Educational

Free IP Geolocation APIs: Limits, HTTPS, Commercial Use

IP geolocation estimates where an internet address is, usually to a city or a country. Plenty of providers give it away free, but the free tiers differ in volume, in whether they use an encrypted connection, in whether a business may use them and in which fields they return. We read 10 providers' own pages on the same day.

Sofia Marquez
October 16, 2026 · 7 min read · Last reviewed

Free IP geolocation APIs differ more in their rules than in their numbers. On October 16, 2026, ipinfo Lite gave unlimited requests but country-level data only. ip-api.com allowed 45 requests a minute with no HTTPS and no commercial use. ipwhois.io (1,000 a day) and freeipapi.com (60 a minute) allowed commercial use. sthan.io gives 50,000 lookups a month with city-level fields, HTTPS and no credit card.

Free tiers side by side

Every cell comes from the provider's own pricing, documentation or terms page, read on October 16, 2026. "Not stated" means we did not find it on the pages listed in the sources.

ProviderFree amountHTTPS on freeCommercial use on freeFields on free
sthan.io50,000 a month, up to 2,000 a minute; no cardYesNo restriction stated on its pricing page, which calls its free tiers "perfect for testing, development, and small projects"Country, region, city, postal code, coordinates, timezone, ASN, ISP, organization, mobile, proxy and hosting flags, confidence score when the checks agree
IP2Location.io50,000 queries a month; the service stops when they run outYes (HTTPS sample on its pricing page)Attribution required; commercial use not stated on its pricing pageCountry, region, city, ZIP code, coordinates, time zone, ASN, proxy flag (its free-plan example response)
ipinfo LiteUnlimited API requests; no cardYesYes, attribution requiredCountry and continent, ASN name and domain (country level only)
ipwhois.io1,000 a day; no signup or key; uptime not guaranteedYesYesLocation, flag, connection (ASN, org, ISP), timezone; no currency or security data
freeipapi.com60 a minute (10 per 10 seconds); no accountYes (TLS/SSL)YesCountry, region, city, ZIP, timezones, currencies, languages, ASN, proxy (list on its home page); servers in Europe only
ipgeolocation.io1,000 credits a day (a standard lookup is 1 credit); no cardNot stated on its pricing pageNo rule stated; its pricing page says the free plan "is for evaluation, testing, and prototypes"Location essentials, country metadata, basic ASN and organization, currency and time zone; accuracy radius and confidence are paid
ip-api.com45 requests a minute per IP address; no keyNoNoCountry, region, city, ZIP, coordinates, timezone, ISP, org, AS, mobile, proxy and hosting flags
ipapi.coUp to 1,000 a day (about 30,000 a month) for a limited time, by requestYesNo: "not meant for use in production"Fields by plan not shown in its API docs; the documented response has city, postal code, coordinates, timezone, currency, ASN and org
apiip.net1,000 a month; no cardShown as included on the free pricing card, though its FAQ lists SSL encryption among premium-plan featuresTesting in a non-production site or appLocation module only
MaxMind GeoLiteDownloadable database (30 downloads a day) or web service at 1,000 lookups a day per serviceDatabase runs on your own serversInternal business use with attribution; a separate Commercial GeoLite license to build it into products; MaxMind says GeoLite City "is not recommended for commercial use cases"City, country and ASN databases; city locations come with an accuracy radius
IP2Location LITEDownloadable databaseDatabase runs on your own serversYes, attribution requiredCountry, region, city, coordinates, ZIP code, time zone

The two database options have no request limit because the lookups run on your machine, but you must keep them current: MaxMind's terms require deleting a GeoLite database within 30 days of a new release. IP2Location.io, in the table above, is IP2Location's hosted API.

The same limits on one monthly scale

Daily caps, per-minute caps and monthly quotas are hard to compare as listed. Here is each one turned into free lookups in a 30-day month (our arithmetic). A per-minute cap is a speed limit, so its monthly figure is a ceiling you would reach only by sending requests nonstop, from one IP address.

ProviderLimit as publishedFree lookups in 30 days
ipinfo LiteUnlimitedUnlimited (country level)
freeipapi.com60 a minuteUp to 2,592,000 (speed limit only)
ip-api.com45 a minute per IPUp to 1,944,000 (speed limit only; non-commercial)
sthan.io50,000 a month50,000
IP2Location.io50,000 a month50,000
ipwhois.io1,000 a day30,000
ipgeolocation.io1,000 credits a day30,000
MaxMind GeoLite web service1,000 a day per service30,000
ipapi.coUp to 1,000 a day, limited timeAbout 30,000 (trial)
apiip.net1,000 a month1,000

Among the city-level APIs in this table, sthan.io and IP2Location.io tie for the largest fixed monthly quota at 50,000 a month. freeipapi.com and ip-api.com allow more only if you send requests steadily under their speed limits, and freeipapi.com's free plan runs on servers in Europe only. Those speed-limit figures are ceilings that no provider promises.

One live lookup

We looked up 1.1.1.1, a public DNS service address, on the sthan.io production API on October 16, 2026 at 15:18 UTC. This production lookup shows the response fields described in the sthan.io docs; we did not test it using a restricted free account. It does not measure accuracy. The main fields that came back:

FieldValue returned
country, region, cityAustralia, Queensland, Brisbane
postalCode9010
timezone, currentLocalTimeAustralia/Brisbane, 2026-10-17T01:18:37+10:00
asn, asName, isp13335, CLOUDFLARENET, Cloudflare, Inc
isHosting, isProxy, isMobiletrue, false, false
precisioncity
confidence0.67

Two fields matter most for a free-tier comparison. isHosting: true says the address belongs to a data centre network. It describes the network, and it does not say where any person is. ipwhois.io, for example, puts its own hosting flag in the security data its free tier leaves out. confidence is a score from 0 to 1 that sthan.io describes as how strongly independent checks agreed on the city. Treat it as a relative signal that sthan.io does not present as a probability: at 0.67, a careful app would lean on the country more than the city. The score is left out when the address is new to sthan.io or the checks did not agree. ipinfo's own Lite example for the same address shows the country as Australia, with no city, because Lite is country level.

What providers say about accuracy

  • MaxMind: "A geolocation area is a circle defined by latitude, longitude, and an accuracy radius, which ranges from a few kilometers to 1000 kilometers."
  • ipapi.co: "Latitude / Longitude are often near the center of population. The values aren't precise & shouldn't be used to identify a particular address or household."
  • IP2Location: the LITE edition is a database "with limited accuracy".
  • ip-api.com: "the information returned may contain errors or be inaccurate".
  • MaxMind, on its free city data: "The free GeoLite City is considerably less accurate than the paid GeoIP City data".
  • sthan.io: "IP geolocation resolves to a city or region, not a street address. Some IPs, such as large infrastructure ranges, resolve only to a country."

Use IP location for defaults and signals: a currency, a language, a region, a fraud check. When you need a real address, ask the user for one and check it with an address API.

Where sthan.io fits. sthan.io IP Geolocation covers IPv4 and IPv6 addresses worldwide and returns location to city and postal code where available, timezone with local time, the network behind the address, mobile, proxy and hosting flags, and a confidence score when the checks agree on the city. The free tier is 50,000 lookups a month, up to 2,000 a minute, with no credit card. Paid plans start at $4.50 a month for 100,000, and $32 for 1,000,000.

Frequently Asked Questions

Yes, many. On October 16, 2026, ipinfo Lite offered unlimited requests at country level, sthan.io 50,000 lookups a month, ipwhois.io and ipgeolocation.io 1,000 a day, and ip-api.com 45 requests a minute. MaxMind GeoLite and IP2Location LITE are free databases you download and run yourself.
ipwhois.io and freeipapi.com say commercial use is allowed on their free tiers. ipinfo Lite and IP2Location LITE allow it with attribution, and MaxMind GeoLite allows internal business use with attribution. ip-api.com does not allow commercial use of its free endpoint. ipapi.co and apiip.net describe their free plans as for testing, and ipgeolocation.io describes its free plan as for evaluation, testing and prototypes.
No. ip-api.com says 256-bit SSL encryption is not available for its free API; HTTPS comes with its paid pro service. ipinfo, ipapi.co, ipwhois.io, freeipapi.com and sthan.io show HTTPS on their free tiers.
Treat it as an area, never an address. MaxMind describes each location as a circle whose accuracy radius ranges from a few kilometers to 1000 kilometers, and ipapi.co says its coordinates are often near the center of population. IP2Location calls its free LITE database limited in accuracy.
50,000 lookups a month, up to 2,000 a minute, with no credit card. Each lookup returns country, region, city and postal code where available, coordinates, timezone, the network (ASN, ISP, organization) and mobile, proxy and hosting flags, plus a confidence score when the checks agree on the city. Paid plans start at $4.50 a month for 100,000.

Sources

All read October 16, 2026. Free tiers change; check the provider's page before you build on one.

50,000 free IP lookups a month

No credit card. City, timezone, network and proxy flags, with a confidence score for the city.

Sofia Marquez
Written by Sofia Marquez

Sofia Marquez writes about geocoding, reverse geocoding and IP geolocation for developers.

More from Sofia Marquez