Finowl
Send an IP address
Post an IPv4 or IPv6 address to the IP Lookup endpoint, authenticated with your API key.
FINOWL / IP LOOKUP
An IP address. Where it comes from.
Get the country, region, city and network behind an IPv4 or IPv6 address, with hosting provider and Tor exit signals. Answered from data on Finowl's own servers, refreshed daily.
HOW IT WORKS
One address in.
Location and network out.
A single request returns the context your sign-in, localization or abuse workflow needs.
Match location data
Finowl matches the address against location and network data held in memory and refreshed daily.
Get network context
Receive the country, region, city and network, with hosting provider and Tor exit signals.
SEE IT IN ACTION
From an IP address
to network context.
POST/v1/ip/lookup
curl https://api.finowl.co/v1/ip/lookup \ -H "Authorization: Bearer $FINOWL_API_KEY" \ -H "Content-Type: application/json" \ --data '{ "ip": "8.8.8.8" }'{ "ip": "8.8.8.8", "version": 4, "country_code": "US", "country": "United States", "region": "California", "city": "Mountain View", "asn": 15169, "as_name": "Google LLC", "hosting": true, "hosting_provider": "google_cloud", "tor": false, "reserved": false}WHERE IT FITS
A useful signal,
at the right moment.
Sign-in context
Notice a sign-in from a new country or a hosting network, and add it to the context you already review.
Localization
Choose a sensible default country, language or currency for a first visit, and let people change it.
Abuse signals
Flag signups from cloud ranges or Tor exits for review alongside your other fraud and abuse checks.
IP location describes a network, not a person. Use it as context for a proportionate response, not as the only reason to block someone.
THE RESPONSE
Clear fields. Honest limits.
Every response describes where an address is registered and which network it belongs to, with unknown fields left empty.
Hosting and Tor signals tell you how traffic reaches you. They are reasons to look closer, not proof of abuse.
IP geolocation by DB-IP, licensed under CC BY 4.0.
- country, country_code
- The country the address is registered to, or empty when unknown.
- region, city
- The approximate region and city, or null when unknown.
- asn, as_name
- The autonomous system that announces the address, such as 15169 and Google LLC.
- hosting, hosting_provider
- Whether the address is in a published cloud range or a known hosting network, and which one, such as aws or cloudflare.
- tor
- Whether the address is a current Tor exit node.
- reserved
- True for private, loopback, link-local and other non-public ranges. Location and network fields are then empty.
A FEW GOOD QUESTIONS
IP lookup questions, answered.
Know where traffic comes from.
Add location and network context to your next sign-in, signup or localization workflow.