Is the MAC address lookup API free?

Yes. You get 100 requests per day per IP without any key. For unlimited access you can use an API key or subscribe through RapidAPI.

Do the APIs require an SDK or authentication token?

No SDK is needed. Both APIs are plain HTTPS GET endpoints that return JSON, with CORS enabled so they also work directly from the browser.

IPWhois.net API

Q: What data does the blacklist API return?

The blacklist API returns community-reported malicious IPs with threat type, confidence score and last-seen time. Full documentation lives at ipwhois.net/blacklist/api.

Plain HTTPS GET endpoints that return JSON. No SDK, CORS enabled, generous free tier.

MAC Address Lookup API

Resolve any MAC address or OUI prefix to the hardware vendor: company name, website, country and address, plus flags for randomized, multicast and locally administered addresses. Reverse search by vendor name is supported too.

GET https://ipwhois.net/api/mac/v1/lookup

Parameters

Name	Required	Description
`mac`	yes*	MAC address or OUI prefix in any common format, e.g. `00:1A:2B:3C:4D:5E`, `00-1A-2B` or `001A2B`
`vendor`	yes*	Reverse search: company name to look up registered OUI prefixes for (*either `mac` or `vendor`)
`key`	no	API key for unlimited access (also accepted as an `X-Api-Key` header)

Example request

curl "https://ipwhois.net/api/mac/v1/lookup?mac=00:1A:2B:3C:4D:5E"

Example response (truncated)

{
  "success": true,
  "found": true,
  "macAddress": {
    "oui": "00:1A:2B",
    "isRandomized": false,
    "transmission": "unicast",
    "administration": "universally administered"
  },
  "vendor": {
    "company": "Ayecom Technology Co., Ltd.",
    "website": "ayecom.com.tw",
    "country": "TW",
    "countryName": "Taiwan"
  }
}

Free tier: 100 requests per day per IP, no key needed. Health check at /api/mac/v1/health. Need more? Use an API key or the RapidAPI listing.

IP Blacklist API

Community-driven threat intelligence: query whether an IP has been reported as malicious, with threat type, confidence score and last-seen time. Also supports bulk exports for Fail2Ban, CSF, iptables and other firewalls.

GET https://bl.ipwhois.net/api/check?ip=1.2.3.4

Full Blacklist API documentation

Bulk IP geolocation

Looking for high-volume IP geolocation or database access? Tell us about your use case and expected volume and we will get back to you.