# VirusTotal, free: IP company lookup API

> Get an IP address report: given an IP address, retrieves the pertinent analysis report including threat reputation and context produced by 70+ antivirus products/blocklists and a myriad of other security tools and datasets.

VirusTotal's Public API plan for the IP company lookup API costs $0.00 per 1,000 IP addresses. We check each provider's docs for 10 fields. VirusTotal's docs list 3: ASN, Network range, Country.
We haven't run VirusTotal through [our IP company lookup API benchmark](https://datacircle.dev/best-ip-company-lookup-api.txt) yet.
This plan is free. We leave this plan out of our price ranking because the provider bans business use. We rank 606 plans for IP company lookup APIs by price. Half the plans cost $0.167 or less per 1,000 IP addresses. [203 IP company lookup API plans on our price sheet are free.](https://datacircle.dev/best-ip-company-lookup-api.txt) [IPKit's free plan](https://datacircle.dev/ip-company-lookup-apis/ipkit/free/llms.txt) scores highest of the free plans in our benchmark, at 94.1 out of 100.
[IPScanner's $5 pack](https://datacircle.dev/ip-company-lookup-apis/ipscanner/5-pack-pay-as-you-go-5-get-asn-ip/llms.txt) is the cheapest paid plan per 1,000 IP addresses. IPScanner's IP company lookup API costs nothing beyond the plan price. [ipapi.is' top-up plan](https://datacircle.dev/ip-company-lookup-apis/ipapi-is/top-up-from-1-one-time-credits-post/llms.txt) costs the least for 10,000 IP addresses a month: $1.00.
[IPKit](https://datacircle.dev/ip-company-lookup-apis/ipkit/free/llms.txt), [thenetworkery](https://datacircle.dev/ip-company-lookup-apis/thenetworkery/free/llms.txt) and [IPLogs](https://datacircle.dev/ip-company-lookup-apis/iplogs/free-get-v1-lookup-ip/llms.txt) are the best IP company lookup API providers in the Datacircle benchmark.

- This page: https://datacircle.dev/ip-company-lookup-apis/virustotal/free
- [IP company lookup API in 2026: the best of 80+ compared](https://datacircle.dev/best-ip-company-lookup-api.txt)
- Get it: https://docs.virustotal.com/reference/public-vs-premium-api?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- Request: `GET https://www.virustotal.com/api/v3/ip_addresses/{ip}`
- API key: with the plan, on https://docs.virustotal.com/reference/public-vs-premium-api?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- Its API docs: https://docs.virustotal.com/reference/ip-info?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- Sold by: VirusTotal (https://www.virustotal.com?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing)
- Checked: 2026-11-08

## In the answer

- Completeness: 30%
- ASN: ✓
- Network range: ✓
- Country: ✓

## Price

- $ per 1,000 IP addresses: $0.00
- Per: call
- Billing: free

## Charges

- Also pays for: from the same budget: Get a domain report · Get a file report · Get a URL analysis report

## Overage

- Units cap: hard

## Not found

- $ per 1,000 calls that find nothing: $0.00

## In their words

- Their pitch: Get an IP address report: given an IP address, retrieves the pertinent analysis report including threat reputation and context produced by 70+ antivirus products/blocklists and a myriad of other security tools and datasets.

## Data

- Keep data: Upon termination or expiration of the Agreement or the applicable Order Form, Customer will immediately delete all Platform Security Content, including from any cloud repositories, file directories, storage media, or any other location or instance where it may be stored [...]
- Use data: "Customer will not, and will not allow End Users [...] to: i. Sublicense, distribute, publicly perform or display, or otherwise share or make accessible, directly or indirectly, any Platform Security Content or results from GTI, including without limitation, any Google API or interface, or portions thereof, to any third party. ii. Obtain or use any Platform Security Content except as specifically permitted, or use or attempt to use GTI to mine information in any way that could identify individual persons in their private capacity [...] or otherwise use GTI or Platform Security Content for any purpose other than to detect and prevent malware and other cyber threats in a non-commercial personal or organizational capacity. iii. Publicly attribute the Platform Security Content that Customer receives through GTI to any Security Partner [...] without the individual Security Partner's express written permission." [...] "The Public API must not be used in commercial products or services. The Public API must not be used in business workflows that do not contribute new files. You are not allowed to register multiple accounts to overcome the aforementioned limitations."

## Plan

- Pay: $0
- You get: 500 requests a day
- Enough for: 500 calls a day
- Expires: Daily API quotas are reset every day at 00:00 UTC

## Rate limit

- Per day: 500
- Per second: 0.067 (4 a minute)
- Batch: 1

## Speed

- Answer: in the call

## The call

- You send: ip
- Method: GET
- Path: /api/v3/ip_addresses/{ip}

## About the plan

- Plan: Public API
- Who can get it: anyone registered in VirusTotal Community, non-commercial use only

## The 8 fields the plan's answer can hold

IP address, AS owner, ASN, network, regional internet registry, country, WHOIS record, WHOIS record date

## VirusTotal's plans (2)

- [VirusTotal, free](https://datacircle.dev/ip-company-lookup-apis/virustotal/free/llms.txt): $0.00 per 1,000, 30% complete
- [VirusTotal, contact us](https://datacircle.dev/ip-company-lookup-apis/virustotal/contact-us/llms.txt): 30% complete

## VirusTotal's calls for this API (1)

- `GET /api/v3/ip_addresses/{ip}`: [VirusTotal, free](https://datacircle.dev/ip-company-lookup-apis/virustotal/free/llms.txt)

## VirusTotal's APIs (3)

- [VirusTotal Domain WHOIS API pricing, 2 plans](https://datacircle.dev/domain-whois-apis/virustotal/free/llms.txt)
- [VirusTotal IP company lookup API pricing, 2 plans](https://datacircle.dev/ip-company-lookup-apis/virustotal/free/llms.txt)
- [VirusTotal IP geolocation API pricing, 2 plans](https://datacircle.dev/ip-geolocation-apis/virustotal/free/llms.txt)

## VirusTotal: IP company lookup API alternatives

[VirusTotal alternatives: other IP company lookup API providers by price](https://datacircle.dev/virustotal-alternatives.txt)

We list other providers' plans closest to this plan in price per 1,000 IP addresses.

- [IPKit, free](https://datacircle.dev/ip-company-lookup-apis/ipkit/free/llms.txt): $0.00 per 1,000, 80% complete, 1 day
- [thenetworkery, free](https://datacircle.dev/ip-company-lookup-apis/thenetworkery/free/llms.txt): $0.00 per 1,000, 40% complete
- [IPLogs, free, GET /v1/lookup/{ip}](https://datacircle.dev/ip-company-lookup-apis/iplogs/free-get-v1-lookup-ip/llms.txt): $0.00 per 1,000, 80% complete, stored
- [DC5 WHOIS, free, Public instance, GET /api/v1/ip](https://datacircle.dev/ip-company-lookup-apis/dc5-whois/free-public-instance-get-api-v1-ip/llms.txt): $0.00 per 1,000, 40% complete
- [Unblock Master, free](https://datacircle.dev/ip-company-lookup-apis/unblock-master/free/llms.txt): $0.00 per 1,000, 30% complete

## Sources

From each provider's own pricing page and docs, and from what providers tell us. We read this row from these pages on 2026-11-08.

- https://cloud.google.com/terms/secops/service-terms?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/docs/consumption-quotas-handled?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/docs/difference-public-private?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/docs/quota-consumption?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/reference/ip-info?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/reference/ip-object?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/reference/overview?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://docs.virustotal.com/reference/public-vs-premium-api?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing
- https://virustotal.readme.io/llms.txt?utm_source=datacircle.dev&utm_medium=referral&utm_campaign=ip-company-lookup-api-pricing