Real-time IP Threat Intelligence

Check any IP address against 140+ continuously updated threat feeds.
Protect your infrastructure from malicious traffic, botnets, and cyber threats.

Check IP Addresses

Check your own address, or enter any others — up to 100 per request

Checking IP addresses...

140+

Threat Feeds

2.1B+

Addresses Covered

<50ms

Response Time

Daily

Feed Updates

🛡️

Comprehensive Coverage

Aggregates 140+ curated reputation lists from FireHOL, Spamhaus, Emerging Threats, DShield, TorProject, StopForumSpam, and more.

⚡

Lightning Fast

Sub-50ms response times with our optimized database and global CDN infrastructure.

🔄

Always Updated

Every feed is re-fetched and rebuilt daily, so lookups always run against fresh data.

🔌

Simple API

RESTful API with JSON responses. Easy integration with any programming language or platform.

📊

Detailed Reports

Every match names the list it came from, its category, and who maintains it.

🚀

Scalable

Check up to 100 addresses in a single request. No registration and no API key required.

API Documentation

Integrate IP threat checking into your applications — full documentation

Endpoint

POST https://ipguardian.net/api/check

Rate Limits

100 IPs per request

100 Requests per minute

Request Format

Send a JSON array of IP addresses or a single IP string:

// Array of IPs
["8.8.8.8", "1.1.1.1", "192.168.1.1"]

// Or single IP
{"ip": "8.8.8.8"}

// Or just a string
"8.8.8.8"

Response Format

{
  "success": true,
  "timestamp": "2025-01-24T12:00:00.000Z",
  "count": 1,
  "results": {
    "ip": "8.8.8.8",
    "found": false,
    "sources": []
  }
}

// If IP is found in blocklists:
{
  "success": true,
  "timestamp": "2025-01-24T12:00:00.000Z", 
  "count": 1,
  "results": {
    "ip": "45.142.120.5",
    "found": true,
    "sources": [
      {
        "type": "direct",
        "filename": "firehol_level1.netset",
        "category": "attacks",
        "maintainer": "FireHOL"
      },
      {
        "type": "subnet",
        "subnet": "45.142.120.0/24",
        "filename": "spamhaus_drop.netset",
        "category": "spam",
        "maintainer": "Spamhaus"
      }
    ]
  }
}

Code Examples

# Check single IP
curl -X POST https://ipguardian.net/api/check \
  -H "Content-Type: application/json" \
  -d '["8.8.8.8"]'

# Check multiple IPs
curl -X POST https://ipguardian.net/api/check \
  -H "Content-Type: application/json" \
  -d '["8.8.8.8", "1.1.1.1", "45.142.120.5"]'

import requests

def check_ips(ips: list[str]) -> dict:
    """Check IP addresses against threat blocklists."""
    response = requests.post(
        "https://ipguardian.net/api/check",
        json=ips,
        headers={"Content-Type": "application/json"}
    )
    return response.json()

# Example usage
result = check_ips(["8.8.8.8", "45.142.120.5"])

for ip_result in result.get("results", []):
    status = "⚠️ BLOCKED" if ip_result["found"] else "✅ Clean"
    print(f"{ip_result['ip']}: {status}")

interface IPCheckResult {
  ip: string;
  found: boolean;
  sources: Array<{
    type: string;
    filename: string;
    category: string;
    maintainer: string;
  }>;
}

interface APIResponse {
  success: boolean;
  timestamp: string;
  count: number;
  results: IPCheckResult | IPCheckResult[];
}

async function checkIPs(ips: string[]): Promise<APIResponse> {
  const response = await fetch("https://ipguardian.net/api/check", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify(ips),
  });
  return response.json();
}

// Example usage
const result = await checkIPs(["8.8.8.8", "45.142.120.5"]);
console.log(result);

Error Codes

400 Invalid request or IP format

405 Method not allowed (use POST)

429 Rate limit exceeded

503 Server overloaded