🌍 IP-API — Bulk IP Geolocation & Network Intelligence — Apify Actor

Geolocates IP addresses and domains using the ip-api.com service. Supports single lookups, high-speed batch queries (100 IPs per request), CIDR range expansion, and domain resolution. No API key required (45 requests/minute free tier).

Features

• 4 lookup modes — IP list, own-IP detection, CIDR range expansion, domain resolution.
• Batch API — sends up to 100 IPs per request for maximum throughput.
• 25 data fields — country, region, city, coordinates, timezone, ISP, org, ASN, proxy/VPN detection, mobile flag, hosting flag, reverse DNS, currency, continent.
• CIDR expansion — enter 8.8.8.0/28 and get all 14 host IPs geolocated automatically.
• Computed enrichments — full location string, Google Maps link, IP version, IP type classification, AS number extraction.
• 4 output formats — enriched, raw, minimal, coordinates-only.
• Smart rate limiting — 1.5s delay between batch requests with auto-retry on 429.

Lookup Modes

Mode	What it does
ip_list	Geolocate a list of IPs (comma/newline separated)
own_ip	Detect and geolocate the actor's outbound IP
ip_range	Expand a CIDR block and geolocate each host
domains	Resolve domain names and geolocate their servers

Input Examples

Bulk IP List

{
    "mode": "ip_list",
    "ipAddresses": "8.8.8.8\n1.1.1.1\n208.67.222.222\n9.9.9.9\n185.228.168.9\n76.76.19.19\n94.140.14.14\n77.88.8.8",
    "fields": ["query", "country", "countryCode", "city", "regionName", "lat", "lon", "timezone", "isp", "org", "as", "proxy", "hosting"],
    "enrichWithLabels": true,
    "outputFormat": "enriched"
}

CIDR Range Scan

{
    "mode": "ip_range",
    "cidrRange": "8.8.8.0/28",
    "fields": ["query", "country", "city", "isp", "org", "as", "hosting"],
    "outputFormat": "enriched"
}

Domain Lookup

{
    "mode": "domains",
    "domains": "google.com, github.com, cloudflare.com, facebook.com, amazon.com, microsoft.com, apple.com, openai.com",
    "fields": ["query", "country", "city", "isp", "org", "as", "hosting", "reverse"],
    "outputFormat": "enriched"
}

Own IP Detection

{
    "mode": "own_ip",
    "enrichWithLabels": true
}

Available Fields (25)

Field	Description	Example
query	IP address queried	8.8.8.8
status	success or fail	success
country	Country name	United States
countryCode	ISO 3166-1 alpha-2	US
region	Region code	VA
regionName	Region/state name	Virginia
city	City name	Ashburn
district	District
zip	ZIP / postal code	20149
lat	Latitude	39.0438
lon	Longitude	-77.4874
timezone	IANA timezone	America/New_York
offset	UTC offset (seconds)	-14400
currency	Currency code	USD
isp	ISP name	Google LLC
org	Organization	Google Public DNS
as	AS number + name	AS15169 Google LLC
asname	AS name only	GOOGLE
mobile	Mobile connection	false
proxy	Proxy / VPN detected	false
hosting	Hosting / datacenter	true
reverse	Reverse DNS (PTR)	dns.google
continent	Continent name	North America
continentCode	Continent code	NA

Enriched Output (computed fields)

Field	Description	Example
full_location	City, Region, Country	Ashburn, Virginia, United States
google_maps_url	Direct Maps link	https://www.google.com/maps?q=39.0438,-77.4874
ip_version	IPv4, IPv6, or domain	IPv4
ip_type	public, private, loopback, etc.	public
as_number	Extracted AS number	AS15169

Output Formats

• Enriched — all API fields + computed labels (default)
• Raw — exact ip-api.com JSON response
• Minimal — IP, country, city, region, ISP, status
• Coords Only — IP, latitude, longitude, country code, city (for mapping)

Throughput

The actor uses ip-api's batch endpoint (100 IPs per request):

IPs	Batch Requests	Estimated Time
100	1	~2 seconds
500	5	~10 seconds
1,000	10	~20 seconds
5,000	50	~90 seconds

Summary Statistics

The run summary (key-value store → summary) includes:

• Country breakdown (top 20)
• ISP breakdown (top 10)
• City breakdown (top 10)
• Proxy/VPN count, hosting/datacenter count, mobile count
• Success vs. failed counts