> ## Documentation Index
> Fetch the complete documentation index at: https://docs.greip.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Bulk IP Lookup
> This API enables you to retrieve information for multiple IP addresses in a single request.
By using the `/lookup/ip/bulk` method, you can efficiently gather data such as location, ISP, and risk factors for a batch of IPs, saving time and streamlining your workflow for large-scale analysis.
export const MCPCallout = () => {
return
;
};
## Authentication
Include your API key in the `Authorization` header:
```http theme={null}
Authorization: Bearer
```
API v2 accepts the key only in this header, not in query parameters or request bodies. See [Authentication](/authentication).
### Query parameters
The ips command is used to specify the IP addresses you want to look up.
Expected values: comma separated IP addresses (IPv4 or IPv6)
Sample value: `1.1.1.1,2.2.2.2`
The params command can be used to specify the required modules you want to get in the response.
Expected values: `security`, `currency`, `timezone`, `location`, and/or `device`
Sample value: `security,timezone,currency`
For more information please refer to [Customize response modules](/options/customize-modules).
The lang command is used to get a response in a specific language.
Expected values: `EN`, `AR`, `DE`, `FR`, `ES`, `JA`, `ZH`, or `RU`
For more information please refer to [Localization](/options/localization).
The callback command can help you make the response a JSONP format.
Expected values: any name that can be used as a function name in Javascript, e.g: `myFunctionName`.
For more information please refer to [JSONP callback](/options/jsonp-callback).
The format command is used to get a response in a specific format.
Expected values: `JSON`, `XML`, `CSV`, or `Newline`
For more information please refer to [Response format](/options/response-format).
The mode command is used in the development stage to simulate the integration process before releasing it to the production environment.
Expected values: `live`, or `test`.
For more information please refer to [Development environment](/options/development-environment).
Optional label for your own analytics or support correlation (for example a product or channel name).
The user\_id command can be used to identify requests sent by specific users to monitor in the [Events page](/knowledge-base/events-and-alerts/overview).
Expected values: email address, phone number, user id, name, etc.
For more information please refer to [User identifier](/options/user-identifier).
```json Success theme={null}
{
"success": true,
"data": {
"1.1.1.1": {
"ip": {
"address": "1.1.1.1",
"version": 4,
"numeric": 16843009,
"bogon": false
},
"geo": {
"continent": "Oceania",
"continent_code": "OC",
"country": "Australia",
"country_code": "AU",
"city": "Sydney"
}
},
"8.8.8.8": {
"ip": {
"address": "8.8.8.8",
"version": 4,
"numeric": 134744072,
"bogon": false
},
"geo": {
"continent": "North America",
"continent_code": "NA",
"country": "United States",
"country_code": "US",
"city": "Mountain View"
}
}
},
"execution_ms": 2
}
```
```json Error theme={null}
{
"success": false,
"code": 101,
"type": "invalid_key",
"description": "The API Key is missing or invalid."
}
```
### Response properties
`true` when the request succeeded; `false` on error.
Map of IP address strings to lookup results. Each key is one address from the `ips` query (for example `1.1.1.1`). Invalid or duplicate entries in `ips` are omitted.
Geo and optional modules for that IP. The property name is the literal IP string from your request.
IP address you're looking up.
Type of IP address (`IPv4`, or `IPv6`), expressed as `4` or `6`.
Numeric representation of the IP address.
Indicates if the IP address is a bogon.
Name of the continent where the IP address is.
Code representation of the continent.
Code representation of the country in `ISO-3166` format.
GeoName ID of the continent.
Name of the country.
GeoName ID of the country.
Name of the region.
Name of the city.
ZIP code of the location where the IP address belong.
Latitude coordinate of the location.
Longitude coordinate of the location.
Capital city of the country.
Population of the country.
Official language of the country.
Language code in `ISO-639` format.
Native name of the language.
Flag emoji representation.
Flag Unicode representation.
URL to 1000px PNG flag.
URL to 250px PNG flag.
URL to 100px PNG flag.
URL to SVG flag.
International dialing code for the country.
Indicates if the country is in the EU.
List of neighboring countries' codes.
Top-level domain of the country.
Name of the currency.
Currency code in `ISO-4217` format.
Symbol of the currency.
Autonomous System Number (for example `AS15169`).
Name of the ASN.
Organization associated with the ASN.
Phone contact for the ASN.
Email contact for the ASN.
Domain associated with the ASN.
Date of ASN creation.
Type of organization ("isp", "hosting", "business", "education", or
"government").
Timezone name.
Timezone abbreviation.
Timezone offset from UTC.
Current time in the timezone.
Current timestamp in the timezone.
Indicates if Daylight Saving Time is active.
Sunset time.
Sunrise time.
Solar transit time.
Civil twilight begin time.
Civil twilight end time.
Nautical twilight begin time.
Nautical twilight end time.
Astronomical twilight begin time.
Astronomical twilight end time.
Length of the day.
Indicates if the IP address is a proxy service.
Type of proxy used.
Indicates if accessed through Tor network.
Indicates if the user is a bot.
Indicates if it's a Apple's Private Relay connection.
Country code for Apple Private Relay when detected; otherwise `null`.
City for Apple Private Relay when detected; otherwise `null`.
Indicates if the IP address belong to a hosting provider.
Indicates if the IP address is blacklisted due to applying [custom
rules](/knowledge-base/custom-rules/overview) or were found in one of
your blacklists.
Mobile detection from the user agent.
`true` when the user agent looks like a mobile device.
Type of device.
Type of operating system.
Name of the operating system.
Family of the operating system.
Version of the operating system.
Title of the operating system.
64-bit mode hint from the parser (often `Unknown` when not detected).
Name of the browser.
Version of the browser.
Major version of the browser.
Title of the browser.
The user-agent of the browser.
Device fingerprint hash when available; `null` on IP lookup routes that omit device capture.
The custom rules applied to this request, [learn
more](/knowledge-base/custom-rules/overview).
The total number of custom rules applied to this request.
The custom rules applied to this request, [learn
more](/knowledge-base/custom-rules/overview).
The rule ID as shown in the dashboard (e.g: `CR104`).
The rule title you set when creating the rule.
Time taken to process the request (milliseconds).
## OpenAPI
````yaml openapi/v2.json GET /geo/ip/bulk
openapi: 3.0.3
info:
title: Greip API v2 (docs playground)
version: 2.0.0
servers:
- url: https://v2.greipapi.com
security: []
paths:
/geo/ip/bulk:
get:
summary: Bulk IP lookup
operationId: geoIpBulk
parameters:
- name: ips
in: query
required: true
schema:
type: string
- name: params
in: query
schema:
type: string
- name: lang
in: query
schema:
type: string
- name: callback
in: query
schema:
type: string
- name: format
in: query
schema:
type: string
default: JSON
- name: mode
in: query
schema:
type: string
default: live
- name: source
in: query
schema:
type: string
- name: user_id
in: query
schema:
type: string
responses:
'200':
description: OK
security:
- bearerAuth: []
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
````
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.