The IP Security API returns detailed threat intelligence for any IPv4 or IPv6 address. It detects VPNs, proxies (including residential), Tor exit nodes, bot or spam activity, and known attacker behavior. It also identifies cloud provider associations and, when available, returns the provider name. In addition, it delivers geolocation and network details enriched with country metadata, making it a comprehensive source of security and geolocation data.
Authorization
You can make authorized requests to our API by passing API key as a query parameter. To get your API key, login to our billing dashboard and get your API key! If your API key has been compromised, you can change it by clicking on reset button in billing dashboard.
Important References
- For details on request limits and handling rate limiting, refer here
- For a complete overview of API credit consumption and usage, refer here
Fields Description
ip
IP address being analyzed
8.8.8.8
location
Geolocation details derived from IP address
continent_code
Continent code
NA
continent_name
Continent name
North America
country_code2
2-letter country code
US
country_code3
3-letter country code
USA
country_name
Country name
United States
country_name_official
Official country name
United States of America
country_capital
Capital city of the country
Washington, D.C.
state_prov
State or province name
California
state_code
State or region code
US-CA
district
District or administrative area
Santa Clara
city
City name
Mountain View
locality
Local area name
Mountain View
accuracy_radius
Accuracy radius of geolocation data
zipcode
Postal code
94043-1351
latitude
Latitude coordinate
37.42240
longitude
Longitude coordinate
-122.08421
is_eu
Indicates whether IP is in EU region
false
geoname_id
GeoNames identifier
6301403
country_emoji
Country flag emoji
🇺🇸
country_metadata
Additional country-level metadata
calling_code
International dialing code
+1
tld
Top-level domain for country
.us
languages
List of official or commonly spoken languages
en-US
network
Network-level information of the IP
asn
Autonomous System Number details
as_number
ASN identifier
AS15169
organization
Organization owning ASN
Google LLC
country
Country of ASN registration
US
asn_name
ASN name
GOOGLE
type
Type of organization (e.g., BUSINESS)
BUSINESS
domain
Associated organization domain
about.google
date_allocated
ASN allocation date
allocation_status
ASN allocation status
assigned
num_of_ipv4_routes
Number of IPv4 routes
967
num_of_ipv6_routes
Number of IPv6 routes
104
rir
Regional Internet Registry
ARIN
connection_type
Type of network connection
company
Company owning or associated with IP
name
Company name
Google LLC
type
Company type
domain
Company domain
currency
Currency information based on IP location
code
Currency code
USD
name
Currency name
US Dollar
symbol
Currency symbol
$
security
Security and threat intelligence information for the IP
threat_score
Threat score of the IP (0 = safe, higher = risky)
0
is_tor
Indicates if IP is part of Tor network
false
is_proxy
Indicates if IP is a proxy
false
proxy_type
Type of proxy if applicable
proxy_provider
Proxy provider name if available
is_anonymous
Indicates anonymous IP usage
false
is_known_attacker
Indicates if IP is known for malicious activity
false
is_spam
Indicates if IP is associated with spam activity
false
is_bot
Indicates if IP belongs to a bot
false
is_cloud_provider
Indicates if IP belongs to a cloud provider
false
cloud_provider
Cloud provider name if applicable
