Free IP address lookup

Geolocation, ISP, ASN, threat detection & TLS fingerprinting — instant, no signup. Loaded with your IP. Look up any other.

Free — no signup required

What's in every lookup

The same data we use to power session replay, bot detection, and fraud scoring across Nevision.

Geolocation

Country, region, city, postal code, timezone, latitude/longitude, metro code. Sourced from MaxMind via the AWS edge.

Network & ASN

ASN number and organization name (the "who owns this IP" answer). TLS version and HTTP version negotiated.

Threat detection

Flags for VPN, anonymous proxy, Tor exit node, and datacenter IPs. Computed risk score 0–100. Plus JA3/JA4 TLS fingerprints when looking up your own IP.

Built into every Nevision plan

The same lookup API, available with your account API key — 1,000 lookups/month on the Free plan, up to 2.5M/month on Business.

Free

1,000/mo

Lite

25,000/mo

Pro

250,000/mo

Business

2.5M/mo

Frequently asked

Is this IP lookup tool really free?+

Yes. Anyone can run up to 5 lookups per day with no account. For more — 1,000 to 2.5M lookups per month — every Nevision plan includes the same intelligence via API, starting at $0/month.

What information do you return?+

Country, region, city, postal code, timezone, latitude/longitude, ASN, ISP/network organization, TLS version, HTTP version, plus threat detection (VPN, proxy, Tor exit node, datacenter) and a 0–100 risk score.

Where does the data come from?+

Geolocation comes from the AWS CloudFront edge (MaxMind-backed). Threat data is built from the daily Tor exit list, AWS WAF managed anonymizing-IP rules, and ASN-level datacenter classification. JA3/JA4 TLS fingerprints are captured at the actual TLS handshake at the edge — only available for your own IP.

Can I use the API in my own application?+

Yes. Sign up for any Nevision plan (Free included), generate a site API key, and call GET /v1/lookup?siteId=...&key=... Returns the same JSON shown in this tool. Free plan: 1,000 lookups/month.

Do you store the IP addresses I look up?+

Visitor IPs are SHA-256 hashed before being used as the rate-limit key — we never write plaintext visitor IPs. Looked-up IPs are cached with their enriched geolocation and threat data so repeat lookups are faster — but we don't link them to who queried them.

Why do I see different data when looking up my own IP vs other IPs?+

Looking up your own IP captures the full TLS handshake at our CloudFront edge — we can read JA3/JA4 fingerprints and the exact TLS/HTTP versions you negotiated. Looking up an arbitrary IP runs server-side enrichment only — no fingerprint data, since that lives in the TLS handshake.

How accurate is IP geolocation?+

Country-level accuracy is typically 99%+. City-level is 65–80% depending on the ISP and whether the user is on cellular. Geolocation is never precise enough to identify an individual address.

What's the difference between this and a 'what is my IP' tool?+

Most 'what is my IP' tools just show you your address. We show you everything we know about it — and let you check arbitrary IPs too. Same backend that powers Nevision's session replay, error tracking, and bot detection.

Related

IP Threat Intelligence →

Same backend, focused on detecting VPNs, proxies, Tor exits, and datacenter IPs for fraud and abuse prevention.