Best IP Threat Intelligence APIs
IP APIs that return abuse, fraud-risk, and threat scoring to protect signups, payments, and content.
Our pick: MaxMind GeoIP2
MaxMind GeoIP2 is an IP geolocation service covering IPv4 and IPv6 addresses across 190+ countries, used for content localization, fraud prevention, proxy and VPN detection, ad targeting, and compliance geofencing. Pricing starts at $0.0001 per lookup with a free tier of 1,000 lookups per day via the GeoLite2 web service, though GeoLite2 requires attribution and is not intended for commercial use. Official SDKs span seven languages including Python, Java, Node.js, and PHP, and the service holds SOC 2 Type II certification and GDPR compliance. Databases are updated every weekday, and paid accounts receive unlimited web service queries.
Best for: Prototypes and side projects - free to start, no sales call; Regulated or enterprise workloads - compliance attestations and an enterprise plan; Teams needing broad API coverage out of the box.
The catch: The industry standard with downloadable databases for fast offline lookups, but the free GeoLite2 tier is coarser, attribution-gated, and city-level accuracy is modest (~68% within 50km in the US).
Best for…
- Best overall
- MaxMind GeoIP2
- Best free pick
- MaxMind GeoIP2
- Best for enterprise
- MaxMind GeoIP2
- Cheapest to start
- ipdata
- Best for agents
- IPGeolocation.io
- Broadest surface
- MaxMind GeoIP2
Ranked (8)
#1 MaxMind GeoIP2
60 / 100- Best overall
- Best free pick
- Best for enterprise
- Broadest surface
MaxMind GeoIP2 is an IP geolocation service covering IPv4 and IPv6 addresses across 190+ countries, used for content localization, fraud prevention, proxy and VPN detection, ad targeting, and compliance geofencing. Pricing starts at $0.0001 per lookup with a free tier of 1,000 lookups per day via the GeoLite2 web service, though GeoLite2 requires attribution and is not intended for commercial use. Official SDKs span seven languages including Python, Java, Node.js, and PHP, and the service holds SOC 2 Type II certification and GDPR compliance. Databases are updated every weekday, and paid accounts receive unlimited web service queries.
PricingHybrid · from $0.0001 1,000 lookups · free tier ✓TrustSOC 2 Type II · GDPRDoesThe catchThe industry standard with downloadable databases for fast offline lookups, but the free GeoLite2 tier is coarser, attribution-gated, and city-level accuracy is modest (~68% within 50km in the US).#2 IPGeolocation.io
76 / 100- Best for agents
IPGeolocation.io is a REST API for IP-based geolocation and threat intelligence, covering both IPv4 and IPv6 across 30.2 million IP ranges with country-level accuracy near 99% and city-level accuracy around 75%. It supports use cases including fraud prevention, content localization, ad targeting, and security enrichment, with actions spanning proxy/VPN/Tor detection, ASN lookups, carrier data, and reverse DNS. Paid plans start at $19 per month with no rate limits; a permanent free tier offers 1,000 credits per day for non-commercial use, no credit card required. SDKs are available in ten languages, an MCP server is supported, and customers on record include Atlassian, Intuit, SpaceX, and Verizon.
PricingSubscription · from $19 month · free tier ✓TrustGDPRDoesUsed byAtlassian, Intuit, SpaceX, VMwareThe catchGenerous data and a permanent free tier with no card required, but the free tier is non-commercial only.#3 ipdata
67 / 100- Cheapest to start
ipdata is an IP geolocation and threat intelligence API, launched in 2017, that returns location, ASN, carrier, company, timezone, currency, and threat profile data for any IPv4 or IPv6 address. It targets use cases such as content localization, fraud prevention, VPN and proxy detection, and GDPR/CCPA compliance geofencing. Pricing starts at $10/month with a free tier of 1,500 requests per day for non-commercial use, and advanced features like VPN detection and commercial blocklists are gated to Business and Enterprise plans. SDKs are available in 11 languages, the API uses simple key-based REST calls, and customers include Disney, Adobe, Cisco, and NASA's Jet Propulsion Lab.
PricingSubscription · from $10 month · free tier ✓TrustGDPRDoesUsed byDisney, NASA Jet Propulsion Lab, Tencent, CiscoAvoid ifYou have strict compliance requirements#4 IP2Location
64 / 100IP2Location is a REST-based IP intelligence service, established in 2002, that resolves IPv4 and IPv6 addresses to geolocation, ASN, carrier, proxy and VPN detection, threat scoring, and company data for uses ranging from content localization and fraud prevention to ad targeting. Commercial database subscriptions start at $49 per month with 99.5% country accuracy and daily updates, while a free tier covers 50,000 queries per month with attribution required. SDKs span 18 languages including PHP, Python, Go, Rust, and Haskell, and an MCP server is available; GDPR compliance and a published SLA are documented.
PricingSubscription · from $49 month · free tier ✓TrustGDPRDoesAvoid ifYou have strict compliance requirements#5 Ipregistry
55 / 100Ipregistry is an IP intelligence API covering geolocation, ASN lookup, proxy and VPN detection, user agent parsing, and threat intelligence for use cases ranging from fraud prevention and geo-blocking to ad targeting and GDPR enforcement. It covers roughly 99.99% of IPv4 and IPv6 addresses globally, with geolocation data refreshed daily and threat data updated every 15 minutes. Pricing is credit-based starting at $10 for 50,000 lookups with no expiry, and new accounts receive a one-time 100,000-lookup free trial for personal use. Notable customers include Coinbase and Accenture, and SDKs are available for JavaScript, Python, and Java.
PricingUsage · from $10 50,000 lookups (prepaid credits, no expiry) · free tier ✗TrustGDPRDoesUsed byAccenture, Coinbase, Kustomer, SlidoAvoid ifYou want to try it free before paying#6 DB-IP
56 / 100DB-IP is an IP geolocation and network intelligence service, active since 2010, covering IPv4 and IPv6 addresses across 215,000+ cities with daily-updated commercial data. It supports lookups, ASN queries, proxy/VPN/Tor detection, and threat intelligence via a REST API with API key auth, plus downloadable CSV and MMDB database files. Pricing is subscription-based with a free tier of 500 requests per day (HTTP only) and paid plans scaling to enterprise unlimited volume. Customers include Amazon, Microsoft, and Samsung, and the service publishes an SLA and is GDPR compliant.
PricingSubscription · free tier ✓TrustGDPRDoesUsed byAmazon, Fujitsu, Microsoft, SamsungThe catchCheap, with downloadable databases, but the free API is HTTP-only and the better accuracy and fields sit behind paid tiers.#7 ipstack
56 / 100ipstack is a real-time IP geolocation REST API, active since 2009, that returns location, ISP, timezone, currency, connection type, and ASN data for both IPv4 and IPv6 addresses across 2 million-plus locations worldwide. It targets developers building content localization, fraud prevention, ad targeting, and compliance workflows. Paid plans start at $12.99 per month with a one-time 5,000-request free trial; proxy, VPN, and Tor detection and bulk lookups require the Professional+ tier at $99.99 per month. Notable customers include Microsoft, Airbnb, and HubSpot, and the service is GDPR-compliant with a published SLA.
PricingSubscription · from $12.99 month · free tier ✗TrustGDPRDoesUsed byMicrosoft, Airbnb, Samsung, ActivisionAvoid ifYou want to try it free before paying#8 Digital Element (NetAcuity)
11 / 100Digital Element's NetAcuity is an enterprise IP geolocation database and API that has been in market since 1999, covering 99.9999% of routable IPv4 and IPv6 addresses with country-level accuracy above 99.9% and city-level accuracy above 97%. It serves use cases including ad targeting, content localization, fraud prevention, proxy and VPN detection, and compliance geofencing, with customers such as Netflix, LinkedIn, Adobe, and The Trade Desk. Pricing is fully custom and requires a sales engagement, with no published tiers, no free tier, and no self-serve signup. The data is delivered as a downloadable flat-file database or via REST API with weekly geolocation updates and daily proxy intelligence refreshes, and the product is built on a privacy-by-design methodology that collects no PII.
PricingSales-led · free tier ✗TrustGDPRDoesUsed byThe Trade Desk, eBay, CNN, OracleThe catchThe enterprise incumbent (NetAcuity) with the deepest proxy and B2B intelligence, but it is sales-led with no public pricing, no free tier, and no self-serve signup.