Included in
Advance PlanSecurity PlanIP Security API
IP Security API provides detailed security information for a given IP address. It detects whether the IP is associated with a proxy, Tor node, or bot, and identifies the proxy type (e.g., VPN, PROXY, RELAY) along with its VPN/proxy service provider—making it a powerful VPN checker. The API also flags IPs involved in spam activities and checks if the IP is linked to a cloud provider, including the cloud provider’s name.
The IP Security API offers two endpoints for threat detection, supporting both single and bulk IP lookups.
apiKey parameter can be omitted.Single IP Security Lookup API
1. Lookup With IP
You can use the single IP lookup API to get security details of a given IP in both JSON and XML formats.The URL for this API is https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34 and its default JSON response is shown below:
1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Nord VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": false,
12 "is_bot": false,
13 "is_cloud_provider": true,
14 "cloud_provider": "Packethub S.A."
15 }
16}2. Lookup Without an IP
Without passing IP Address, API returns the security health details of the client device IP. You can perform this lookup using the following URL: https://api.ipgeolocation.io/v2/security?apiKey=API_KEY and its default JSON response is given below:
1{
2 "ip": "207.244.89.161",
3 "security": {
4 "threat_score": 90,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Vpnsurf VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": true,
12 "is_bot": false,
13 "is_cloud_provider": false,
14 "cloud_provider": ""
15 }
16}Parameters
You can use following parameters to customize the API response according to your requirements.
A. Including Data (include)
This parameter accepts multiple values: location, network, currency, time_zone, user_agent, country_metadata , hostname, liveHostname, hostnameFallbackLive
1. Combine IP Security with Geolocation
This parameter accepts two values: location and network. To retrieve security details along with geolocation data, set the include parameter to location like mentioned below. Note that the apiKey is also passed with query parameter for authorization. The response for this parameter appears below.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=location'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Nord VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": false,
12 "is_bot": false,
13 "is_cloud_provider": true,
14 "cloud_provider": "Packethub S.A."
15 },
16 "location": {
17 "continent_code": "OC",
18 "continent_name": "Oceania",
19 "country_code2": "AU",
20 "country_code3": "AUS",
21 "country_name": "Australia",
22 "country_name_official": "Commonwealth of Australia",
23 "country_capital": "Canberra",
24 "state_prov": "Queensland",
25 "state_code": "AU-QLD",
26 "district": "",
27 "city": "Brisbane",
28 "zipcode": "4101",
29 "latitude": "-27.47306",
30 "longitude": "153.01421",
31 "is_eu": false,
32 "country_flag":
33 "https://ipgeolocation.io/static/flags/au_64.png",
34 "geoname_id": "10113228",
35 "country_emoji": "🇦🇺"
36 }
37}2. Combine IP Security with Network Details
To retrieve security details along with AS Number and network information, set the include parameter to network like mentioned below. Note that the apiKey is also passed with query parameter for authorization. The response for this parameter appears below.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=network'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Nord VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": false,
12 "is_bot": false,
13 "is_cloud_provider": true,
14 "cloud_provider": "Packethub S.A."
15 },
16 "network": {
17 "asn": {
18 "as_number": "3640",
19 "organization": "C I C E S E",
20 "country": "MX"
21 },
22 "company": {
23 "name": "Packethub S.A.",
24 }
25 }
26}3. Combine IP Security with Both Geolocation and Network details
For complete security insights, you can include both geolocation data and network information of an IP address. To do this, set the Include by separating them with a comma include=location,network like mentioned below. Note that the apiKey is also passed with query parameter for authorization. The response for these values given below:
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=location,network'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Nord VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": false,
12 "is_bot": false,
13 "is_cloud_provider": true,
14 "cloud_provider": "Packethub S.A."
15 },
16 "location": {
17 "continent_code": "OC",
18 "continent_name": "Oceania",
19 "country_code2": "AU",
20 "country_code3": "AUS",
21 "country_name": "Australia",
22 "country_name_official": "Commonwealth of Australia",
23 "country_capital": "Canberra",
24 "state_prov": "Queensland",
25 "state_code": "AU-QLD",
26 "district": "",
27 "city": "Brisbane",
28 "zipcode": "4101",
29 "latitude": "-27.47306",
30 "longitude": "153.01421",
31 "is_eu": false,
32 "country_flag":
33 "https://ipgeolocation.io/static/flags/au_64.png",
34 "geoname_id": "10113228",
35 "country_emoji": "🇦🇺"
36 },
37 "network": {
38 "asn": {
39 "as_number": "3640",
40 "name": "C I C E S E",
41 "country": "MX"
42 },
43 "company": {
44 "name": "Packethub S.A.",
45 }
46 }
47}4. Combine IP Security with Timezone details
Get actual time zone of particular IP along with its proxy details. For this you have to put time_zone keyword in include parameter like mentioned below. Time zone details are combined with default response.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=time_zone'1{
2 "ip": "2.56.188.34",
3 "security" : {
4 "threat_score" : 80,
5 "is_tor" : false,
6 "is_proxy" : true,
7 "proxy_type" : "VPN",
8 "proxy_provider" : "Nord VPN",
9 "is_anonymous" : true,
10 "is_known_attacker" : true,
11 "is_spam" : false,
12 "is_bot" : false,
13 "is_cloud_provider" : true,
14 "cloud_provider" : "Packethub S.A."
15 },
16 "time_zone" : {
17 "name" : "America/Chicago",
18 "offset" : -6,
19 "offset_with_dst" : -5,
20 "current_time" : "2025-05-14 06:22:30.204-0500",
21 "current_time_unix" : 1.747221750204E9,
22 "is_dst" : true,
23 "dst_savings" : 1,
24 "dst_exists" : true,
25 "dst_start" : {
26 "utc_time" : "2025-03-09 TIME 08",
27 "duration" : "+1H",
28 "gap" : true,
29 "date_time_after" : "2025-03-09 TIME 03",
30 "date_time_before" : "2025-03-09 TIME 02",
31 "overlap" : false
32 },
33 "dst_end" : {
34 "utc_time" : "2025-11-02 TIME 07",
35 "duration" : "-1H",
36 "gap" : false,
37 "date_time_after" : "2025-11-02 TIME 01",
38 "date_time_before" : "2025-11-02 TIME 02",
39 "overlap" : true
40 }
41 }
42}5. Combine IP Security with User Agent
Get the user agent of client device along with its proxy details. For this you have to provide user_agent keyword in include parameter like mentioned below. User agent information is merged with default response.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=user_agent'1{
2 "ip": "2.56.188.34",
3 "security" : {
4 "threat_score" : 80,
5 "is_tor" : false,
6 "is_proxy" : true,
7 "proxy_type" : "VPN",
8 "proxy_provider" : "Nord VPN",
9 "is_anonymous" : true,
10 "is_known_attacker" : true,
11 "is_spam" : false,
12 "is_bot" : false,
13 "is_cloud_provider" : true,
14 "cloud_provider" : "Packethub S.A."
15 },
16"user_agent" : {
17 "user_agent_string" : "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0",
18 "name" : "Firefox",
19 "type" : "Browser",
20 "version" : "138.0",
21 "version_major" : "138",
22 "device" : {
23 "name" : "Linux Desktop",
24 "type" : "Desktop",
25 "brand" : "Unknown",
26 "cpu" : "Intel x86_64"
27 },
28 "engine" : {
29 "name" : "Gecko",
30 "type" : "Browser",
31 "version" : "138.0",
32 "version_major" : "138"
33 },
34 "operating_system" : {
35 "name" : "Ubuntu",
36 "type" : "Desktop",
37 "version" : "??",
38 "build" : "??",
39 "version_major" : "??"
40 }
41 }
42}6. Combine IP Security with Currency details
Get the currency of particular IP along with its proxy details. For this you have to put currency keyword in include parameter like mentioned below. Currency details are combined with default response.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=currency'1{
2 "ip": "2.56.188.34",
3 "security" : {
4 "threat_score" : 80,
5 "is_tor" : false,
6 "is_proxy" : true,
7 "proxy_type" : "VPN",
8 "proxy_provider" : "Nord VPN",
9 "is_anonymous" : true,
10 "is_known_attacker" : true,
11 "is_spam" : false,
12 "is_bot" : false,
13 "is_cloud_provider" : true,
14 "cloud_provider" : "Packethub S.A."
15 },
16 "currency" : {
17 "code" : "USD",
18 "name" : "US Dollar",
19 "symbol" : "$"
20 }
21}7. Combine IP Security with Country Metadata details
Get the country metadata of particular IP along with its proxy details. For this you have to put country_metadata keyword in include parameter like mentioned below. Country metadata details are combined with default response.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=country_metadata'1{
2 "ip": "2.56.188.34",
3 "security" : {
4 "threat_score" : 80,
5 "is_tor" : false,
6 "is_proxy" : true,
7 "proxy_type" : "VPN",
8 "proxy_provider" : "Nord VPN",
9 "is_anonymous" : true,
10 "is_known_attacker" : true,
11 "is_spam" : false,
12 "is_bot" : false,
13 "is_cloud_provider" : true,
14 "cloud_provider" : "Packethub S.A."
15 },
16 "country_metadata" : {
17 "tld" : ".us",
18 "languages" : ["en-US", "es-US", "haw", "fr"],
19 "calling_code" : "+1"
20 }
21}8. Combine IP Security with Hostname
You can also retrieve the hostname associated with an IP address by providing one of the following values in the include parameter:
If the hostname cannot be resolved, the queried IP address will be returned in the hostname field.
- hostname – Queries only the latest local database.
- liveHostname – Performs a live hostname lookup only.
- hostnameFallbackLive – First checks the local database, then falls back to a live lookup if no result is found.
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=195.154.221.54&include=hostname'1{
2"ip" : "195.154.221.54",
3 "hostname" : "195-154-221-54.rev.poneytelecom.eu",
4 "security" : {
5 "threat_score" : 50,
6 "is_tor" : false,
7 "is_proxy" : true,
8 "proxy_type" : "openvpn",
9 "proxy_provider" : "Keep Solid VPN",
10 "is_anonymous" : true,
11 "is_known_attacker" : false,
12 "is_spam" : false,
13 "is_bot" : false,
14 "is_cloud_provider" : true,
15 "cloud_provider" : "Scaleway"
16 }
17}9. Combine IP Security with all fields
To retrieve a complete and detailed response from the API, you need to explicitly include all of the following fields in the include parameter:
location, network, currency, time_zone, user_agent, country_metadata, hostname .
Each of these fields provides a specific layer of information, and combining them with security details ensures you receive the full scope of security data.
Here's how you can do it
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=195.154.221.54&include=location,network,currency,time_zone,user_agent,country_metadata,hostname'1{
2 "ip": "195.154.221.54",
3 "hostname": "195-154-221-54.rev.poneytelecom.eu",
4 "security": {
5 "threat_score": 50,
6 "is_tor": false,
7 "is_proxy": true,
8 "proxy_type": "openvpn",
9 "proxy_provider": "Keep Solid VPN",
10 "is_anonymous": true,
11 "is_known_attacker": false,
12 "is_spam": false,
13 "is_bot": false,
14 "is_cloud_provider": true,
15 "cloud_provider": "Scaleway"
16 },
17 "location": {
18 "continent_code": "EU",
19 "continent_name": "Europe",
20 "country_code2": "FR",
21 "country_code3": "FRA",
22 "country_name": "France",
23 "country_name_official": "Republic of France",
24 "country_capital": "Paris",
25 "state_prov": "Ile-de-France",
26 "state_code": "FR-IDF",
27 "district": "8e Arrondissement",
28 "city": "Paris",
29 "zipcode": "75008",
30 "latitude": "48.87135",
31 "longitude": "2.32115",
32 "is_eu": true,
33 "country_flag":
34 "https://ipgeolocation.io/static/flags/fr_64.png",
35 "geoname_id": "12535167",
36 "country_emoji": "🇫🇷"
37 },
38 "country_metadata": {
39 "calling_code": "+33",
40 "tld": ".fr",
41 "languages": [
42 "fr-FR",
43 "frp",
44 "br",
45 "co",
46 "ca",
47 "eu",
48 "oc"
49 ]
50 },
51 "network": {
52 "asn": {
53 "as_number": "AS12876",
54 "organization": "SCALEWAY S.A.S.",
55 "country": "FR"
56 },
57 "company": {
58 "name": "Scaleway"
59 }
60 },
61 "currency": {
62 "code": "EUR",
63 "name": "Euro",
64 "symbol": "€"
65 },
66 "time_zone": {
67 "name": "Europe/Paris",
68 "offset": 1,
69 "offset_with_dst": 2,
70 "current_time": "2025-05-21 14:04:26.910+0200",
71 "current_time_unix": 1747829066.91,
72 "is_dst": true,
73 "dst_savings": 1,
74 "dst_exists": true,
75 "dst_start": {
76 "utc_time": "2025-03-30 TIME 01",
77 "duration": "+1H",
78 "gap": true,
79 "date_time_after": "2025-03-30 TIME 03",
80 "date_time_before": "2025-03-30 TIME 02",
81 "overlap": false
82 },
83 "dst_end": {
84 "utc_time": "2025-10-26 TIME 01",
85 "duration": "-1H",
86 "gap": false,
87 "date_time_after": "2025-10-26 TIME 02",
88 "date_time_before": "2025-10-26 TIME 03",
89 "overlap": true
90 }
91 },
92 "user_agent": {
93 "user_agent_string": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0",
94 "name": "Firefox",
95 "type": "Browser",
96 "version": "138.0",
97 "version_major": "138",
98 "device": {
99 "name": "Linux Desktop",
100 "type": "Desktop",
101 "brand": "Unknown",
102 "cpu": "Intel x86_64"
103 },
104 "engine": {
105 "name": "Gecko",
106 "type": "Browser",
107 "version": "138.0",
108 "version_major": "138"
109 },
110 "operating_system": {
111 "name": "Ubuntu",
112 "type": "Desktop",
113 "version": "??",
114 "version_major": "??",
115 "build": "??"
116 }
117 }
118}B. Excluding Fields (excludes)
You can exclude specific fields from the API response based on your requirements, except for the ip field, which is always included. For example, If you want to remove is_tor and is_cloud_provider from api response, you can put the keys in excludes parameter like this:
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&excludes=security.is_tor,security.is_cloud_provider'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75,
5 "is_proxy": true,
6 "proxy_type": "VPN",
7 "proxy_provider": "Nord VPN",
8 "is_anonymous": true,
9 "is_known_attacker": true,
10 "is_spam": false,
11 "is_bot": false,
12 "cloud_provider": "Packethub S.A."
13 }
14}C. Get Specific Fields (fields)
You can also retrieve only the specific fields you need from the geolocation and network details. To do this, use the fields parameter and specify the object and field names you want in the response. For example, if you only need threat_score, city and as_number in api response, you can put the keys in fields parameter, as demonstrated in the URL below. Please note that, to make this work, you need to include the objects that aren't included by default. If you're selecting specific fields from those objects (like location or network), make sure to include the full object first. Kindly refer to example given below:
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=location,network&fields=security.threat_score,location.city,network.asn.as_number'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 75
5 },
6 "location": {
7 "city": "Brisbane"
8 },
9 "network": {
10 "asn": {
11 "as_number": "AS62240"
12 }
13 }
14}D. Response in Multiple Languages (lang)
You can retrieve only the location information for an IP address from the IP Security API in any of these languages:
- English (en)
- German (de)
- Russian (ru)
- Japanese (ja)
- French (fr)
- Chinese Simplified (cn)
- Spanish (es)
- Czech (cs)
- Italian (it)
- Korean (ko)
- Persian (fa)
- Portuguese (pt)
By default, the API responds in English. You can change the response language by passing the language code as a query parameter lang Here is an example to get the geolocation data for IP adderss '2.56.188.34' in Chinese language:
curl -X GET 'https://api.ipgeolocation.io/v2/security?apiKey=API_KEY&ip=2.56.188.34&include=location&lang=cn'1{
2 "ip": "2.56.188.34",
3 "security": {
4 "threat_score": 80,
5 "is_tor": false,
6 "is_proxy": true,
7 "proxy_type": "VPN",
8 "proxy_provider": "Nord VPN",
9 "is_anonymous": true,
10 "is_known_attacker": true,
11 "is_spam": false,
12 "is_bot": false,
13 "is_cloud_provider": false,
14 "cloud_provider": ""
15 },
16 "location": {
17 "continent_code": "NA",
18 "continent_name": "北美洲",
19 "country_code2": "US",
20 "country_code3": "USA",
21 "country_name": "美国",
22 "country_name_official": "",
23 "country_capital": "",
24 "state_prov": "德克萨斯州",
25 "state_code": "US-TX",
26 "district": "達拉斯縣",
27 "city": "達拉斯縣",
28 "zipcode": "75207",
29 "latitude": "32.78916",
30 "longitude": "-96.82170",
31 "is_eu": false,
32 "country_flag":
33 "https://ipgeolocation.io/static/flags/us_64.png",
34 "geoname_id": "7181768",
35 "country_emoji": "🇺🇸"
36 }
37}Bulk IP Security Lookup API
The Bulk IP Security Lookup API allows you to retrieve security details for up to 50,000 IP addresses in a single request . It supports the same customization parameters as the Single IP Security Lookup API, enabling you to tailor the response to your needs. You can find the API endpoint and a sample JSON response below.
curl -X POST 'https://api.ipgeolocation.io/v2/security-bulk?apiKey=API_KEY&include=location,network&fields=location.city,network.asn.as_number' \
-H 'Content-Type: application/json' \
-d '{"ips":["2.56.188.34","2.56.188.35"]}'1[
2 {
3 "ip": "2.56.188.34",
4 "security": {
5 "threat_score": 75,
6 "is_tor": false,
7 "is_proxy": true,
8 "proxy_type": "VPN",
9 "proxy_provider": "Nord VPN",
10 "is_anonymous": true,
11 "is_known_attacker": true,
12 "is_spam": false,
13 "is_bot": false,
14 "is_cloud_provider": true,
15 "cloud_provider": "Packethub S.A."
16 },
17 "location": {
18 "city": "Los Angeles"
19 },
20 "network": {
21 "asn": {
22 "as_number": "AS62240"
23 }
24 }
25 },
26 {
27 "ip": "2.56.188.35",
28 "security": {
29 "threat_score": 75,
30 "is_tor": false,
31 "is_proxy": true,
32 "proxy_type": "VPN",
33 "proxy_provider": "Nord VPN",
34 "is_anonymous": true,
35 "is_known_attacker": true,
36 "is_spam": false,
37 "is_bot": false,
38 "is_cloud_provider": true,
39 "cloud_provider": "Packethub S.A."
40 },
41 "location": {
42 "city": "Los Angeles"
43 },
44 "network": {
45 "asn": {
46 "as_number": "AS62240"
47 }
48 }
49 }
50]Reference to IP Security API Response
Below, we provide separate tables for each JSON object in the response, listing all possible fields available across the security endpoint.
• Standalone fields reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| ip | string | IP address that is used to lookup security information. | No |
| hostname | string | Hostname of the IP address used to query IP Security API. | No |
• security json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| threat_score | number | IP address’ threat score. It ranges from 0 to 100. 100 indicates highest threat and vice versa for lower score. | No |
| is_tor | boolean | Indicates if the IP address is being consumed on a Tor endpoint. | No |
| is_proxy | boolean | Indicates if the IP address belongs to a proxy network. | No |
| proxy_type | string | Type of the proxy network if the IP address belongs to a proxy network. | Yes |
| proxy_provider | string | Name of the proxy provider, if the IP address belongs to a proxy network. | Yes |
| is_anonymous | boolean | Indicates if the IP address is being used anonymously. | No |
| is_known_attacker | boolean | Indicates if the IP address is enlisted as an attacking IP address. | No |
| is_spam | boolean | Indicates if the IP address is enlisted as a spam IP address. | No |
| is_bot | boolean | Indicates if the IP address is enlisted as a bot IP address. | No |
| is_cloud_provider | boolean | Indicates if the IP address belongs to a cloud provider (computing infrastructure providers). | No |
| cloud_provider | boolean | Name of the Cloud Provider, if the IP address belongs to a cloud provider. | Yes |
• location json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| continent_code | string | 2-letter code of the continent. | No |
| continent_name | string | Name of the continent. | No |
| country_code2 | string | Country code (ISO 3166-1 alpha-2) of the country. | No |
| country_code3 | string | Country code (ISO 3166-1 alpha-3) of the country. | No |
| country_name | string | Name of the country. | No |
| country_name_official | string | Official name (ISO 3166) of the country. | No |
| country_capital | string | Name of the country’s capital. | No |
| state_prov | string | Name of the state/province/region. | Yes |
| state_code | string | Code of the state/province/region. | Yes |
| district | string | Name of the district or county. | Yes |
| city | string | Name of the city. | Yes |
| zipcode | string | ZIP/Postal code of the place. | Yes |
| latitude | string | Latitude of the place. | No |
| longitude | string | Longitude of the place. | No |
| is_eu | boolean | Is the country belong to European Union? | No |
| country_flag | string | URL to get the country flag. | No |
| geoname_id | string | Geoname ID of the place from geonames.org | Yes |
| country_emoji | string | Emoji of the Country flag. | Yes |
• network json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| asn.as_number | string | Autonomous system number of the autonomous system, to which IP address belongs to. | Yes |
| asn.organization | string | Legal Full Name of AS organization holding the IP address. | Yes |
| asn.country | string | Name of the country, ASN is residing. | Yes |
| company.name | string | Name of the company/ISP holding the IP address. | No |
• currency json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| code | string | Currency code (ISO 4217). | No |
| name | string | Currency name (ISO 4217). | No |
| symbol | string | Currency symbol. | No |
• country_metadata json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| calling_code | string | Calling code/Dialing code of the country. | No |
| tld | string | Top Level Domain Name (TLD) of the country, which is also called ccTLD. | No |
| languages | list of strings | List of the languages’ codes, spoken in the country. | No |
• time_zone json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| name | string | Name (ISO 8601) of the time zone. | No |
| offset | number | Time zone offset from UTC. | No |
| offset_with_dst | number | Time zone with DST offset from UTC. | No |
| current_time | string | Current time in ‘yyyy-MM-dd HH:mm:ss.SSS±ZZZ’ format. | No |
| current_time_unix | float | Current time in seconds since 1970. | No |
| is_dst | boolean | Is the time zone in daylight savings? | No |
| dst_savings | number | Total daylight savings. | No |
| dst_exists | boolean | Indicates whether Daylight Saving Time (DST) is observed in the region. If | No |
| dst_start.utc_time | string | The date and time in UTC when DST begins. | No |
| dst_start.duration | string | The time change that occurs when DST starts. | No |
| dst_start.gap | boolean | Is there a gap when the clocks jump forward or not. | No |
| dst_start.date_time_after | string | The local date and time that immediately follows the start of DST. | No |
| dst_start.date_time_before | string | The local date and time immediately before DST begins. | No |
| dst_start.overlap | boolean | Whether there is an overlap of time due to clocks being set back when DST starts. | No |
| dst_end.utc_time | string | The date and time in UTC when DST ends. | No |
| dst_end.duration | string | The time change that occurs when DST ends. | No |
| dst_end.gap | boolean | Is there a gap when the clocks jump backward or not. | No |
| dst_end.date_time_after | string | The local date and time that immediately follows the ends of DST. | No |
| dst_end.date_time_before | string | The local date and time immediately before DST ends. | No |
| dst_end.overlap | boolean | Whether there is an overlap of time due to clocks being set back when DST ends. | No |
• user_agent json object reference
| Field | Type | Description | Can be empty? |
|---|---|---|---|
| user_agent_string | string | User-Agent string passed along with the query in the 'User-Agent' header. | No |
| name | string | User-Agent Name. | No |
| type | string | User-Agent Class. | No |
| version | string | User-Agent Version. | No |
| version_major | string | User-Agent Version Major. | No |
| device.name | string | Device Name. | No |
| device.type | string | Device Type. | No |
| device.brand | string | Device Brand. | No |
| device.cpu | string | Device CPU Model. | No |
| engine.name | string | Layout Engine Name | No |
| engine.type | string | Layout Engine Class | No |
| engine.version | string | Layout Engine Version. | No |
| engine.version_major | string | Layout Engine Version Major. | No |
| operating_system.name | string | Operating System Name. | No |
| operating_system.type | string | Operating System Class. | No |
| operating_system.version | string | Operating System Version. | No |
| operating_system.version_major | string | Operating System Version Major. | No |
| operating_system.build | string | Operating System Version Major. | No |
Error Codes
IP Security API returns HTTP status code 200 for a successful API request along with the response.
While, in case of a bad or invalid request, IP Security API returns 4xx HTTP status code along with a descriptive message explaining the reason for the error.
Below is a detailed explanation of the specific HTTP status codes and their corresponding error conditions:
| HTTP Status | Description |
|---|---|
| 400 Bad Request | It is returned for one of the following reasons:
|
| 401 Unauthorized | It is returned for one of the following reasons:
|
| 404 Not Found | It is returned for one of the following reasons:
|
| 405 Method Not Allowed |
|
| 413 Content Too Large |
|
| 415 Unsupported Media Type |
|
| 423 Locked |
|
| 429 Too Many Requests | It is returned for one of the following reasons:
|
| 499 Client Closed Request |
|
| 5XX Server Side Error |
|
API SDKs
To facilitate the developers, we have added some SDKs for various programming languages. The detailed documentation on how to use these SDKs is available in the respective SDK's documentation page linked below.
Our SDKs are also available on Github. Feel free to help us improve them. Following are the available SDKs:
Frequently Asked Questions
- Proxy: Routes traffic via an intermediate server.
- VPN: Adds encryption and hides your activity.
- TOR: Bounces traffic through multiple nodes.
You can access our comprehensive and accurate VPN database through our Databases
Yes, we provide latest sample VPN/Proxy data for users to evaluate quality and observe it's structure. You can refer to security DB Docs.
You can check if particular IP is VPN or proxy by simply making request to the endpoint: Refer to the above documentation.