Know every address that reaches you.

Physical and declared geolocation, BGP ASN, connection type, and calibrated VPN, proxy, Tor and hosting flags for any IPv4 or IPv6 address. Call the low-latency REST API, or run compiled MMDB databases directly on your own servers.

30K lookups a month free, no card required.

GET https://api.ipscope.io/v1/ip/me
Resolving…

Locating…

Checking…
Live public lookupFull response in the demo

Six answers for every address

Every lookup and compiled MMDB record is organized into the same structured blocks, down to the exact field names across IPv4 and IPv6.

Country geolocation

geo

Physical egress country versus declared registration country, with calibrated confidence and virtual-location detection when routing crosses borders.

country_codedeclared_country_codephysical_country_codeis_virtual_locationlocation_typeconfidence

API from Free · in 5 MMDB profiles

City geolocation

geo

Subdivision, city, postal code, coordinates, IANA time zone and accuracy radius in kilometers, separating verified metro POPs from wide-area pools.

citysubdivisionpostal_codelatitudelongitudeaccuracy_radius_kmtimezone

API from Starter · in 3 MMDB profiles

Network & BGP ASN

network

Autonomous System Number, operator organization and the most-specific matched IPv4 or IPv6 CIDR prefix from the global BGP routing table.

matched_networkasnorganizationbgp_prefix_lengthallocation_status

API from Free · in 4 MMDB profiles

Connection context

connection

How the address connects to the internet: residential broadband, cellular mobile carrier, enterprise business, cloud hosting, education or government.

connection_typeis_residentialis_mobileis_businessis_hosting

API from Starter · in 3 MMDB profiles

Anonymity & hosting

security

Calibrated detection of VPN exits, open proxies, Tor exit nodes, private relays and cloud datacenters, backed by deterministic reason codes.

is_vpnis_proxyis_tor_exitis_hostinganonymizer_typeconfidencereason_codes

API from Pro · in 2 MMDB profiles

Threat & abuse velocity

security_extensions

30-day abuse velocity score, active internet scanner detection, and observation recency compiled from global threat and blocklist feeds.

abuse_velocity_scoreis_known_scannerobservation_recency_hours

API from Pro · in 1 MMDB profile

Call it over HTTPS, or mount it on your own servers

Both paths read from the exact same canonical snapshot. Query our low-latency API per request, or pull compiled MMDB, CSV and Parquet artifacts straight to your own nodes with zero per-lookup cost.

Lookup API

O(W) 128-bit Radix · Hot-Reload

Sub-millisecond lookups against our in-memory IPv4/IPv6 radix trie and hot-reloaded Mega-MMDB. Authenticate via X-API-Key or Bearer token; from the Pro plan, resolve up to 100 addresses per call on POST /v1/ip/batch.

curl https://api.ipscope.io/v1/ip/89.187.175.151 \
  -H "X-API-Key: $IPSCOPE_KEY"
  • Scoped keys: SHA-256 hashed keys with lookup & batch scopes
  • Token-bucket rate limit: Shared per-account burst with X-RateLimit-* headers

Database downloads

Rust Arena Compiler · Signed GCS

Compiled from our 35.3M+ prefix state into standard v2.0 .mmdb, .csv.gz and .parquet files. Pull releases with your API key via 15-minute signed Cloud Storage URLs, ETag caching and HTTP Range resume.

GET /v1/mmdb/releases/latest/downloadsnap_2026_10_26
  • ipscope-complete.mmdb128-bit binary radix trie · IPScope-Custom-v1
    MMDB
  • ipscope-complete.csv.gznetwork_cidr, start_ip, end_ip + licensed columns
    CSV.gz
  • ipscope-complete.parquetZstd columnar blocks · OLAP & SQL analytics engines
    Parquet
  • SHA256SUMS.manifest.jsonsha256 digest, profileSchemaHash & snapshotVersion
    Manifest
MMDBZero-copy binary tree for standard MMDB v2.0 readers in Rust, Go, Node, Python & NGINX
CSVCanonical CIDR prefixes with start/end IPs, gzip-compressed (.csv.gz)
ParquetZstd columnar blocks for SQL engines, OLAP data warehouses & SIEM pipelines

Every database license includes

Compiled deterministically with a profileSchemaHash tailored to your licensed field families.

  • Unified IPv4 and IPv6 radix tree in a single file
  • MMDB, CSV.gz and Parquet artifacts on every build
  • 1 internal server included (+$149/mo per additional server)
  • Strict internal use only (cannot be shared or sold)
  • HMAC-SHA256 signed URLs, ETag (304) & HTTP Range resume
  • Immutable snapshot versions kept for instant rollback
  • A new build every 30 days, or a new build every night by 06:00 utc

Rebuilt every night, gated by a holdout scorecard before it ships

Each snapshot is fused from scratch out of public routing, registry, geofeed, and active RTT measurement streams, and must beat the active release on a disjoint ground-truth holdout set before anyone gets it.

  1. 01evidence-adapters

    Collect

    Global internet allocation tables, BGP origin tables, RFC 8805/9092 operator geofeeds, cloud provider manifests, exit node feeds, and active ProbeNet RTT measurements are fetched on independent schedules.

    Allocations · BGP · RFC 8805 · ProbeNet
  2. 02rtt-sanity-verifier

    Clean & Guard

    Claims are normalized into ObservedEvidence, expired records are pruned by per-source FreshnessSLAs, correlated mirrors are collapsed into a single EvidenceDimension, and physical speed-of-light RTT bounds reject spoofed locations.

    Freshness SLA · c_fiber RTT bound
  3. 03prefix-scoring + platt

    Fuse & Calibrate

    Independent dimensions are combined via log-odds Bayesian scoring. Operator-declared locations are separated from physical egress (is_virtual_location), and Platt scaling calibrates raw scores into true [0, 1] probabilities.

    Separated locations · Platt [0, 1]
  4. 04ipscope-rust-mmdb

    Build

    Our flat-arena Rust compiler merges 35.3M+ IPv4 and IPv6 prefixes into a single 128-bit binary radix trie, deduplicates identical leaf payloads in a bottom-up DAG pass, and exports MMDB, CSV.gz, and Parquet artifacts.

    35.3M+ prefixes · MMDB · CSV · Parquet
  5. 05scorecard-holdout

    Validate

    Every candidate snapshot is scored against a disjoint ground-truth holdout set for country/city recall, Brier calibration error, false-positive VPN rate, and longitudinal prefix churn. Any regression halts promotion.

    Disjoint holdout · Brier & drift gate
  6. 06mega-mmdb-hot-reload

    Publish

    Verified artifacts are promoted via atomic inode swap for zero-downtime API hot-reload and published with HMAC-SHA256 manifests, ETag headers, and signed Cloud Storage URLs while keeping prior snapshots for rollback.

    Atomic mmap swap · SHA-256 manifest

Where the answers come from

Every source is governed by our LicensePolicyRegistry (customerDownloadAllowed). Five mirrors of the same geofeed collapse into a single correlated ancestry so mirror count never inflates confidence.

Evidence trust tiers

  • authoritativeCryptographically attested or direct physical measurement
  • verifiedCross-corroborated across >=2 independent dimensions
  • inferredSingle-dimension administrative or contextual claim
Global Network Allocation & Registration Recordsadministrative
455,000+ allocated and assigned IPv4/IPv6 ranges from regional internet delegation tables and structured network registration records.
Global BGP Routing, RPKI & IXP Facilitiesrouting
Active prefix announcements (bgp_prefix_length), origin ASNs, RPKI Route Origin Authorizations, and internet exchange interconnection facility coordinates.
Operator Geofeeds (RFC 8805) & Cloud Rangesprovider
Self-published RFC 8805/9092 CSV geofeeds cross-checked against netblock ownership bindings, plus official cloud and CDN IP range manifests.
Active Speed-of-Light RTT Probesactive_measurement
Multi-vantage ICMP/TCP minimum-RTT triangulation across global ProbeNet vantage points: an address cannot physically reside farther than light in fiber allows.
Reverse DNS & Infrastructure Contextcontextual
PTR hostname token extraction for IATA/UNLOCODE router POP hints, BNG residential pools, and mobile CGNAT gateways, corroborated against RTT before counting.
Anonymizer, VPN & Threat Telemetryactive_measurement
Hourly onion-router directory consensus, consumer privacy relay egresses, verified commercial VPN exit nodes, and 30-day abuse velocity & scanner feeds.

Pay for lookups, or compile your own database

API plans include a monthly lookup allowance with optional prepaid wallet overages at $0.10 per 1,000 requests. Databases are priced by the field families, rebuild cadence, and number of servers you license (1 server included).

Free

For side projects and evaluating the API on your own live traffic.

$0/ month

free forever · no card

Start free

30Klookups / month

  • Country geolocation
  • City geolocation
  • Network & BGP ASN
  • Connection context
  • Anonymity & hosting
  • Threat & abuse velocity
Rate limit
5 req/s
Burst
20 req
Batch API
-
API keys
10 keys
SLA
-
Support
Community

Starter

City-level geolocation, ASN and connection context for production apps.

$12/ month

billed monthly

Choose Starter

250Klookups / month

  • Country geolocation
  • City geolocation
  • Network & BGP ASN
  • Connection context
  • Anonymity & hosting
  • Threat & abuse velocity
Rate limit
10 req/s
Burst
50 req
Batch API
-
API keys
10 keys
SLA
-
Support
Email

Pro

Popular

All 6 intelligence blocks, including VPN, proxy, Tor & abuse velocity.

$39/ month

billed monthly

Choose Pro

2Mlookups / month

  • Country geolocation
  • City geolocation
  • Network & BGP ASN
  • Connection context
  • Anonymity & hosting
  • Threat & abuse velocity
Rate limit
30 req/s
Burst
150 req
Batch API
100 / call
API keys
10 keys
SLA
99.9%
Support
Next-day email

Business

10M monthly lookups, 100 req/s sustained throughput and 500 burst.

$99/ month

billed monthly

Choose Business

10Mlookups / month

  • Country geolocation
  • City geolocation
  • Network & BGP ASN
  • Connection context
  • Anonymity & hosting
  • Threat & abuse velocity
Rate limit
100 req/s
Burst
500 req
Batch API
100 / call
API keys
10 keys
SLA
99.95%
Support
Same-day priority

Enterprise

50M+ lookups, 500 req/s sustained throughput, custom SLAs & dedicated engineering.

$299/ month

billed monthly

Choose Enterprise

50Mlookups / month

  • Country geolocation
  • City geolocation
  • Network & BGP ASN
  • Connection context
  • Anonymity & hosting
  • Threat & abuse velocity
Rate limit
500 req/s
Burst
2,500 req
Batch API
100 / call
API keys
Unlimited
SLA
99.99%
Support
Dedicated engineer
Prepaid Micro-USD Wallet$0.10 / 1,000 lookups

Every plan includes a monthly lookup allowance. Keep your Prepaid Micro-USD Wallet at $0 and lookups past your quota fail closed with zero surprise bills, or top up your wallet to meter extra lookups automatically at $0.10 per 1,000 requests.

Need custom volume or multi-server database seats?

Dedicated RPS overrides, custom committed volume, or additional server seats.

Talk to engineering sales

Questions, answered

Anything else goes to contact@ipscope.io, and a person answers.

How often is it updated?

The Lookup API always serves our latest promoted build automatically with zero downtime. Downloadable databases (MMDB, CSV.gz and Parquet) are available on Monthly, Weekly, or Daily rebuild schedules, and previous snapshots remain accessible if you ever need to roll back.

Does it work with my existing MMDB reader code?

Yes. Every .mmdb file uses the standard MMDB binary format v2.0, so you can open it directly with standard open-source MMDB reader libraries in C, NGINX, Go, Node.js, Rust, Python, PHP and Java without changing your application code. Every build also ships as gzipped CSV (.csv.gz) and Apache Parquet (.parquet) for columnar SQL engines, OLAP data warehouses and SIEM pipelines.

How do automated database updates work on my servers?

You can pull the latest MMDB, CSV.gz or Parquet artifact from a stable authenticated URL on a cron timer or Kubernetes CronJob. Download endpoints support ETag / If-None-Match (returning 304 Not Modified when your local file is already current), HTTP Range resume, and SHA256SUMS verification for atomic zero-downtime swaps.

Can I look up multiple IPs or CIDR prefixes in one request?

Yes. Starting on the Pro plan, POST /v1/ip/batch resolves up to 100 IPv4 or IPv6 addresses in a single HTTPS call, and GET /v1/network/:cidr lets you inspect any routed CIDR prefix directly.

What can I do with a database licence?

Every database subscription is licensed for 1 internal backend server inside your organization by default. If you need to deploy the database on more than 1 server, each additional server costs +$149/mo. Databases are strictly for internal server deployment and cannot be shared, bundled into third-party software, sublicensed, or sold. ipscope Lite is free under Creative Commons Attribution 4.0 (CC BY 4.0).

What happens when I reach my monthly quota?

Every plan includes a monthly lookup allowance. Keep your Prepaid Micro-USD Wallet at $0 and lookups past your quota fail closed with zero surprise bills, or top up your wallet to meter extra lookups automatically at $0.10 per 1,000 requests.

Is IPv6 covered?

Yes. All API endpoints and all downloadable database files cover both IPv4 and IPv6 in a single unified structure at the same price.

Can I cancel at any time?

Yes, directly from the client dashboard with one click. Your API keys and database download access remain active through the end of your paid billing period. Annual subscriptions include 2 months free (17% off) and can be switched between monthly and yearly renewal at any time.

Start with 30K free lookups a month.

No card, no trial clock. Upgrade when your traffic does, or download the database when you would rather keep it in-house.