Analytics and product tools

Check IP addresses, domain authority and links in Google Analytics 4

Take the addresses behind your server-side sessions, add country, network owner and risk flags, and keep hosting and Tor traffic out of conversion analysis.

Why the data matters in Google Analytics 4

Analytics reports count every session as a person. Traffic from data centers and Tor exits inflates sessions and drags down conversion rates, so a campaign that looks weak may only be diluted by machines, and teams make budget calls on the diluted number.

What LookValid checks

LookValid checks for Google Analytics 4
Product	What it does here	Credits
IP Intelligence	Returns country, region, city, time zone, network owner and flags for hosting ranges and Tor exits from open data. Location is approximate and is not a person's address.	1 credit per lookup
Domain Authority	Scores a referring domain from open link-graph rankings so you can sort referral sources by weight. It is not another vendor's authority score.	10 credits per domain found in the rank data (an unranked domain is free)
Link Safety Check	Checks the domain of a referral or landing URL against a public list of reported malicious domains.	1 credit per URL checked (a check that cannot run is free)

Connect it in four steps

Create a LookValid account and an API key from the dashboard, which a person does once.
Set the key as the LOOKVALID_API_KEY environment variable in the job that runs the script, not in the script file or the repository that holds it.
Call the function for each distinct address in the export rather than each row; a None return means found was false, and an exception carries the error code and fix.
Save the country, network owner, hosting, Tor and risk values in a table keyed by address, then join it, on a session key you keep in both places, to the daily events table that BigQuery Export writes for your property.

A script that reads your own server logs for the addresses behind sessions, checks each one, and saves the result in a table you join to the events_YYYYMMDD tables from Analytics BigQuery Export. The call is POST https://YOUR_API_HOST/v1/ip and costs 1 credit per lookup.

check_session_ip.py

1import json
2import os
3import urllib.error
4import urllib.request
5
6API_URL = "https://YOUR_API_HOST/v1/ip"
7
8
9def check_session_ip(value):
10    request = urllib.request.Request(
11        API_URL,
12        data=json.dumps({
13            "ip": value,
14        }).encode(),
15        headers={
16            "Authorization": "Bearer " + os.environ["LOOKVALID_API_KEY"],
17            "Content-Type": "application/json",
18        },
19        method="POST",
20    )
21    try:
22        with urllib.request.urlopen(request, timeout=30) as response:
23            result = json.load(response)
24    except urllib.error.HTTPError as error:
25        failure = json.load(error)["error"]
26        raise RuntimeError(failure["code"] + ": " + failure["fix"])
27    if not result["found"]:
28        return None
29    return {
30        "ip_country": result.get("data", {}).get("country"),
31        "network_owner": result.get("data", {}).get("asn_org"),
32        "is_hosting": result.get("data", {}).get("is_hosting"),
33        "is_tor": result.get("data", {}).get("is_tor"),
34        "risk_score": result.get("data", {}).get("risk_score"),
35    }

Where each response field goes in Google Analytics 4
Response field	Goes into
data.country	ip_country
data.asn_org	network_owner
data.is_hosting	is_hosting
data.is_tor	is_tor
data.risk_score	risk_score

The recipe returns nothing when the lookup finds nothing, which costs no credits for this product, and stops with the error code and fix on a failed request.

Without code

Without code, an automation platform's generic HTTP request step can read new rows from a log table or sheet, send each address to LookValid and write the answer back beside it. No dedicated LookValid app is used, and the table can be queried next to your exported events.

REST and MCPOne shared credit balance

Questions

What does it cost in credits?

The pricing page lists the credits for the IP product. Check each distinct address once and reuse the result to keep the count low.

What does the IP check not do?

It does not identify a person and its location is approximate. A hosting flag means the address belongs to a hosting range, not that the visitor is a bot.

Where does the key go?

In an environment variable of the job that runs the script.

Sources

BigQuery Export (Analytics Help) https://support.google.com/analytics/answer/9358801, read 2026-10-18
LookValid API reference: IP Intelligence https://lookvalid.com/docs/api/ip, read 2026-10-18

LookValid is run by Meralume Labs. It is not connected to, endorsed by or a partner of any company or product named on this page, and every product name belongs to its owner.

LookValid bills every lookup in credits from one shared balance, so the same key works for each check above.

See IP Intelligence