POST
/
v1
/
community
/
ip
curl --request POST \
  --url https://api.threatbook.io/v1/community/ip
{
  "msg": "Success",
  "data": {
    "summary": {
      "judgments": [],
      "whitelist": true,
      "first_seen": "2020-07-02",
      "last_seen": "2022-09-11"
    },
    "basic": {
      "carrier": "Cloudflare, Inc.",
      "location": {
        "country": "Australia",
        "province": "",
        "city": "",
        "lng": "151.211354",
        "lat": "-33.86264",
        "country_code": "AU"
      }
    },
    "asn": {
      "rank": 4,
      "info": "CLOUDFLARENET, US",
      "number": 13335
    },
    "ports": [
      {
        "port": 80,
        "module": "http",
        "product": "Cloudflare http proxy",
        "version": "",
        "detail": ""
      },
      {
        "port": 443,
        "module": "https",
        "product": "Cloudflare http proxy",
        "version": "",
        "detail": ""
      }
    ],
    "cas": [
      {
        "protocol": "https",
        "port": 443,
        "digital_certificate": {
          "sha256": "73b8ed5becf1ba6493d2e2215a42dfdc7877e91e311ff5e59fb43d094871e699",
          "subject": "cloudflare-dns.com",
          "issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
          "fingerprint": "3ba7e9f806eb30d2f4e3f905e53f07e9acf08e1e",
          "purpose": "SSL client|SSL server|Any Purpose|Any Purpose CA|OCSP helper",
          "verify": "SHA256withRSA",
          "status": "0",
          "revoked": false,
          "begin": "2025-01-02",
          "end": "2026-01-21",
          "status_desc": "Valid",
          "serial_number": "27dc8c5e17294aec9ed3f67728e8a08",
          "revoked_time": ""
        }
      }
    ],
    "IP": "1.1.1.1"
  },
  "response_code": 200
}

Query Parameters

​
apikey
string
required

Community API key. Unique identifier for API request.

​
resource
string
required

Single IPv4 or IPv6 to query.

​
include
string

You are allowed to specify the following arguments to get specific data back. Each of them should be separated by commas if you would like to request more than two of them.

  • summary: Summary of the threat intelligence.
  • ports: open ports of the IP.
  • cas: Relevant certificates of the IP.
  • basic: Geographic location and carrier, etc.
  • asn: Asn information.

If you don’t specify this parameter, we will return all data by default.

Response

200
application/json

The response is of type object.