Security Data

This includes information about whether the IP address is associated with VPNs, Tor exit nodes, or potential threat activity.

Security data is useful for:

• Detecting suspicious or high-risk traffic
• Preventing fraud, abuse, or automated attacks
• Blocking or restricting access from anonymized networks
• Adding lightweight security checks to authentication flows

Below is an example of the security-related fields returned by a lookup:

Request Example

   GET https://api.ipwho.org/ip/76.102.11.203?apiKey=sk.xxxx&get=security

Response Example

{
    "success": true,
    "data": {
        "security": {
            "isVpn": false,
            "isTor": false,
            "isThreat": "low"
        }
    }
}

Security Data Fields

Parameter	Type	Description
isVpn	boolean	Indicates if the IP is associated with a VPN.
isTor	boolean	Indicates if the IP is associated with the Tor network.
isThreat	string	The threat level associated with the IP (e.g., low, medium, high).