Logo
Logo

PRODUCTS

TOOLS

Uncover the Network Secrets fromIP to domain Intelligence with Security API

Our Security API instantly classifies any IP as a VPN, Tor, proxy, bot, or other high-risk source in a single call.

1[
2  {
3    "ip": "8.8.8.8",
4    "security": {
5      "threat_score": 0,
6      "is_tor": false,
7      "is_proxy": false,
8      "proxy_type": "",
9      "proxy_provider": "",
10      "is_anonymous": false,
11      "is_known_attacker": false,
12      "is_spam": false,
13      "is_bot": false,
14      "is_cloud_provider": false,
15      "cloud_provider": ""
16    },
17    "location": {
18      "continent_code": "NA",
19      "continent_name": "North America",
20      "country_code2": "US",
21      "country_code3": "USA",
22      "country_name": "United States",
23      "country_name_official": "United States of America",
24      "country_capital": "Washington, D.C.",
25      "state_prov": "California",
26      "state_code": "US-CA",
27      "district": "Santa Clara",
28      "city": "Mountain View",
29      "locality": "Mountain View",
30      "accuracy_radius": "",
31      "zipcode": "94043-1351",
32      "latitude": "37.42240",
33      "longitude": "-122.08421",
34      "is_eu": false,
35      "geoname_id": "6301403",
36      "country_emoji": "🇺🇸"
37    },
38    "country_metadata": {
39      "calling_code": "+1",
40      "tld": ".us",
41      "languages": [
42        "en-US",
43        "es-US",
44        "haw",
45        "fr"
46      ]
47    },
48    "network": {
49      "asn": {
50        "as_number": "AS15169",
51        "organization": "Google LLC",
52        "country": "US",
53        "asn_name": "GOOGLE",
54        "type": "BUSINESS",
55        "domain": "about.google",
56        "date_allocated": "",
57        "allocation_status": "assigned",
58        "num_of_ipv4_routes": "967",
59        "num_of_ipv6_routes": "104",
60        "rir": "ARIN"
61      },
62      "connection_type": "",
63      "company": {
64        "name": "Google LLC",
65        "type": "",
66        "domain": ""
67      }
68    },
69    "currency": {
70      "code": "USD",
71      "name": "US Dollar",
72      "symbol": "$"
73    }
74  }
75]
pricing backgroundEclipse Top RightEclipse Top LeftEclipse WHOIS Stats
1528+
TLDs
690M+
Active Domains
877M+
Domains Tracked
3554M+
WHOIS Records
4931M+
Host Names
13B+
DNS Records

Product

SecurityAPI
Instantly classify IP threats with real-time risk and location data using our Security API.
Security Lookup API

Use the Security API to retrieve IP details, including geolocation down to the district level, ASN information, and security insights such as VPN, bot, and spam detection. This API also calculates a threat score based on multiple attributes to reflect the overall risk level.

monitoring

Product

Bulk SecurityLookup
Instantly analyze multiple IPs and domains for security threats at scale.
Bulk Security API

Use our Bulk Security Lookup endpoint to perform batch lookup of multiple IPs in one go. One request can have up to 100 IPs. Both IPv4 and IPv6 are supported. The Bulk Security Lookup API delivers well-parsed IP details in both JSON and XML formats, including a comprehensive threat score.

monitoring

Features

What OurSecurity SolutionOffers

Our all-in-one security solution provides everything you need to enhance your security posture and proactively mitigate risks.

Feature icon

Threat Score

Composite threat score flags suspicious IPs by combining VPN, Tor, bot, spam, and other risk signals.

Feature icon

Network Details

Get an IP’s AS number and organization to identify network provider, possible routes and potential malicious networks.

Feature icon

VPN and Proxy Detection

Detect VPNs and proxies in one check, including connection type and provider, to enable informed access and risk decisions.

Feature icon

Supported Formats

Our system supports CSV and MaxMind (MMDB) formats for fast and efficient geolocation and security lookups.

Feature icon

Domains & ASN Whois Data

The Security Database provides WHOIS for domains and ASNs, plus subdomains, to support attack-surface mapping.

Feature icon

Domains DNS Data

Includes comprehensive DNS data such as A, AAAA, NS, MX, SOA, SPF, and CNAME records for infrastructure analysis.

Feature icon

IP Intelligence

The Security API provides IP WHOIS, IP-to-ASN, and ISP-to-IP, email, and organization to IP mapping for threat intelligence.

Feature icon

IP to Geolocation

Provides IP-to-precise geolocation mapping to pinpoint a device’s location for security, compliance, and access control.

Product

SecurityDatabase
Offers deep insights to boost security, prevent attacks and mitigate risks.
Security Database

We offer integrated databases for geolocation, VPN detection, threat scoring, DNS configurations, subdomains, and domain ownership. Correlate these signals for DDoS, phishing, zero-day exploits, and more to generate actionable insights.

monitoring

Use Cases

Security in Action

See how the Security API power real-world threat and anamoly detection.

Feature icon

VPN and Proxy Detection

Fraud Prevention, Ad Traffic Filtering,CAPTCHA Enforcement, Bot Detection.

Feature icon

Network Details (ASN, Org)

Helps in ISP-Based Blocking or Throttling, Network Mapping and Attribution.

Feature icon

Subdomains Data

Attack Surface Management, Phishing Detection, Bug Bounty & Pen Testing.

Feature icon

Risk Assessment

Real-Time Risk Assessment of domains for Firewall Blocking and Threat Intelligence Dashboards.

Feature icon

Whois Data

Phishing and Brand Protection, B2B Lead Generation and Security Investigations.

Feature icon

Fraud Prevention

Reject logins / transactions originating from VPNs, Tor exits, known botnets, or proxies.

Request demo background

Start using our Security Lookup API to uncover IP threats and phishing domains, stay ahead of attackers, and mitigate risk.

pricing background

Documentation

Security Lookup

The IP Security API returns detailed threat intelligence for any IPv4 or IPv6 address. It detects VPNs, proxies (including residential), Tor exit nodes, bot or spam activity, and known attacker behavior. It also identifies cloud provider associations and, when available, returns the provider name. In addition, it delivers geolocation and network details enriched with country metadata, making it a comprehensive source of security and geolocation data.

Authorization

You can make authorized requests to our API by passing API key as a query parameter. To get your API key, login to our billing dashboard and get your API key! If your API key has been compromised, you can change it by clicking on reset button in billing dashboard.

Query Parameters

Required
  • apiKey
    Retrieve your API key from the billing dashboard.
  • ip
    The IP address for which you want to retrieve the security response details.

Request

shellnodejsjavapythonphprubyjscsharpgocswiftjquery
SHELL
Loading request...

Response

Loading response...

Status Codes

Success Codes
  • 200Request is processed successfully.
Failure Codes
  • 400Provided name, service or IP address 'XXX.XXX.XXX.XXX' is not valid.
  • 401Provided API key is invalid.
  • 401Provided API key is inactive.
  • 401Please buy a subscription plan or add api credits, then use this api key.
  • 401Your subscription is deactivated. Please buy new plan or add api credits for using whoisfreaks APIs.
  • 401Your subscription is deactivated due to much time payment failure. Please buy a new plan or add api credits for using whoisfreaks APIs.
  • 401Your account is deactivated.
  • 401You are blocked due to suspicious activity.
  • 404The requested IP does not not exists in our database.
  • 405Invalid HTTP request method is being used for calling the endpoint. Only GET and POST methods are allowed. POST method for bulk endpoint and GET method for single lookup endpoint requests.
  • 408Unable to fetch whois data. Please try again.
  • 412You have exceeded the limit of api plan requests and your subscription is canceled.
  • 413You have exceeded the limit of api credits requests [allowed_request_no]. Please upgrade your plan.
  • 413You have exceeded the limit of Surcharge Requests [allowed_surcharge_request_no]. Please upgrade your plan.
  • 423The IP address you provided falls within bogon IP ranges, which are not routable on the public internet. Please make sure to use a valid, publicly accessible IP address for accurate results.
  • 429Please slow down. Your maximum request limit per minute is reached.
  • 499The request or connection timeout you’ve set is too short, which is causing the server to close the connection before completing the response. Please increase the timeout duration to ensure successful communication with the server.
  • 500Internal Server error occurred.
  • 502Please provide ips in request body.
  • 503Service is unavailable. Please try after some time.
  • 504Request is timed-out.
  • 505You might be using an outdated HTTP version.

Bulk Security Lookup

Bulk Security API extends the threat intelligence capabilities to up to 100 IPv4 or IPv6 addresses in one request.

Authorization

You can make authorized requests to our API by passing API key as a query parameter. To get your API key, login to our billing dashboard and get your API key! If your API key has been compromised, you can change it by clicking on reset button in billing dashboard.

Query Parameters

Required
  • apiKey
    Obtain your API key from the billing dashboard.

Request

shellnodejsjavapythonphprubyjscsharpgocswiftjquery
SHELL
Loading request...

Response

Loading response...

Status Codes

Success Codes
  • 200Request is processed successfully.
Failure Codes
  • 400Please provide IPs in the request body..
  • 401Provided API key is invalid.
  • 401Provided API key is inactive.
  • 401Please buy a subscription plan or add api credits, then use this api key.
  • 401Your subscription is deactivated. Please buy new plan or add api credits for using whoisfreaks APIs.
  • 401Your subscription is deactivated due to much time payment failure. Please buy a new plan or add api credits for using whoisfreaks APIs.
  • 401Your account is deactivated.
  • 401You are blocked due to suspicious activity.
  • 404The requested IP does not not exists in our database.
  • 405Invalid HTTP request method is being used for calling the endpoint. Only GET and POST methods are allowed. POST method for bulk endpoint and GET method for single lookup endpoint requests.
  • 408Unable to fetch whois data. Please try again.
  • 412You have exceeded the limit of api plan requests and your subscription is canceled.
  • 413The requested list size is [GREATER_THAN_100] which exceeds the maximum list size of 100.
  • 413You have exceeded the limit of Surcharge Requests [allowed_surcharge_request_no]. Please upgrade your plan.
  • 423The IP address you provided falls within bogon IP ranges, which are not routable on the public internet. Please make sure to use a valid, publicly accessible IP address for accurate results.
  • 429Please slow down. Your maximum request limit per minute is reached.
  • 499The request or connection timeout you’ve set is too short, which is causing the server to close the connection before completing the response. Please increase the timeout duration to ensure successful communication with the server.
  • 500Internal Server error occurred.
  • 502Please provide ips in request body.
  • 503Service is unavailable. Please try after some time.
  • 504Request is timed-out.
  • 505You might be using an outdated HTTP version.
FAQs
Enhance your apps with industry leading web scraping and crawling.
What exactly is cyber threat intelligence?
How does cyber threat intelligence work?
What is a Proxy?
What is a VPN and what does it do?
What is TOR used for in online privacy?
How does TOR differ from VPNs and proxies?
Proxy vs. VPN vs. TOR – which one should you choose?
VPN vs. Proxy – which offers better security?
How to get Free VPN/Proxy IPs data?
How to identify if an IP address is using a VPN or proxy?
What data does the Security API provide?
Is bulk IP lookup supported by the Security API?
How often is the IP security data refreshed?
What is the number of free API credits available for new users, and are these credits rate-limited?
Do you have rate limiting on number of requests being made on your paid plans?
Do you provide any headers in API response regarding rate limiting?

Ready to get started?

Join now and claim 500 credits for free!

Elevate your cybersecurity strategy with our all-in-one domain and IP intelligence platform empowering analysts, researchers, and brand owners with real-time WHOIS, DNS, IP, and subdomain insights.

Sign Up For Free