IP Intelligence

Three signals for any IP address — geolocation, proxy/VPN/Tor reputation, and reverse DNS.

⚡ 1 credit per call

Try it

Fill in the fields below and hit Send.

Why use this

AI agents dealing with user sign-ups, fraud detection, or access control need to know who is behind an IP address — where they are, whether they're hiding behind a VPN or Tor, and what hostname resolves back to them. These three tools provide the raw signals; your agent decides what to do with them.

Pricing

Any call to any endpoint 1 credit

/ip-intelligence/geo

Returns geolocation data for an IP address: country, region, city, ISP, ASN, and coordinates.

{ "ip": "8.8.8.8" }

Response (success)

{
  "ok": true,
  "ip": "8.8.8.8",
  "country": "United States",
  "country_code": "US",
  "region": "Virginia",
  "city": "Ashburn",
  "latitude": 39.03,
  "longitude": -77.5,
  "isp": "Google LLC",
  "asn": "AS15169",
  "timezone": "America/New_York"
}

Response (failure)

{ "ok": false, "ip": "8.8.8.8", "error": "lookup_failed" }

/ip-intelligence/reputation

Checks whether an IP address is associated with a proxy, VPN, Tor exit node, or datacenter. Returns boolean flags for each category.

{ "ip": "8.8.8.8" }

Response (success)

{
  "ok": true,
  "ip": "8.8.8.8",
  "proxy": false,
  "vpn": false,
  "tor": false,
  "datacenter": true,
  "risk_score": 0
}

Response (failure)

{ "ok": false, "ip": "8.8.8.8", "error": "lookup_failed" }

/ip-intelligence/reverse-dns

Performs a reverse DNS (PTR) lookup on an IP address, returning any hostnames associated with it.

{ "ip": "8.8.8.8" }

Response (success)

{
  "ok": true,
  "ip": "8.8.8.8",
  "hostnames": ["dns.google"]
}

An empty hostnames array means no PTR record exists — this is normal for many IPs.

Response (failure)

{ "ok": false, "ip": "8.8.8.8", "error": "lookup_failed" }

Errors (400, no charge)

  • Missing or empty ip field
  • ip is not a valid IPv4 or IPv6 address
  • ip is a private, loopback, or reserved address (e.g. 192.168.x.x, 127.0.0.1, ::1)

API Reference

Endpoint

POST https://api.lightningapi.tools/ip-intelligence/{tool}

Required headers

Authorization: Bearer <apiKey>
Content-Type: application/json

Example request

{
  "ip": "8.8.8.8"
}

Example response

{
  "ok": true,
  "ip": "8.8.8.8",
  "country": "United States",
  "country_code": "US",
  "region": "Virginia",
  "city": "Ashburn",
  "latitude": 39.03,
  "longitude": -77.5,
  "isp": "Google LLC",
  "asn": "AS15169",
  "timezone": "America/New_York"
}