IPApi

Comprehensive IP lookup with geolocation, ASN, ISP, proxy detection, and blocklist checking

🚀 Quick Start • 📚 API Reference • 💡 Examples

IPApi is a high-performance IP intelligence service built in Rust. It provides detailed information about IP addresses including geolocation, network ownership, proxy detection, and security threat assessment through multiple blocklist feeds.

The service combines multiple data sources (IP2Location-style databases, DNS resolution, and threat intelligence feeds) to deliver comprehensive IP analysis with sub-millisecond response times. Perfect for security applications, fraud detection, content localization, and network analytics.

curl https://ipapi.tn3w.dev/api/8.8.8.8

# Clone the repository
git clone https://github.com/tn3w/ipapi.git
cd ipapi

# Set Redis URL
export REDIS_URL="redis://localhost:6379"

# Build and run
cargo run --release

# Look up your own IP
curl https://ipapi.tn3w.dev/api/me

# Look up specific IP
curl https://ipapi.tn3w.dev/api/1.1.1.1

# Look up domain
curl https://ipapi.tn3w.dev/api/example.com

The :query parameter accepts:

• IPv4 address: 8.8.8.8
• IPv6 address: 2001:4860:4860::8888
• Domain name: example.com
• Special value: me (returns your IP)

{
  "ip": "8.8.8.8",
  "ipv4": "8.8.8.8",
  "ipv6": null,
  "type": 4,
  "classification": "public",
  "hostname": "dns.google",
  "latitude": 37.386,
  "longitude": -122.084,
  "city": "Mountain View",
  "region": "California",
  "region_code": "CA",
  "district": null,
  "postal_code": "94035",
  "country_code": "US",
  "country_name": "United States",
  "continent_code": "NA",
  "continent_name": "North America",
  "is_eu": false,
  "timezone": "America/Los_Angeles",
  "timezone_abbr": "PST",
  "utc_offset": -28800,
  "utc_offset_str": "-08:00",
  "dst_active": false,
  "currency": "USD",
  "cidr": "8.8.8.0/24",
  "asn": "AS15169",
  "as_name": "GOOGLE",
  "proxy_type": null,
  "isp": "Google LLC",
  "domain": "google.com",
  "provider": "Google",
  "blocklists": []
}

• Limit: 40 requests per minute per IP
• Window: 60 seconds rolling
• Status Code: 429 Too Many Requests when exceeded
• Headers: Rate limit info in all responses

• TTL: 1 hour for all lookups
• Backend: Redis
• Keys: cache:{ip} for IPs, cache:domain:{hostname} for domains
• DNS Cache: 1 hour for reverse DNS and forward lookups

{
  "error": "Rate limit exceeded"
}

Status Codes:

• 200 OK — Successful lookup
• 400 Bad Request — Invalid query or unresolvable domain
• 429 Too Many Requests — Rate limit exceeded
• 500 Internal Server Error — Server error

curl https://ipapi.tn3w.dev/api/me

curl https://ipapi.tn3w.dev/api/1.1.1.1

curl https://ipapi.tn3w.dev/api/2a0b:f4c2::13

curl https://ipapi.tn3w.dev/api/cloudflare.com

curl -I https://ipapi.tn3w.dev/api/8.8.8.8 | grep ratelimit

import requests

response = requests.get("https://ipapi.tn3w.dev/api/8.8.8.8")
data = response.json()

print(f"Location: {data['city']}, {data['country_name']}")
print(f"ISP: {data['isp']}")
print(f"Blocklists: {len(data['blocklists'])}")

fetch('https://ipapi.tn3w.dev/api/me')
  .then(res => res.json())
  .then(data => {
    console.log(`Your IP: ${data.ip}`);
    console.log(`Location: ${data.city}, ${data.country_name}`);
    console.log(`ISP: ${data.isp}`);
  });

curl https://ipapi.tn3w.dev/api/suspicious-ip.example | jq '.blocklists'

• Rust: 1.70+ (2021 edition)
• Redis: 6.0+ for caching and rate limiting
• System: Linux/macOS/Windows with network access
• Memory: ~2GB for database storage
• Disk: ~300MB for binary data files

• Lookup time: < 1ms for cached results
• Cold lookup: 1-5ms for database queries
• DNS resolution: 10-50ms (cached for 1 hour)
• Binary search: O(log n) complexity
• Memory usage: Efficient varint encoding
• Throughput: 1000+ req/s per core

• Input validation: All queries sanitized
• Rate limiting: Per-IP request throttling
• CSP headers: Strict content security policy
• HSTS: Enforced HTTPS connections
• No unsafe code: Memory-safe Rust implementation
• Blocklist integration: Multi-source threat intelligence

The service automatically downloads and refreshes data every 24 hours from:

• Geolocation: IP2X database (github.com/tn3w/IP2X)
• Blocklists: IPBlocklist feeds (github.com/tn3w/IPBlocklist)

Data files are stored in the data/ directory:

• geo.bin — Geolocation data
• asn.bin — ASN information
• isp.bin — ISP details
• proxy_types.bin — Proxy detection
• blocklist.bin — Threat intelligence

curl https://ipapi.tn3w.dev/health

Response:

{
  "status": "ok",
  "last_refresh": 1709000000
}

Copyright 2026 TN3W

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

_{Built with ❤️ using Rust and Axum}