IP Info

[GET] Single IP lookup

Billable

Endpoint
[GET] https://api.itsecurity.ee/v4/ip/{host}?mode=full
Description

Returns information about a specific IPv4 or IPv6 address.


Request parameters
  • {host} : Represents the IPv4 or IPv6 address for which information is requested.
  • {mode} (optional): This parameter allows users to specify the mode of output (full/normal).

Response keys

The response from the API includes several interesting keys that provide valuable information about the queried IP address. Here's a summary of the response keys:

  • asn (string): Autonomous System Number associated with the IP address.
  • contacts (list): Contacts associated with the IP address, such as the hoster's abuse e-mail. (Note: Requires ?mode=full in the request.)
  • hostnames (list): Hostnames associated with the IP address. (Note: Requires ?mode=full in the request.)
  • ip (string): The IP address that was checked.
  • ip_type (string): Indicates whether the IP address is IPv4 or IPv6.
  • location (object): Contains GeoIP data related to the IP address.
  • city (string): City where the IP address is located.
  • continent_name (string): Name of the continent where the IP address is located.
  • coordinates (string): Joined latitude and longitude coordinates.
  • country_code (string): 2-letter country code of the IP address location.
  • country_name (string): Name of the country where the IP address is located.
  • currency (string): Currency used in the location.
  • is_eu (boolean): Indicates if the location is within the European Union.
  • latitude (float): Latitude of the IP address location.
  • longitude (float): Longitude of the IP address location.
  • time_zone (str): Contains timezone-related information.
  • phone_code (string): Phone code of the location.
  • region_code (string): Region code of the location.
  • region_name (string): Region name of the location.
  • organisation (string): The organization referenced for the IP address.
  • probe (object): Contains information about ports and services exposed by the IP address. (Note: Requires ?mode=full in the request.)
  • ports (object): Ports and services exposed by the IP address.
  • security (object): Information about IP reputation.
  • is_tor (boolean): Indicates if the IP is a known TOR exit node.
  • is_proxy (boolean): Indicates if the IP has a proxy service exposed or is present in proxy lists.
  • is_tor_or_proxy (boolean): True if either is_tor or is_proxy is true.
  • is_datacenter (boolean): Indicates if the IP belongs to known datacenter IP ranges.
  • is_threat (boolean): Indicates if the IP is a known source of malware, exploits, or was involved in DDoS attacks.
  • is_known_abuser (boolean): Indicates if the IP was seen in abuse activity, such as spam posting, brute-force, aggressive crawling, etc.
  • is_threat_or_known_abuser (boolean): True if either is_threat or is_known_abuser is true.
  • subnet (string): The network subnet the IP belongs to.
  • name (string): Name of the timezone.

These response keys offer valuable insights into the queried IP address, including geographical location, security-related information, network details, and more. Note that some keys may require additional parameters (?mode=full ) in the request to be included in the response.


Example Response
{
  "additional_data": {},
  "payload": {
    "asn": "AS15169",
    "hostname": "",
    "ip": "8.8.4.4",
    "ip_type": "ipv4",
    "location": {
      "city": null,
      "continent_name": "North America",
      "country_code": "US",
      "country_name": "United States",
      "currency": "USD",
      "flag_svg": "",
      "is_eu": false,
      "latitude": 37.751,
      "longitude": -97.822,
      "phone_code": "+1",
      "postal_code": null,
      "region_code": null,
      "region_name": null,
      "time_zone": "America/Chicago"
    },
    "organisation": "Google LLC",
    "probe": {
      "os": null,
      "ports": {
        "53": "dns-tcp",
        "443": "https"
      },
      "ports_open": [
        443,
        53
      ]
    },
    "security": {
      "is_anonymous": false,
      "is_datacenter": false,
      "is_known_abuser": false,
      "is_proxy": false,
      "is_threat": false,
      "is_tor": false
    }
  },
  "success": true
}

[POST] Batch IP lookup

Billable

Endpoint
[POST] https://api.itsecurity.ee/v4/ip/
Description

The Batch IP lookup method using the POST request allows handling a large number of IP addresses in a single request. The output from the Batch IP lookup method provides information similar to the Single IP lookup method. It includes various details for each IP address, such as ASN (autonomous system number), location data, security-related information, and more, depending on the available response keys. The limit of IP's per request is up to 50 IP addresses per bulk request.


Example Response
{
  "additional_data": {
    "incorrect_ips": [
      "1.2.3.400"
    ]
  },
  "payload": [
    {
      "asn": "AS15169",
      "hostname": "",
      "ip": "8.8.4.4",
      "ip_type": "ipv4",
      "location": {
        "city": null,
        "continent_name": "North America",
        "country_code": "US",
        "country_name": "United States",
        "currency": "USD",
        "flag_svg": "",
        "is_eu": false,
        "latitude": 37.751,
        "longitude": -97.822,
        "phone_code": "+1",
        "region_code": null,
        "region_name": null,
        "time_zone": "America/Chicago"
      },
      "organisation": "Google LLC",
      "security": {
        "is_anonymous": false,
        "is_datacenter": false,
        "is_known_abuser": false,
        "is_proxy": false,
        "is_threat": false,
        "is_tor": false
      }
    },
    {
      "asn": "AS13335",
      "hostname": "",
      "ip": "104.20.244.125",
      "ip_type": "ipv4",
      "location": {
        "city": null,
        "continent_name": "North America",
        "country_code": "US",
        "country_name": "United States",
        "currency": "USD",
        "flag_svg": "",
        "is_eu": false,
        "latitude": 37.751,
        "longitude": -97.822,
        "phone_code": "+1",
        "region_code": null,
        "region_name": null,
        "time_zone": "America/Chicago"
      },
      "organisation": "Cloudflare, Inc.",
      "security": {
        "is_anonymous": false,
        "is_datacenter": false,
        "is_known_abuser": false,
        "is_proxy": false,
        "is_threat": false,
        "is_tor": false
      }
    },
    {
      "asn": "AS15169",
      "hostname": "",
      "ip": "2a00:1450:4010:c0b::66",
      "ip_type": "ipv6",
      "location": {
        "city": "Lappeenranta",
        "continent_name": "Europe",
        "country_code": "FI",
        "country_name": "Finland",
        "currency": "EUR",
        "flag_svg": "",
        "is_eu": true,
        "latitude": 61.0667,
        "longitude": 28.1833,
        "phone_code": "+358",
        "region_code": "02",
        "region_name": "South Karelia",
        "time_zone": "Europe/Helsinki"
      },
      "organisation": "Google LLC",
      "security": {
        "is_anonymous": false,
        "is_datacenter": false,
        "is_known_abuser": false,
        "is_proxy": false,
        "is_threat": false,
        "is_tor": false
      }
    }
  ],
  "success": true
}
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.

Still need help? Contact Us Contact Us