Skip to main content
POST
/
v1
/
community
/
ip
IP Report (V1)
curl --request POST \
  --url https://api.threatbook.io/v1/community/ip
{
  "msg": "Success",
  "data": {
    "summary": {
      "judgments": [],
      "whitelist": true,
      "first_seen": "2020-07-02",
      "last_seen": "2022-09-11"
    },
    "basic": {
      "carrier": "Cloudflare, Inc.",
      "location": {
        "country": "Australia",
        "province": "",
        "city": "",
        "lng": "151.211354",
        "lat": "-33.86264",
        "country_code": "AU"
      }
    },
    "asn": {
      "rank": 4,
      "info": "CLOUDFLARENET, US",
      "number": 13335
    },
    "ports": [
      {
        "port": 80,
        "module": "http",
        "product": "Cloudflare http proxy",
        "version": "",
        "detail": ""
      },
      {
        "port": 443,
        "module": "https",
        "product": "Cloudflare http proxy",
        "version": "",
        "detail": ""
      }
    ],
    "cas": [
      {
        "protocol": "https",
        "port": 443,
        "digital_certificate": {
          "sha256": "73b8ed5becf1ba6493d2e2215a42dfdc7877e91e311ff5e59fb43d094871e699",
          "subject": "cloudflare-dns.com",
          "issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
          "fingerprint": "3ba7e9f806eb30d2f4e3f905e53f07e9acf08e1e",
          "purpose": "SSL client|SSL server|Any Purpose|Any Purpose CA|OCSP helper",
          "verify": "SHA256withRSA",
          "status": "0",
          "revoked": false,
          "begin": "2025-01-02",
          "end": "2026-01-21",
          "status_desc": "Valid",
          "serial_number": "27dc8c5e17294aec9ed3f67728e8a08",
          "revoked_time": ""
        }
      }
    ],
    "IP": "1.1.1.1"
  },
  "response_code": 200
}

Query Parameters

​
apikey
string
required

Your API Key.

You are able to get the key on "My API" page of i.threatbook.io.

Kindly note:

Please check if you have bound your access IP to the key and have the authority quotas to access this API before you interact with it.

​
resource
string
required

Single IPv4 or IPv6 to query.

​
include
string

You are allowed to specify the following arguments to get specific data back. Each of them should be separated by commas if you would like to request more than two of them.

  • summary: Summary of the threat intelligence.
  • ports: open ports of the IP.
  • cas: Relevant certificates of the IP.
  • basic: Geographic location and carrier, etc.
  • asn: Asn information.

If you don’t specify this parameter, we will return all data by default.

Response

​
msg
string
required
Allowed value: "Success"
​
data
object
required
​
response_code
integer
required
⌘I