> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encrata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# IP Threat

> Assess whether an IP is dangerous VPN/proxy/Tor flags, abuse reports, malware analysis, C2 & honeypot detection, spam blocklists, fraud scores, and reputation history.

## Authentication

Requires an API key in the `Authorization` header.

```bash theme={"dark"}
Authorization: Bearer YOUR_API_KEY
```

## Request

<ParamField body="ip" type="string" required>
  The IP address to assess (IPv4 or IPv6).
</ParamField>

## Response

Returns the standard IP lookup shape with only the threat sections populated: `security`, `threat`, `malware`, `c2`, `honeypot`, `blocklist`, `fraud`, `threat_feeds`, and `reputation_history`.

<ResponseExample>
  ```json theme={"dark"}
  {
    "query": "45.155.205.233",
    "ip": "45.155.205.233",
    "credits": 1,
    "security": { "is_vpn": false, "is_proxy": true, "is_tor": false, "is_hosting": true, "is_abuse": true },
    "threat": { "abuse_score": 100, "total_reports": 1240, "usage_type": "Data Center/Web Hosting/Transit" },
    "blocklist": { "listed": true, "lists": ["spamhaus"], "checked": 12 }
  }
  ```
</ResponseExample>

## Credits

1 credit per lookup.