Datacircle

VirusTotal IP geolocation API pricing

Is VirusTotal yours? Write to us about this page. We invite selected tool providers to our WhatsApp group.

25% complete: 2 of the 8 fields on our checklistSee the 8 fields

$0.00per 1,000 IP addressesWe haven't run VirusTotal through our IP geolocation API benchmark yet.This plan is free. We leave this plan out of our price ranking because the provider bans business use. We rank 429 plans for IP geolocation APIs by price. Half the plans cost $0.214 or less per 1,000 IP addresses. 149 IP geolocation API plans on our price sheet are free. Apixies' free plan scores highest of the free plans in our benchmark, at 89.6 out of 100.IPWho.org's $99 monthly plan is the cheapest paid plan per 1,000 IP addresses, with no charge per call. You get as many IP addresses as IPWho.org's rate limit allows. Api.co.id's Rp19,000 monthly plan costs the least for 10,000 IP addresses a month: about $1.05.Api.co.id's Rp99,000 (about $5) monthly plan covers any number of IP addresses, and costs less up front than IPWho.org's $99 monthly plan.Apixies, getmyip.pro and IPFlare are the best IP geolocation API providers in the Datacircle benchmark.
Type a number to see the cheapest VirusTotal plan for that many IP addresses. The table below then sorts the other plans by what each costs.
Plan: Public API one of VirusTotal's 2 plans
Call: GET /api/v3/ip_addresses/{ip} VirusTotal's only call for this API
API: IP geolocation API one of VirusTotal's 3 APIs

About this item

  • Freshness. We don't know how fresh this plan's data is.
  • 2 of the 8 fields on our checklist. Country, ASN.
  • Nothing to pay. You get 500 requests a day. Calls stop once your requests run out. Daily API quotas are reset every day at 00:00 UTC.
  • One call. You send ip to GET /api/v3/ip_addresses/{ip}. The call returns where the IP address is.
  • Who can get it: anyone registered in VirusTotal Community, non-commercial use only. Keep data: with conditions. Use data: with conditions.

VirusTotal: IP geolocation API alternatives

VirusTotal alternatives: other IP geolocation API providers by price

We list other providers' plans closest to this plan in price per 1,000 IP addresses.

This planVirusTotal, freeApixies, free, Sandbox (no account)getmyip.pro, free, getmyip, GET /v1/{ip}IPFlare, free, POST /bulk-lookupCountry.is, free, POST /Unwired Labs, free
$ per 1,000 IP addresses$0.00$0.00$0.00$0.00$0.00$0.00
Completeness25%88%88%88%88%50%
Billingfreefreefreefreefreefree
Pay$0$0$0$0$0$0
Enough for500 calls a day20 calls a day300,000 calls a monthnot publishedno limitnot published
Freshnessunknownunknownunknown1 day1 dayunknown
Who can get itanyone registered in VirusTotal Community, non-commercial use onlyanyone, with no account (the "try it" dialog of each docs page gets a sandbox token)anyone, with no sign-up and no credit cardanyone at least 13 years old (a parent or guardian's consent under 18)anyoneanyone who signs up for a free token with a name, an email and a use case, no commercial use

Sources

From each provider's own pricing page and docs, and from what providers tell us. We read this row from these pages on 2026-11-08.

  1. cloud.google.com/terms/secops/service-terms
  2. docs.virustotal.com/docs/consumption-quotas-handled
  3. docs.virustotal.com/docs/difference-public-private
  4. docs.virustotal.com/docs/quota-consumption
  5. docs.virustotal.com/reference/ip-info
  6. docs.virustotal.com/reference/ip-object
  7. docs.virustotal.com/reference/overview
  8. docs.virustotal.com/reference/public-vs-premium-api
  9. virustotal.readme.io/llms.txt

Product details

The key fields this plan's answer can hold, then each filled column in its row on the sheet.

  • Country
  • Region and city, not in the answer
  • Postal code, not in the answer
  • Coordinates, not in the answer
  • Time zone, not in the answer
  • ASN
  • Owner's name, not in the answer
  • VPN and proxy, not in the answer
Price
$ per 1,000 IP addresses$0.00
Percall
Billingfree
Charges
Also pays forfrom the same budget: Get a domain report · Get a file report · Get a URL analysis report
Overage
Units caphard
Not found
$ per 1,000 calls that find nothing$0.00
In their words
Their pitchGet an IP address report: given an IP address, retrieves the pertinent analysis report including threat reputation and context produced by 70+ antivirus products/blocklists and a myriad of other security tools and datasets.
Data
Keep dataUpon termination or expiration of the Agreement or the applicable Order Form, Customer will immediately delete all Platform Security Content, including from any cloud repositories, file directories, storage media, or any other location or instance where it may be stored [...]
Use data"Customer will not, and will not allow End Users [...] to: i. Sublicense, distribute, publicly perform or display, or otherwise share or make accessible, directly or indirectly, any Platform Security Content or results from GTI, including without limitation, any Google API or interface, or portions thereof, to any third party. ii. Obtain or use any Platform Security Content except as specifically permitted, or use or attempt to use GTI to mine information in any way that could identify individual persons in their private capacity [...] or otherwise use GTI or Platform Security Content for any purpose other than to detect and prevent malware and other cyber threats in a non-commercial personal or organizational capacity. iii. Publicly attribute the Platform Security Content that Customer receives through GTI to any Security Partner [...] without the individual Security Partner's express written permission." [...] "The Public API must not be used in commercial products or services. The Public API must not be used in business workflows that do not contribute new files. You are not allowed to register multiple accounts to overcome the aforementioned limitations."
Plan
Pay$0
You get500 requests a day
Enough for500 calls a day
ExpiresDaily API quotas are reset every day at 00:00 UTC
Rate limit
Per day500
Per second0.067 (4 a minute)
Batch1
Speed
Answerin the call
The call
You sendip
MethodGET
Path/api/v3/ip_addresses/{ip}
About the plan
PlanPublic API
Who can get itanyone registered in VirusTotal Community, non-commercial use only
The 7 fields the plan's answer can hold

IP address, country, continent, ASN, AS owner, network, regional internet registry

Best GTM APIs