IP address lookup: location, ISP and risk signals

Look up an IP address and get back where it appears to be, the network behind it and whether it looks risky. Use it to screen signups, tell ordinary visitors apart from datacenter traffic or add location context to a lead.

What it tells you

• Whether the connection is a datacenter or another connection type, and the kind of service running on it (hosting, for example).
• The internet provider behind the address, plus a rating of that network's reputation.
• Approximate location: city, region, country and timezone.
• A risk read: a fraud score, a risk level such as medium, and the specific factors behind it (for example, a datacenter address, or no reverse DNS, which is the name a network publishes for an IP).
• A security view, including a reputation score and whether the address appears on threat lists.
• A suggested next action, such as verify.

What you need to provide

One input: the IP address you want to look up. Both IPv4 (the familiar four-number format) and IPv6 (the longer, newer format) are accepted.

What it costs

1 credit per lookup. Live per-product costs are shown on the Billing page in your dashboard.

How to run it

• In the dashboard: IP Geolocation & ISP
• From your code: POST /v1/ip, then see the Developer Hub at app.1lookup.io/developer-hub.

Good to know

• Results are point-in-time. IP addresses get reassigned and network reputations change, so the same address can come back differently later. Re-check when the answer matters.
• Read city, region and timezone as an approximation of where the address sits, not as a street address.
• The fraud score, risk level and suggested action are inputs to your decision, not a verdict. Combine them with your own rules for what to allow, review or block.
• Each response also reports the credits used, your remaining balance and whether the answer came from cache.

Updated on: 24/08/2026