IP Intel

The IP Intel API provides intelligence about IP addresses, including geolocation data and reputation/threat analysis.

The API Base URL is https://api.security.dev

Available Endpoints

The IP Intel API currently offers two endpoints:

Geolocate: Provides geographical information about an IP address
Reputation: Provides threat intelligence about an IP address

Authentication

All API requests require authentication using your API key:

Authorization: Bearer <your_app_key>

Geolocate Endpoint

GET /v1/ip-intel/geolocate/{ip}

Returns geolocation data for the specified IP address.

Request Example

curl -H"Authorization: Bearer <token>" https://api.security.dev/v1/ip-intel/geolocate/9.9.9.9

Response Example

{
    "city": {
        "name": "Berkeley"
    },
    "continent": {
        "code": "NA",
        "name": "North America"
    },
    "country": {
        "iso_code": "US",
        "name": "United States"
    },
    "location": {
        "accuracy_radius": 20,
        "latitude": 37.8767,
        "longitude": -122.2676,
        "time_zone": "America/Los_Angeles"
    },
    "postal": {
        "code": "94709"
    },
    "registered_country": {
        "iso_code": "US",
        "name": "United States"
    },
    "subdivisions": [
        {
            "iso_code": "CA",
            "name": "California"
        }
    ]
}

Reputation Endpoint

GET /v1/ip-intel/reputation/{ip}

Returns reputation and threat data for the specified IP address.

Request Example

curl -H"Authorization: Bearer <token>" https://api.security.dev/v1/ip-intel/reputation/9.9.9.9

Response Example

{
    "is_abuser": false,
    "is_proxy": false,
    "is_tor_exit": false
}