What is the difference between this and the other endpoints?

The Full IP Lookup endpoint aggregates data from our Geolocation, Proxy Detection, Network ASN, and Threat Scoring engines into a single response. It is designed for developers who need maximum context with minimum network round-trips.

Does this cost more API credits to use?

No! Despite querying multiple internal databases simultaneously, a call to the Full IP Lookup endpoint consumes only 1 API credit from your quota, making it extremely cost-effective.

Is it slower than querying the individual APIs?

Not noticeably. Because all data sources (ASN, Geo, Proxy, Tor) are loaded into memory on the same edge nodes, the internal aggregation takes microseconds. The total request time is still typically under 10 milliseconds.

Can I use this for adaptive authentication?

Absolutely. Many customers use the combined location data and threat_level score to trigger step-up authentication (like MFA) when a user logs in from an unexpected country or a high-risk proxy.

How accurate is the VPN and Proxy detection?

Our detection engine combines BGP routing analysis, known datacenter IP ranges, and aggregated threat intelligence feeds to accurately identify commercial VPNs, hosting providers, and known proxy endpoints.

What happens if one of the underlying data sources fails?

Our API is designed to fail open. If the ASN database is temporarily updating, for example, the API will still return the Geolocation and Threat data with the ASN fields set to null, ensuring your application never blocks legitimate traffic due to a partial outage.

IP Shield

Account

Global Enrichment

Full IP Lookup API

Enrich any IP with geolocation, ASN, proxy detection, Tor status, and threat intelligence via a single, comprehensive endpoint.

Full IP Lookup API

    {
  "ok": true,
  "date": "2025-06-12T00:00:00Z",
  "data": {
    "ip": "104.28.12.34",
    "location": {
      "country": "United States",
      "country_code": "US",
      "region": "California",
      "city": "Los Angeles",
      "language_iso639": "en-US",
      "timezone": "America/Los_Angeles",
      "latitude": 34.0522,
      "longitude": -118.2437
    },
    "proxy": true,
    "vpn": true,
    "threat_level": 85,
    "is_known_bot": false,
    "tor": false,
    "network": {
      "asn_id": "13335",
      "asn_name": "CLOUDFLARENET",
      "classification": "hosting"
    }
  },
  "meta": {
    "total_credits": 10000,
    "credits_remaining": 9999
  }
}

Complete IP Enrichment

Why make three API calls when one will do? The Full IP Lookup endpoint aggregates our entire intelligence suite—combining geolocation, proxy detection, and network routing data into one fast, unified JSON payload.

Single API Call
Reduce network overhead and simplify your codebase by fetching all required data at once.
Millisecond Latency
Edge-native architecture ensures massive data aggregation happens in single-digit milliseconds.
Unified Payload
A clearly structured JSON response that is easy to parse and integrate into any framework.

Geolocation + Network Intelligence

Localize your application and secure it simultaneously. Instantly know exactly where the user is physically located, what language they speak, and who owns the network infrastructure routing their traffic.

High-Precision Geo
Resolve city, state, country, and precise latitude/longitude coordinates.
Automatic Localization
Configure application timezone and language automatically based on IP location.
ASN Classification
Instantly categorize traffic origin as residential, corporate, or datacenter hosting.

Geolocation and network routing abstract visualization

Comprehensive Threat Layer

Protect your platform from automated abuse. The Full IP Lookup includes our complete threat assessment, actively checking the IP against Tor node lists, commercial VPN databases, proxy honeypots, and known bot signatures.

Anonymity Detection
Flag residential proxies, datacenter IPs, and commercial VPN networks.
Tor & Bot Filtering
Identify Tor exit nodes and verified search engine crawlers with 100% accuracy.
Unified Threat Score
Use the composite 0-100 risk score to trigger adaptive authentication flows.

Comprehensive threat intelligence abstract visualization

The Ultimate Edge API

Everything you need to evaluate, route, and secure incoming traffic.

Complete Data Coverage

Access every datapoint IP Shield offers through a single endpoint.

Ultra-Low Latency

Aggregation happens entirely in-memory at the edge for zero-friction lookups.

Predictable Quota

Even though it aggregates multiple data sources, it only consumes one credit.

Rate Limiting

IP-based rate limiting with Retry-After headers protects the service.

Privacy First

Regional location data keeps you compliant with global privacy laws.

Seamless Integration

Drop-in replacement for legacy IP APIs, requiring less than 5 lines of code.

Always Fresh

Underlying databases (BGP, Tor, Proxies) refresh automatically in the background.

Enrich Your Traffic

Get 1,000 free requests per month when you register.

Get API Key