IP-DB is a free, public-interest service. There are no paid plans, no trial period and no hidden fees: every feature is open to everyone.
For developers, SOC teams, network operators, researchers and everyone else.
| Feature | Limit | Cost |
|---|---|---|
| Web lookups | Unlimited | $0 |
| API requests / day | 1,000 – 10,000 | $0 |
| Contributor account (sensor or Shield) | 30,000 | $0 |
| Blocklist JSON and firewall feed | $0 | |
| Bulk check (IPs / request) | 100 | $0 |
| MCP server | $0 | |
| Integrations | $0 | |
| Higher API quota | On request | $0 |
An account running a honeypot sensor, or a website running IP-DB Shield, gets 30,000 API lookups a day. Nothing to apply for and nothing to pay: the quota lifts as soon as the contribution starts reporting and falls back by itself when it stops. Honeypot sensor · Website shield
Write to us for high-volume API use, larger bulk checks or an integration. Raising your quota is free too.
Yes, entirely. No credit card, no trial period and no paid tier. Web lookups are unlimited and need no account; for the API, create a key with a free account.
Verify your account's email address. Once verified, the same key's daily quota rises to 10,000 automatically.
The API answers HTTP 429 for the rest of that day, and the quota resets the next day. Nothing is charged and nothing is suspended.
Yes. The plain-text feed (one CIDR per line), fetched with your API key, is read directly by FortiGate Threat Feeds, Palo Alto EDLs, pfSense and OPNsense. Setup guides are on the Integrations page.
From 44 open threat-intelligence sources, community reports and live DNSBL queries. Every source is listed with its licence and refresh rate on the Data Sources page.
No. Contact us with your use case and expected volume, and we raise your quota free of charge for any reasonable need.
There is no paid plan today. IP-DB is run as a public-interest service and every feature on this page is free to use. If that ever changes, this page will say so first.
Create an account, copy your key, make your first request. All free.
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.
Thousands of CVEs are published every week; a handful matter. The bulletin collects what actually started being exploited that week, plus the critical vulnerabilities worth your time, in one email.
