Skip to content

Bulk IP Lookup

Use the Bulk IP Lookup endpoint when you need to resolve multiple IP addresses at once.
Instead of making several individual requests, you can look up many IPs in a single API call, improving performance and reducing network overhead.


Endpoint

Method: GET
URL:

GET https://api.ipwho.org/bulk/{ip1,ip2,ip3,...}?apiKey=sk.xxx

Parameters

NameTypeRequiredDescription
ipstringYesA comma-separated list of IPv4 or IPv6 addresses.

You may include as many IPs as needed, separated by commas.

Request Example

GET https://api.ipwho.org/bulk/76.102.11.203,110.44.117.244?apiKey=sk.xxx

Response Example

{
"success": true,
"data": {
"responseArray": [
{
"ip": "76.102.11.203",
"continent": "North America",
"continentCode": "NA",
"country": "United States",
"countryCode": "US",
"capital": "Washington",
"region": "California",
"regionCode": "CA",
"city": "Los Altos",
"postal_Code": "94022",
"dial_code": "+1",
"is_in_eu": false,
"latitude": 37.3793,
"longitude": -122.12,
"accuracy_radius": 10,
"timezone": {
"time_zone": "America/Los_Angeles",
"abbr": "PST",
"offset": -28800,
"is_dst": false,
"utc": "-08:00",
"current_time": "2026-03-02T03:30:36-08:00"
},
"flag": {
"flag_Icon": "🇺🇸",
"flag_unicode": "U+1F1FA U+1F1F8"
},
"currency": {
"code": "USD",
"symbol": "$",
"name": "US Dollar",
"name_plural": "US dollars",
"hex_unicode": "24"
},
"connection": {
"number": 7922,
"org": "COMCAST-7922"
},
"security": {
"isVpn": false,
"isTor": false,
"isThreat": "low"
}
},
{
"ip": "110.44.117.244",
"continent": "Asia",
"continentCode": "AS",
"country": "Nepal",
"countryCode": "NP",
"capital": "Kathmandu",
"region": "Bagmati Province",
"regionCode": "P3",
"city": "Kathmandu",
"postal_Code": null,
"dial_code": "+977",
"is_in_eu": false,
"latitude": 27.7108,
"longitude": 85.3251,
"accuracy_radius": 200,
"timezone": {
"time_zone": "Asia/Kathmandu",
"abbr": "+0545",
"offset": 20700,
"is_dst": false,
"utc": "+05:45",
"current_time": "2025-11-27T17:09:46+05:45"
},
"flag": {
"flag_Icon": "🇳🇵",
"flag_unicode": "U+1F1F3 U+1F1F5"
},
"currency": {
"code": "NPR",
"symbol": "NPR",
"name": "Nepalese Rupee",
"name_plural": "Nepalese rupees",
"hex_unicode": "4E, 50, 52"
},
"connection": {
"number": 45650,
"org": "VIA NET COMMUNICATION LTD."
},
"security": {
"isVpn": false,
"isTor": false,
"isThreat": "low"
}
}
]
}
}

Response Strucutre

Top-level Fields

ParameterTypeDescription
successbooleanIndicates whether the bulk lookup succeeded.
dataobjectContains the array of IP lookup results.

Data Object

Bulk responses returns an array of responses inside the responseArray. Each response object has the same structure as the single IP lookup response and includes the following fields:

ParameterTypeDescription
ipstringThe IP address that was looked up.
geoLocationobjectGeographical location details for the IP address.
timezoneobjectTimezone information for the IP address.
flagobjectCountry flag emoji and Unicode information.
currencyobjectLocal currency details for the IP location.
connectionobjectNetwork and ASN information associated with the IP address.
user agentobjectUser agent details for the IP (browser, engine, OS, device, CPU).
securityobjectSecurity and reputation data for the IP (VPN, Tor, threat level).

timezone Object

ParameterTypeDescription
time_zonestringIANA timezone identifier (e.g., Asia/Kathmandu).
abbrstringTimezone abbreviation or offset name (e.g., +0545).
offsetnumberOffset from UTC in seconds (e.g., 20700).
is_dstbooleanIndicates if daylight saving time is active.
utcstringUTC offset in ±HH:MM format (e.g., +05:45).
current_timestringCurrent local time at the IP location (ISO 8601 format).

flag Object

ParameterTypeDescription
flag_IconstringEmoji flag representing the country.
flag_unicodestringUnicode code points for the flag emoji.

currency Object

ParameterTypeDescription
codestringCurrency code (e.g., NPR).
symbolstringCurrency symbol (e.g., ₹, $).
namestringFull currency name (e.g., Nepalese Rupee).
name_pluralstringPlural form of the currency name.
hex_unicodestringHexadecimal Unicode values for the currency symbol.

connection Object

ParameterTypeDescription
asn_numbernumberThe Autonomous System Number (ASN) that the IP address belongs to.
asn_orgstringThe organization that owns or operates the ASN.
ispstringThe Internet Service Provider responsible for routing the IP address.
orgstringThe organization associated with the IP address (often same as ISP for corporate networks).
domainstringThe domain name associated with the IP block, if available.
connection_typestringThe type of connection used (e.g., Residential, Corporate, Mobile, Hosting, VPN).

userAgent Object

ParameterTypeDescription
browserobjectContains details about the user’s browser, including:
• name — browser name (e.g., Chrome, Safari)
• version — browser version string
engineobjectContains details about the browser’s rendering engine, including:
• name — engine name (e.g., Blink, WebKit)
• version — engine version
osobjectContains details about the operating system, including:
• name — OS name (e.g., macOS, Windows)
• version — OS version
deviceobjectContains details about the device, including:
• type — device type (desktop, mobile, tablet)
• vendor — device manufacturer (Apple, Samsung)
• model — device model (Macbook, iPhone, etc.)
cpuobjectContains CPU information, including:
• architecture — CPU architecture (x86, x64, arm)

security Object

ParameterTypeDescription
isVpnbooleantrue if the IP is detected as a VPN exit node.
isTorbooleantrue if the IP is detected as a Tor exit node.
isThreatstringThreat classification (low, medium, high).