19

What is the ipquery.io API?

ipquery.io is a free, key-free IP intelligence API returning geolocation, ISP and ASN data alongside risk signals — whether the address is a VPN, proxy, Tor exit node, datacentre IP or known abuser.

Most free IP APIs stop at geolocation. ipquery adds a risk object flagging VPNs, proxies, Tor exit nodes, datacentre ranges and known abusive addresses, which is the part fraud and abuse prevention actually needs.

Getting those signals without an API key is genuinely unusual — comparable commercial services charge for exactly this data. It is worth treating the flags as strong hints rather than certainties, since VPN detection is inherently imperfect.

Quick facts

Base URL
https://api.ipquery.io
Authentication
No API key required.
Rate limit
No published hard limit; fair use expected.
Pricing
Free.
CORS
Enabled — callable directly from browser JavaScript
Official docs
Read the docs

How to use the ipquery.io API

Every request below was executed against the live API on 2026-08-19, and the response shown is the real body it returned — not an illustration.

1. Look up IP intelligence data

GET https://api.ipquery.io/8.8.8.8

curl
curl 'https://api.ipquery.io/8.8.8.8'
JavaScript (fetch)
const res = await fetch("https://api.ipquery.io/8.8.8.8");
if (!res.ok) throw new Error(`Request failed: ${res.status}`);
const data = await res.json();
console.log(data);
Python (requests)
import requests

res = requests.get("https://api.ipquery.io/8.8.8.8", timeout=20)
res.raise_for_status()
print(res.json())
Response — HTTP 200
{
  "ip": "8.8.8.8",
  "isp": {
    "asn": "AS15169",
    "org": "Google LLC",
    "isp": "Google LLC"
  },
  "location": {
    "country": "United States",
    "country_code": "US",
    "city": "Mountain View",
    "state": "California",
    "zipcode": "94043",
    "latitude": 37.44710055390398,
    "longitude": -122.0888395796306,
    "timezone": "America/Los_Angeles",
    "localtime": "2026-08-19T20:27:10"
  },
  "risk": {
    "is_mobile": false,
    "is_vpn": false,
    "is_tor": false,
    "is_proxy": false,
    "is_datacenter": true,
    "risk_score": 0
  }
}

Parameters

ParameterTypeRequiredDescription
<ip>pathOptionalIP address to query. Omit for the caller's own IP. 8.8.8.8
formatstringOptionaljson, yaml, xml or text. json

Response fields

ipstring
The queried address.
isp.asn / org / ispstring
Autonomous system number, organisation and ISP name.
location.country / citystring
Country and approximate city.
location.latitude / longitudenumber
Approximate coordinates.
location.timezonestring
IANA timezone.
risk.is_vpn / is_proxy / is_torboolean
Anonymisation signals.
risk.is_datacenterboolean
Whether the IP belongs to a hosting provider.
risk.risk_scoreinteger
Aggregate risk score.

What you can build with the ipquery.io API

  • Flag signups from VPNs, proxies or datacentre IPs for review
  • Reduce fraud and abuse on free trials
  • Localise content by country while detecting spoofed locations
  • Enrich security logs with network reputation data

Common errors and how to fix them

Risk flags on legitimate users

Many people use VPNs for privacy.

Fix: Treat the flags as signals for additional verification, not as grounds for an automatic block.

Private IP returns an error

RFC1918 addresses cannot be geolocated.

Fix: Filter private ranges before querying.

Inconsistent city data

IP geolocation is approximate everywhere.

Fix: Do not present the city as authoritative.

ipquery.io API — frequently asked questions

Is ipquery.io free?

Yes, free with no API key, which is unusual for an API that includes VPN and proxy detection — comparable commercial services charge for those signals.

Can it detect VPNs reliably?

It provides strong signals, but VPN detection is never perfect. New endpoints appear constantly and residential proxies are hard to spot. Use it to trigger extra verification, not to block outright.

What does is_datacenter mean?

The IP belongs to a hosting provider rather than a consumer ISP. That often indicates a bot, scraper or VPN rather than a person browsing from home.

Does it work over HTTPS?

Yes, HTTPS with no key, which makes it usable where ip-api's HTTP-only free tier is blocked as mixed content.

Tools that pair with this API

JSON Formatter

Format, beautify and minify JSON online with 2-space, 4-space or tab indentation. Sort keys alphabetically and catch syntax errors instantly — free and private.

ipquery.io is an independent third-party service and is not affiliated with ByteTools or ByteVancer. Details on this page were verified on 2026-08-19; always check the official documentation before relying on this API in production, as terms and limits can change.