Bulk IP Lookup
Use the Bulk IP Lookup endpoint when you need to resolve multiple IP addresses at once.
Instead of making several individual requests, you can look up many IPs in a single API call, improving performance and reducing network overhead.
Endpoint
Method: GET
URL:
GET https://api.ipwho.org/bulk/{ip1,ip2,ip3,...}?apiKey=sk.xxxParameters
| Name | Type | Required | Description |
|---|---|---|---|
ip | string | Yes | A comma-separated list of IPv4 or IPv6 addresses. |
You may include as many IPs as needed, separated by commas.
Request Example
GET https://api.ipwho.org/bulk/76.102.11.203,110.44.117.244?apiKey=sk.xxxResponse Example
{ "success": true, "data": { "responseArray": [ { "ip": "76.102.11.203", "continent": "North America", "continentCode": "NA", "country": "United States", "countryCode": "US", "capital": "Washington", "region": "California", "regionCode": "CA", "city": "Los Altos", "postal_Code": "94022", "dial_code": "+1", "is_in_eu": false, "latitude": 37.3793, "longitude": -122.12, "accuracy_radius": 10, "timezone": { "time_zone": "America/Los_Angeles", "abbr": "PST", "offset": -28800, "is_dst": false, "utc": "-08:00", "current_time": "2026-03-02T03:30:36-08:00" }, "flag": { "flag_Icon": "🇺🇸", "flag_unicode": "U+1F1FA U+1F1F8" }, "currency": { "code": "USD", "symbol": "$", "name": "US Dollar", "name_plural": "US dollars", "hex_unicode": "24" }, "connection": { "number": 7922, "org": "COMCAST-7922" }, "security": { "isVpn": false, "isTor": false, "isThreat": "low" } }, { "ip": "110.44.117.244", "continent": "Asia", "continentCode": "AS", "country": "Nepal", "countryCode": "NP", "capital": "Kathmandu", "region": "Bagmati Province", "regionCode": "P3", "city": "Kathmandu", "postal_Code": null, "dial_code": "+977", "is_in_eu": false, "latitude": 27.7108, "longitude": 85.3251, "accuracy_radius": 200, "timezone": { "time_zone": "Asia/Kathmandu", "abbr": "+0545", "offset": 20700, "is_dst": false, "utc": "+05:45", "current_time": "2025-11-27T17:09:46+05:45" }, "flag": { "flag_Icon": "🇳🇵", "flag_unicode": "U+1F1F3 U+1F1F5" }, "currency": { "code": "NPR", "symbol": "NPR", "name": "Nepalese Rupee", "name_plural": "Nepalese rupees", "hex_unicode": "4E, 50, 52" }, "connection": { "number": 45650, "org": "VIA NET COMMUNICATION LTD." }, "security": { "isVpn": false, "isTor": false, "isThreat": "low" } } ] }}Response Strucutre
Top-level Fields
| Parameter | Type | Description |
|---|---|---|
success | boolean | Indicates whether the bulk lookup succeeded. |
data | object | Contains the array of IP lookup results. |
Data Object
Bulk responses returns an array of responses inside the responseArray. Each response object has the same structure as the single IP lookup response and includes the following fields:
| Parameter | Type | Description |
|---|---|---|
ip | string | The IP address that was looked up. |
geoLocation | object | Geographical location details for the IP address. |
timezone | object | Timezone information for the IP address. |
flag | object | Country flag emoji and Unicode information. |
currency | object | Local currency details for the IP location. |
connection | object | Network and ASN information associated with the IP address. |
user agent | object | User agent details for the IP (browser, engine, OS, device, CPU). |
security | object | Security and reputation data for the IP (VPN, Tor, threat level). |
timezone Object
| Parameter | Type | Description |
|---|---|---|
time_zone | string | IANA timezone identifier (e.g., Asia/Kathmandu). |
abbr | string | Timezone abbreviation or offset name (e.g., +0545). |
offset | number | Offset from UTC in seconds (e.g., 20700). |
is_dst | boolean | Indicates if daylight saving time is active. |
utc | string | UTC offset in ±HH:MM format (e.g., +05:45). |
current_time | string | Current local time at the IP location (ISO 8601 format). |
flag Object
| Parameter | Type | Description |
|---|---|---|
flag_Icon | string | Emoji flag representing the country. |
flag_unicode | string | Unicode code points for the flag emoji. |
currency Object
| Parameter | Type | Description |
|---|---|---|
code | string | Currency code (e.g., NPR). |
symbol | string | Currency symbol (e.g., ₹, $). |
name | string | Full currency name (e.g., Nepalese Rupee). |
name_plural | string | Plural form of the currency name. |
hex_unicode | string | Hexadecimal Unicode values for the currency symbol. |
connection Object
| Parameter | Type | Description |
|---|---|---|
asn_number | number | The Autonomous System Number (ASN) that the IP address belongs to. |
asn_org | string | The organization that owns or operates the ASN. |
isp | string | The Internet Service Provider responsible for routing the IP address. |
org | string | The organization associated with the IP address (often same as ISP for corporate networks). |
domain | string | The domain name associated with the IP block, if available. |
connection_type | string | The type of connection used (e.g., Residential, Corporate, Mobile, Hosting, VPN). |
userAgent Object
| Parameter | Type | Description |
|---|---|---|
browser | object | Contains details about the user’s browser, including: • name — browser name (e.g., Chrome, Safari) • version — browser version string |
engine | object | Contains details about the browser’s rendering engine, including: • name — engine name (e.g., Blink, WebKit) • version — engine version |
os | object | Contains details about the operating system, including: • name — OS name (e.g., macOS, Windows) • version — OS version |
device | object | Contains details about the device, including: • type — device type (desktop, mobile, tablet) • vendor — device manufacturer (Apple, Samsung) • model — device model (Macbook, iPhone, etc.) |
cpu | object | Contains CPU information, including: • architecture — CPU architecture (x86, x64, arm) |
security Object
| Parameter | Type | Description |
|---|---|---|
isVpn | boolean | true if the IP is detected as a VPN exit node. |
isTor | boolean | true if the IP is detected as a Tor exit node. |
isThreat | string | Threat classification (low, medium, high). |