GreyNoise
API Reference

IP Lookup - Multi

post
https://api.greynoise.io/v3/ip

Retrieves information about the submitted set of IP addresses
from the Internet Scanner and Business Service intelligence datasets
(consolidated response based on subscription entitlements).
Returns time ranges, IP metadata (network owner, ASN, reverse DNS pointer, country),
associated actors, tags, raw port scan data, web request information,
classification and/or trust level, and provider information.

Use the quick parameter to return a subset of the response fields, for a faster response time.

Can process up to 10,000 IPs per request.

Query Params
boolean
Defaults to false

If true, the response will only include the IP address and the classification or trust level.

string

Comma-separated list of dataset scopes to include in the query.
When omitted, only the default GreyNoise global dataset is queried.

Allowed values:

  • greynoise: GreyNoise's global dataset.
  • community: Aggregated community-contributed data.
  • personal: The authenticated caller's own workspace data.
    Requires an authenticated workspace.

Enforcement varies by endpoint; see each operation's response codes:

  • GET /v3/ip/{ip} and POST /v3/ip return 403 Forbidden when any
    value is supplied without the Community Dataset entitlement. Values
    are not validated server-side; unrecognized values yield empty
    results rather than an error.
  • GET /v3/noise/ips/{ip}/timeline returns 400 Bad Request for
    unrecognized values and for personal without an authenticated
    workspace. The Community Dataset entitlement is not enforced on
    this endpoint.
Body Params

Ipv4 addresses to perform noise lookup.

ips
array of strings
required
ips*
Responses

Updated 2 months ago

Language
Credentials
Header
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated 2 months ago