IP Lookup

Get more information about a given IP address. Returns time ranges,
IP metadata (network owner, ASN, reverse DNS pointer, country),
associated actors, activity tags, and raw port scan and web
request information.

Use the quick parameter to return a subset of the response fields, for a faster response time.

Path Params
string
required

IP address to query

Query Params
boolean
Defaults to false

If true, the response will only include the IP address and the classification or trust level.

string

Comma-separated list of dataset scopes to include in the query.
When omitted, only the default GreyNoise global dataset is queried.

Allowed values:

  • greynoise: GreyNoise's global dataset.
  • community: Aggregated community-contributed data.
  • personal: The authenticated caller's own workspace data.
    Requires an authenticated workspace.

Enforcement varies by endpoint; see each operation's response codes:

  • GET /v3/ip/{ip} and POST /v3/ip return 403 Forbidden when any
    value is supplied without the Community Dataset entitlement. Values
    are not validated server-side; unrecognized values yield empty
    results rather than an error.
  • GET /v3/noise/ips/{ip}/timeline returns 400 Bad Request for
    unrecognized values and for personal without an authenticated
    workspace. The Community Dataset entitlement is not enforced on
    this endpoint.
Responses

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json