IPGeolocation.io is a multi-product IP intelligence platform offering IP
geolocation, IP security/threat intelligence, ASN lookup, abuse contact,
timezone, astronomy (sunrise, sunset, moon phase, celestial position), and
user-agent parsing APIs. All endpoints are served under
https://api.ipgeolocation.io with API-key authentication. The free plan
offers 1,000 credits/day; paid plans (Starter through Premium) scale from
150K to 5M requests/month, with custom Enterprise pricing on top.
URL: https://ipgeolocation.io/
Run: Capabilities Using Naftiko
Geocoding, IP Geolocation, IP Intelligence, IP Security, ASN Lookup, Abuse Contact, Timezone, Astronomy, User Agent, Threat Intelligence, Public APIs
- Created: 2026-05-28
- Modified: 2026-05-29
Resolve any IPv4 / IPv6 address or domain name to a rich geolocation payload — country, region, city, lat/long, postal, currency, ASN, company, timezone, security signals, abuse contact, and user-agent enrichment. Includes single lookup (GET /v3/ipgeo) and bulk lookup (POST /v3/ipgeo-bulk, up to 50,000 entries per request, paid plans).
Human URL: https://ipgeolocation.io/ip-location-api.html
- IP Geolocation, Geocoding, IP Intelligence
- Documentation
- OpenAPI
- PHP SDK
- Python SDK
- Java SDK
- JavaScript SDK
- TypeScript SDK
- Node.js SDK
- Ruby SDK
- Go SDK
- .NET SDK
- Kotlin SDK
- Swift SDK
- Rust SDK
- C++ SDK
- jQuery SDK
- Naftiko Capability — IP Geolocation
Threat-intelligence API that detects VPNs, proxies, Tor exit nodes, relay networks, bot activity, spam sources, residential proxies, cloud and data-center IPs, and assigns a threat score. Single lookup (GET /v3/security) and bulk lookup (POST /v3/security-bulk).
Human URL: https://ipgeolocation.io/ip-security-api.html
- IP Security, Threat Intelligence, VPN Detection, Proxy Detection
Resolve an IP or ASN to Autonomous System metadata — owning organization, country, type (ISP, hosting, education, government), IP ranges, peers, and upstream/downstream relationships.
Human URL: https://ipgeolocation.io/asn-api.html
- ASN Lookup, Network Intelligence
Registry-sourced abuse contact information for any IPv4/IPv6 address — RIR, abuse email, network/route, country, and registry metadata. Useful for security operations, takedown workflows, and compliance.
Human URL: https://ipgeolocation.io/abuse-contact-api.html
- Abuse Contact, Security Operations
Resolve a timezone from name (e.g. America/New_York), IP address, or lat/long coordinates. Returns current date/time, UTC offset, DST status, DST transition windows, airport/locode metadata, and a convert endpoint to translate a timestamp between two zones.
Human URL: https://ipgeolocation.io/timezone-api.html
- Timezone, Date and Time
Astronomy data for any date and location — sunrise, sunset, solar noon, civil/nautical/astronomical twilight phases, moonrise, moonset, moon phase, illumination percentage, and altitude/azimuth for the sun and moon. Includes a /astronomy/timeSeries endpoint for date ranges.
Human URL: https://ipgeolocation.io/astronomy-api.html
- Astronomy, Sunrise Sunset, Moon Phase
Parse a User-Agent string into browser, engine, device, and operating-system attributes. Supports single (GET /v3/user-agent — header-based, or POST /v3/user-agent — body-based) and bulk lookup (POST /v3/user-agent-bulk).
Human URL: https://ipgeolocation.io/user-agent-api.html
- User Agent, Device Detection, Browser Detection
- Website
- Documentation
- Pricing
- Sign Up
- Dashboard
- GitHub Organization
- Combined OpenAPI Spec
- CLI
- MCP Server
- Steampipe Plugin
- Vercel Edge Middleware
- n8n Node
- Google Sheets Add-on
- Elasticsearch Ingest Processor
- MMDB CLI (mmdbio)
- Database Reader
- Splunk App
- public-apis Listing
- Plans
- Rate Limits
- FinOps
- Vocabulary
- Rules
- JSON-LD Context
| Name | Description |
|---|---|
| 7-Product API Suite | IP Geolocation, IP Security, ASN Lookup, Abuse Contact, Timezone, Astronomy, and User-Agent parsing — all behind one API key. |
| Bulk Endpoints | Bulk lookup endpoints (up to 50,000 entries per request) for IP geolocation, IP security, and user-agent parsing on paid plans. |
| 14 Official SDKs | First-party SDKs for PHP, Python, Java, JavaScript, TypeScript, Node, Ruby, Go, .NET, Kotlin, Swift, Rust, C++, and jQuery. |
| MCP Server | Official Model Context Protocol server exposing every product (geo, security, ASN, timezone, astronomy, user-agent) as MCP tools for Claude, Cursor, Copilot, and other MCP-aware clients. |
| Edge and Platform Integrations | Vercel edge middleware, Cloudflare-friendly client, Steampipe plugin, Elasticsearch ingest processor, n8n node, Google Sheets add-on, Splunk app, and WordPress / Shopify / Pipedream / Zapier / Make integrations. |
| MMDB Database Products | Downloadable MMDB databases for offline geolocation, security, ASN, company, abuse-contact, WHOIS, hosting, and residential-proxy lookups (Geo Standard, Geo Advance, Security Pro tiers). |
| Name | Description |
|---|---|
| Personalize and Localize Web Experiences | Detect a visitor's country, currency, and timezone to tailor language, pricing, and content at the edge. |
| Compliance and Geo-Blocking | Enforce sanctions, age-gates, or licensing rules by blocking or redirecting traffic from specific countries or networks at the Vercel/CDN edge. |
| Fraud and Abuse Prevention | Score signups, logins, and transactions using VPN/proxy/Tor detection, threat scoring, and ASN type (hosting vs residential). |
| SOC Triage and Takedown | Resolve abuse contacts and ASN owners for IOCs during incident response and abuse reporting. |
| Scheduling and Astronomy | Power scheduling, lighting automation, agriculture, and observatory tooling with high-precision sunrise/sunset and moon-phase data. |
| Audience Analytics | Enrich logs and analytics events with country, city, ISP, and device info to segment users and dashboards. |
| Name | Description |
|---|---|
| Vercel Edge Middleware | Geo-block, redirect, and detect VPN/proxy/Tor at the Vercel edge. |
| Splunk App | Enrich Splunk events with IP intelligence. |
| Elasticsearch Ingest Processor | Enrich documents indexed into Elasticsearch. |
| Steampipe Plugin | Query IP intelligence via SQL. |
| n8n Node | First-party node for n8n workflow automation. |
| Google Sheets Add-on | Look up IPs directly from spreadsheets. |
| Zapier | Trigger workflows on IP intelligence enrichment. |
| Make (Integromat) | Compose IP lookups into Make scenarios. |
| Pipedream | Source step for Pipedream automations. |
| WordPress Plugin | Personalize and protect WordPress sites. |
| Shopify App | Geo-route Shopify customers and enforce regional rules. |
| Microsoft Copilot Connector | Surface IP intelligence inside Microsoft Copilot. |
| Maltego Transform | Pivot from IP to ASN, geo, and security in Maltego investigations. |
| Name | Description |
|---|---|
| Real-Time API Lookup | Sub-50ms IP intelligence over HTTPS with a single API key. |
| Downloadable MMDB Databases | Offline-capable MMDB files (Geo Standard, Geo Advance, Security Pro) for embedded or air-gapped use cases. |
| Edge-Native Integrations | Drop-in middleware for Vercel, Cloudflare Workers, and other edge runtimes for personalization and geo-blocking without an extra hop. |
Machine-readable API specifications organized by format.
- IPGeolocation.io: Abuse Contact API
- IPGeolocation.io: ASN Lookup API
- IPGeolocation.io: Astronomy API
- IPGeolocation.io: IPGeolocation API
- IPGeolocation.io: IP Security API
- IPGeolocation.io: Date, Time & Timezone API
- IPGeolocation.io: User Agent API
47 schemas extracted from the seven OpenAPI specs. See json-schema/.
47 JSON Structure (json-structure.org) files generated from the JSON Schemas. See json-structure/.
Eight JSON-LD 1.1 context documents — one per API plus a master combined context — at json-ld/:
- ipgeolocation-context.jsonld — combined master context
- ipgeolocation-ip-location-context.jsonld
- ipgeolocation-security-context.jsonld
- ipgeolocation-asn-context.jsonld
- ipgeolocation-abuse-context.jsonld
- ipgeolocation-timezone-context.jsonld
- ipgeolocation-astronomy-context.jsonld
- ipgeolocation-user-agent-context.jsonld
47 generated JSON example payloads — one per schema — at examples/.
Naftiko capabilities organized as self-contained, flat-file business surfaces. Each file inlines its own consumes block plus a REST exposer and an MCP exposer.
| Capability | API | Operations | File |
|---|---|---|---|
| IP Geolocation | IP Geolocation | 2 | capabilities/ip-location-ip-geolocation.yaml |
| IP Security | IP Security | 2 | capabilities/security-ip-security.yaml |
| ASN Lookup | ASN Lookup | 1 | capabilities/asn-asn-lookup.yaml |
| IP Abuse Contact | IP Abuse Contact | 1 | capabilities/abuse-ip-abuse-contact.yaml |
| Timezone | Timezone | 2 | capabilities/timezone-timezone.yaml |
| Astronomy | Astronomy | 2 | capabilities/astronomy-astronomy.yaml |
| User Agent | User Agent | 3 | capabilities/user-agent-user-agent.yaml |
- IPGeolocation.io Vocabulary — Unified taxonomy mapping 7 resources, 7 actions, 7 workflows, and 6 personas across operational (OpenAPI) and capability (Naftiko) dimensions.
- Plans and Pricing — 10 plans (Free + Starter/Plus/Pro/Business/Premium/Enterprise + three MMDB database tiers) modeled with API Commons Plans 0.1.
- Rate Limits — Free 1,000/day hard cap; paid plans have no per-second/minute/hour/day cap (only the monthly credit quota).
- FinOps — FOCUS 1.3-aligned billing model: tiered monthly subscription + per-block overage meters, plus custom-quoted MMDB licences.
- IPGeolocation Spectral Rules — 38 opinionated rules across 13 categories enforcing IPGeolocation.io API conventions (HTTPS-only, v3-prefixed paths, apiKey query auth, camelCase operationIds, snake/camel schema properties, bulk-must-be-POST, etc.).
FN: Kin Lane
Email: kin@apievangelist.com