GET
/
threats
curl --request GET \
  --url https://greipapi.com/threats \
  --header 'Authorization: Bearer <token>'
{
  "status": "success",
  "data": {
    "ip": "12.12.12.12",
    "threats": {
      "isProxy": true,
      "proxyType": "Socks",
      "isTor": false,
      "isBot": false,
      "isRelay": false,
      "isHosting": true
    }
  },
  "executionTime": 90
}

Query Parameters

ip
string
required

The ip parameter is used to specify the IP address you want to retrieve it’s threat intelligence information.

Expected values: an IP address (IPv4 or IPv6)

Sample value: 1.1.1.1

format
string
default: "JSON"

The format command is used to get a response in a specific format.

Expected values: JSON, XML, CSV, or Newline

For more information please refer to Response Format.

mode
string
default: "live"

The mode command is used to in the development stage to simulate the integration process before releasing it to the production environment.

Expected values: live, or test.

For more information please refer to Development Environment.

userID
string

The userID command can be used to identify requests sent by specific users to monitor in the Events Page.

Expected values: email address, phone number, user id, name, etc.

For more information please refer to User Identifier.

callback
string

The callback command can help you make the response as a JSONP format.

Expected values: any name that can be used as a function name in Javascript, e.g: myFunctionName.

For more information please refer to JSONP Callback.

Response properties

data
object
required
ip
string
required

IP address you’re looking up.

threats
object
required
status
string
required

Response status (success/error).

executionTime
integer
required

Time taken to process the data (in milliseconds).