IP Geolocation API - IP to Company, ASN, VPN and Proxy Data

Turn a list of IP addresses into structured records: country, region, city, coordinates, timezone and postal code, the ASN with its network name, network domain and network type, hosting, mobile, satellite and anycast flags, mobile carrier data, and VPN, proxy, Tor and relay detection, one flat row per address.

What this actor does

• Resolves an IP address to the company behind it. Every record carries the ASN, the network name and the network domain, which is what turns an anonymous log line into a named organisation.
• Sends up to 1000 addresses per request. The network and country dataset has a real batch route, so a 50,000 row log extract is 50 requests rather than 50,000.
• Runs full detail lookups in parallel. The deeper dataset has no batch route, so those go through a bounded worker pool instead, and the pool size is yours to set.
• Detects VPNs, proxies, Tor exits, relays and residential proxies, with the name of the privacy service where the provider knows it, plus how recently the address was seen behind one.
• Flags hosting, mobile, satellite and anycast networks, which is what separates a data centre address from a real end user.
• Cleans up addresses pasted out of logs. A port suffix, a CIDR mask, square brackets around an IPv6 literal or a trailing comma are all stripped before the request rather than sent through and counted as a miss.
• Keeps one column layout across both datasets, so a dataset built from the light lookups and one built from the full lookups line up column for column and only differ in how many are filled.
• Never charges for a miss. Only addresses that resolved to a record are billed.

Input

Field	What it does
ipAddresses	IP addresses to look up, one per line. IPv4 and IPv6.
ipAddressesText	A pasted block of addresses separated by newlines, commas, tabs or spaces.
lookupOwnAddress	Add one row for the address the run itself connects from.
dataset	Network and country, or full detail with geolocation and privacy detection.
batchLookups	Send network and country lookups through the batch route.
batchSize	Addresses per batch request, up to the provider's maximum of 1000.
concurrency	How many full detail lookups to keep in flight at once.
skipNotFound	Leave unresolved addresses out of the dataset.
maxResults	Hard cap on rows, and therefore on spend and run time.
apiKey	Your own access token. Stored as a secret.

Example output

{
  "found": true,
  "query": "8.8.8.8",
  "ip": "8.8.8.8",
  "dataset": "lookup",
  "hostname": "dns.google",
  "country": "United States",
  "countryCode": "US",
  "continent": "North America",
  "continentCode": "NA",
  "region": "California",
  "regionCode": "CA",
  "city": "Mountain View",
  "postalCode": "94035",
  "latitude": "37.4056",
  "longitude": "-122.0775",
  "timezone": "America/Los_Angeles",
  "asn": "AS15169",
  "asName": "Google LLC",
  "asDomain": "google.com",
  "asType": "hosting",
  "isHosting": true,
  "isMobile": false,
  "isSatellite": false,
  "isAnycast": true,
  "isAnonymous": false,
  "isVpn": false,
  "isProxy": false,
  "isTor": false,
  "isRelay": false,
  "carrierName": null,
  "raw": { }
}

Frequently asked questions

What data does the IP Geolocation API return?

Every resolved address returns the ASN, the network name, the network domain and the network type, the country, the country code, the continent and the continent code. Requesting full detail adds the reverse hostname, the region and region code, the city, the postal code, the latitude and longitude with an accuracy radius, the timezone, the GeoNames identifier, the hosting, mobile, satellite, anycast and anonymous flags, the mobile carrier name with its MCC and MNC, and the privacy breakdown of VPN, proxy, Tor, relay and residential proxy with the privacy service name.

Do I need my own API key?

Yes. This actor does not include data access. You use your own access token from IPinfo, which is the provider whose IP data API this actor calls, created on their developer dashboard. Your own plan, quota and terms apply. Paste the token into the apiKey field, where it is stored as an Apify secret and sent as a bearer token in the request header rather than as a URL parameter, so it never appears in a log line or a redirect.

How do I turn IP addresses into company names?

Use the network domain. Every record carries the ASN, the network name and the network domain of the organisation that owns the address block, so a web log becomes a list of named organisations without any extra enrichment step. Filter on asType to keep the ones that matter: business addresses are the ones worth routing to sales, while hosting and isp are data centres and consumer broadband.

How do I detect VPN and proxy traffic?

Pick the full detail dataset. Each record then carries isVpn, isProxy, isTor, isRelay and isResidentialProxy as separate booleans rather than one lumped score, plus privacyServiceName where the provider knows which service it is, and privacyLastSeen with privacyPercentDaysSeen for how consistently the address has been seen behind one. Separate flags matter because a corporate VPN and a Tor exit are very different signals for the same fraud rule.

How fast can a large list run?

The network and country dataset takes up to 1000 addresses per batch request, so throughput on that path is set by your monthly quota rather than by request count. Full detail lookups run one address per request through a worker pool; the default of 10 in flight is a safe starting point, and the provider does not enforce a concurrency cap, so raising it is the fastest way to shorten a long run.

What is the difference between the two data depths?

Network and country is the light record: ASN, network name, network domain, country and continent. Full detail is the same address looked up against the richer datasets and adds city level geography, the reverse hostname, carrier data and the whole privacy detection block. Both write the same column layout, so you can start on the light dataset and move up without rewriting anything downstream. Your plan has to be entitled to the depth you pick.

What happens when an address returns no record?

The row is written with found: false and an error giving the reason, and the run continues to the next address. Misses are not charged for. Set skipNotFound to true to leave them out of the dataset entirely.

Can I look up IPv6 addresses?

Yes. IPv6 literals are accepted in both datasets and are normalised before the request, so [2001:4860:4860::8888]:443 copied out of a log is looked up as 2001:4860:4860::8888.

How much does a run cost?

Pricing is pay per result: you are charged for each address resolved to a record and returned to the dataset, and never for misses or duplicates. Apify platform usage is included in the per-result price. Your own API provider's quota is separate and billed by them.

Keyword map

IP geolocation API, IP to company API, IP lookup API, ASN lookup, IP to ASN, IP data enrichment, VPN detection API, proxy detection API, Tor exit node detection, residential proxy detection, hosting provider detection, bulk IP lookup, batch IP geolocation, IP address to country, IP to city, reverse IP company lookup, visitor identification, fraud prevention IP data, log enrichment, IPv6 geolocation