Enrich Analytics with IP Geolocation

Add geographic, network, and threat intelligence to your analytics pipeline using IP data.

Last updated: April 26, 2026
0:00
0:00

Web analytics platforms tell you how many visitors you have, which pages they view, and how long they stay. But they rarely tell you where those visitors are actually located, what kind of network they are connecting from, or whether they are real users or automated bots. IP geolocation enrichment fills these gaps by adding geographic, network, and security context to every analytics event — transforming raw traffic data into actionable business intelligence.

Scan a list of IPs in seconds

Paste up to 100 IPs and get a full geolocation report with 40+ fields per IP — country, city, ISP, ASN, VPN/Tor/datacenter flags, and threat score. Exports to CSV, JSON, Excel, PDF, XML.

Starting at $1.99 per report No signup required 7-day money-back guarantee

The Problem

Standard analytics platforms like Google Analytics rely on JavaScript-based tracking that has significant blind spots. Ad blockers and privacy browsers strip tracking scripts entirely, creating gaps in your data. Browser-level geolocation requires explicit user consent that most visitors decline. And even when tracking works, the data is limited to what the browser reports — which tells you nothing about the visitor’s network type, ISP, or whether the traffic is coming from a VPN, datacenter, or bot.

According to PageFair’s research, over 40% of internet users employ ad blockers, many of which also block analytics scripts. This means a significant portion of your traffic is invisible to client-side analytics. Server-side IP enrichment captures data for every request, regardless of whether JavaScript executes or tracking scripts are blocked.

Without enrichment, common questions go unanswered: Which countries drive the most conversions? Are your paid campaigns attracting real users or bot traffic? What percentage of your visitors connect through VPNs? Is your CDN serving content from the right edge locations? IP geolocation data answers all of these.

Marketing analytics dashboard displaying campaign performance metrics
Credit: 1981 Digital via Unsplash

How IP Intelligence Helps

IP enrichment adds structured geographic and network metadata to each analytics event at the server level. When a visitor makes a request, the server queries the IP geolocation API and appends the results — country, city, timezone, ISP, connection type, VPN status — to the analytics event before sending it to your data warehouse. This works independently of client-side tracking and provides data that browsers cannot report, including network-level intelligence that reveals whether traffic is coming from residential connections, corporate networks, hosting providers, or VPN tunnels.

The enrichment happens in real time but can also be applied retroactively to historical data. If your analytics warehouse stores raw IP addresses (with proper privacy controls and retention policies), you can batch-enrich months or years of historical data to add geographic dimensions to past traffic. This enables powerful trend analysis — questions like “how has our traffic from Germany changed over the last 12 months?” or “what percentage of our Q3 conversions came from mobile carriers versus residential broadband?” become answerable even if geolocation was not collected at the time the events were recorded.

Key API Fields for Analytics

The My IP Help API returns fields that map directly to analytics dimensions and segments:

API FieldAnalytics DimensionPlan
country_code / countryCountry-level traffic breakdownFree
regionState/province segmentationFree
cityCity-level geographic reportsFree
postal_codeHyper-local market analysisPro
timezonePeak traffic hours by local timeFree
ispTraffic by ISP/carrierFree
orgB2B: identify visiting companiesFree
is_vpnVPN traffic percentagePro
is_datacenterBot/automated traffic detectionPro
is_proxyProxy traffic segmentationPro
connection_typeResidential vs business vs mobileBusiness
asnNetwork-level traffic analysisFree

Implementation Patterns

There are three common patterns for integrating IP enrichment into your analytics pipeline:

Real-Time Enrichment (Server-Side)

Query the API on each request and append the geolocation data to the analytics event before sending it to your data warehouse. This is the most common approach and works with any analytics backend:

// Express.js middleware for analytics enrichment
app.use(async (req, res, next) => {
  const geo = await ipLookup(req.ip);
  req.analyticsEvent = {
    ...req.analyticsEvent,
    country: geo.country_code,
    region: geo.region,
    city: geo.city,
    timezone: geo.timezone,
    isp: geo.isp,
    is_vpn: geo.is_vpn,
    is_datacenter: geo.is_datacenter,
    connection_type: geo.connection_type
  };
  next();
});

Batch Enrichment (Data Pipeline)

If you store raw IP addresses in your data warehouse, enrich them in batch using the bulk lookup API. This is ideal for retroactive analysis and for systems where real-time API calls would add unacceptable latency to request handling. Schedule a daily or hourly ETL job that extracts new unique IPs from your event logs, queries the bulk lookup endpoint, and writes the geographic and network data back to your warehouse as additional columns.

Batch enrichment is particularly valuable for organizations migrating from client-side to server-side analytics. You can retroactively enrich months of historical data to establish geographic baselines before comparing them against newly enriched real-time data. This avoids the common problem of losing historical context when changing analytics approaches.

Edge Enrichment (CDN/Load Balancer)

Some CDN providers and load balancers can add geolocation headers to requests before they reach your application server. Cloudflare, AWS CloudFront, and Fastly all support geolocation headers, but their built-in databases may lack the VPN detection, organization identification, and connection type data that a dedicated API provides. The My IP Help API can serve as the backend for a custom edge worker (Cloudflare Workers, Lambda@Edge, or Fastly Compute) that adds enriched headers at the CDN level, combining the accuracy and depth of a dedicated geolocation service with the zero-latency performance of edge processing. This approach is ideal for high-traffic sites where even millisecond latency at the origin matters.

Analytics Insights You Can Build

With enriched analytics data, you can build reports and dashboards that answer questions standard analytics cannot:

  • Geographic conversion funnels — compare conversion rates by country, region, or city. Identify markets where you have high traffic but low conversions, indicating a localization or pricing problem. According to Google’s research, localized experiences significantly improve conversion rates.
  • Bot traffic quantification — use is_datacenter and is_bot flags to measure what percentage of your traffic is automated. High bot ratios inflate pageview metrics and distort engagement rates, leading to poor business decisions.
  • VPN traffic analysis — understand what percentage of your audience connects through VPNs. High VPN usage may indicate privacy-conscious users, users circumventing geo-restrictions, or traffic from regions where internet censorship drives VPN adoption.
  • B2B visitor identification — the org field reveals which companies are visiting your site based on their corporate IP ranges. This is a lightweight form of account-based marketing intelligence, showing which target accounts are actively researching your product.
  • Peak hours by timezone — instead of analyzing traffic by server time, group visitors by their local timezone to find the true peak usage hours for each market. This informs content publishing schedules, customer support staffing, and maintenance window planning.
  • ISP performance comparison — correlate page load times and bounce rates with ISP data to identify whether specific carriers deliver poor user experience. This helps prioritize CDN edge locations and performance optimization efforts.
  • Content localization gaps — identify countries and languages with significant traffic but no localized content. If 15% of your traffic comes from Brazil but you have no Portuguese content, that is a clear opportunity. Geographic traffic data makes the business case for localization investments concrete and measurable.
  • Campaign attribution by geography — overlay geographic enrichment data with UTM parameters to see which marketing campaigns perform best in which regions. A campaign that converts well in California but poorly in Texas may need different messaging or targeting in each market.

Why My IP Help

The My IP Help API provides several advantages for analytics enrichment workflows:

  • Unified response — geographic, network, and security data in a single API call. No need to query separate services for geolocation, VPN detection, and company identification.
  • Bulk lookup endpoint — process thousands of IPs in a single batch request for retroactive enrichment. Ideal for data pipeline jobs that process logs overnight.
  • Consistent data model — every field uses standardized formats (ISO country codes, IANA timezone identifiers, CIDR notation for network ranges) that integrate cleanly with analytics platforms and BI tools like BigQuery, Snowflake, or Redshift.
  • Privacy-conscious design — the API returns geographic and network data without creating persistent user identifiers. This aligns with analytics implementations that need geographic insights without violating privacy regulations.
Business team reviewing sales data on a presentation screen
Credit: Vitaly Gariev via Unsplash

Frequently Asked Questions

What is IP analytics enrichment?

IP analytics enrichment is the process of adding geographic, network, and security data to your analytics events based on the visitor’s IP address. It adds dimensions like country, city, ISP, timezone, and connection type to each event, enabling geographic segmentation and traffic quality analysis that standard analytics cannot provide.

How is server-side enrichment different from Google Analytics geolocation?

Google Analytics uses client-side JavaScript and Google’s own IP database for geolocation, but ad blockers and privacy browsers can prevent the tracking script from loading. Server-side enrichment queries the IP at the server level, capturing data for every request regardless of whether JavaScript executes. It also provides additional data like VPN detection, ISP, and organization that Google Analytics does not report.

Can I enrich historical analytics data retroactively?

Yes, if your data warehouse stores raw IP addresses. Use the bulk lookup API to process historical IPs in batch and write the geographic and network data back as additional columns. This enables geographic trend analysis on data collected before you implemented enrichment.

How does IP enrichment help detect bot traffic?

The API’s is_datacenter, is_bot, and is_proxy flags identify traffic originating from hosting providers, known bot networks, and proxy services. By tagging these events in your analytics, you can filter them out of reports and measure the true percentage of human traffic on your site.

What is B2B visitor identification and how does it work?

The API’s org field returns the organization name registered to the IP range. When employees at a company visit your website from their corporate network, the field shows the company name. This provides lightweight account-based marketing intelligence — you can see which target accounts are researching your product without requiring any form submissions.

Does IP enrichment work with ad blocker traffic?

Yes. Server-side IP enrichment works for every request that reaches your server, including visitors who use ad blockers. Since the enrichment happens at the server level using the IP from the HTTP request, it is completely independent of client-side JavaScript, cookies, or tracking scripts.

How do I handle IP addresses from VPN users in analytics?

Use the is_vpn flag to tag VPN traffic in your analytics. You can either exclude VPN users from geographic reports (since their apparent location is inaccurate) or create a separate segment for VPN traffic. Tracking the percentage of VPN usage over time can also reveal trends in your audience’s privacy behavior.

What analytics platforms work with IP enrichment?

IP enrichment works with any analytics platform that accepts custom dimensions or properties. This includes Google Analytics (custom dimensions), Mixpanel (user properties), Amplitude (event properties), Segment (traits), and any data warehouse (BigQuery, Snowflake, Redshift) where you can add columns to event tables.

Is storing IP addresses for analytics compliant with GDPR?

IP addresses are considered personal data under GDPR. You can store them for analytics with a legitimate interest basis, but you must document this in your privacy policy, implement appropriate retention periods, and honor data deletion requests. An alternative is to enrich in real time and discard the raw IP, storing only the geographic data which is not personally identifiable.

How much latency does real-time enrichment add?

The My IP Help API returns responses in under 50 milliseconds. With response caching (caching results per IP for a configurable TTL), repeat requests for the same visitor add zero latency. For most web applications, the enrichment overhead is negligible compared to database queries, template rendering, and network transfer time.

Ready to get started?

Free plan includes 1,000 lookups/month. No credit card required.