The Scenario
The login anomaly report has been sitting in your queue since Monday. You are a cybersecurity analyst and the security platform flagged 600 IP addresses from login events over the past two weeks as potentially suspicious — multiple countries, unusual timing, a few subnet clusters that look off. The team lead wants a geography breakdown before the Thursday incident review.
Right now you have a Google Sheet with 600 IPs in column A. You need city, country, ISP, and coordinates next to each one so you can start clustering the anomalies by geography without switching tools.
The bad version:
- Look up the first IP in a geolocation tool, copy city, country, and ISP into your sheet, move to the next.
- After 25 minutes you have covered 40 rows and your wrist is starting to register a complaint.
- Realize you also need coordinates for the map visualization and go back to re-look-up the first 40 rows because you forgot to copy latitude and longitude the first time.
Thursday is two days away. You have 600 rows.
The Easy Way: One Prompt in SheetXAI
SheetXAI is an AI agent inside your Google Sheet. It reads the IP column, runs Data247's geolocation lookup on every address, and writes city, state, country, and coordinates into the columns you specify — the whole 600-row sheet in one pass.
For each IP address in column A of my sheet, use Data247 to look up its geographic location and write city, state, country, and coordinates into columns B, C, D, and E
What You Get
- Column B: city associated with the IP address
- Column C: state or region
- Column D: country
- Column E: latitude and longitude (or separate columns if specified)
- Private IPs, localhost addresses, or IPs that return no geolocation data get a blank or a note so you can exclude them from the analysis without manual scanning
What If the Data Is Not Quite Ready
You want ISP information as well
For each IP in column A, run Data247 geolocation and write city in column B, country in column C, ISP in column D, latitude in column E, and longitude in column F.
Some rows have duplicate IPs and you want to look them up once
Deduplicate the IP addresses in column A, then run Data247 geolocation on each unique IP. Write city in column B, country in column C, and coordinates in column D.
You want to flag IPs from specific high-risk countries
Run Data247 geolocation on all 600 IPs in column A. Write city in column B, country in column C, and coordinates in column D. Then add a Risk Flag column in column E: mark any rows where column C is Russia, China, North Korea, or Iran as 'High Risk.'
Geolocate, flag, cluster, and summarize in one shot
Run Data247 geolocation on all 600 IPs in column A. Write city in column B, country in column C, ISP in column D, latitude in column E, and longitude in column F. Add a Risk Flag in column G for IPs from high-risk countries. Then create a summary table on a new sheet showing the count of flagged IPs per country, sorted descending.
You go from a flat IP list to a flagged, geo-clustered, country-summarized analysis sheet in one prompt.
Try It
Get the 7-day free trial of SheetXAI and open any Google Sheet with a column of IP addresses you need to geolocate for a security or analytics review, then ask it to run Data247 geolocation lookup across every row and write back city, country, and coordinates. See also the identity trust scoring spoke if any of those IPs are tied to new user signups.