Skip to main content

IP Intel API Reference

The IP Intel service allows you to retrieve security information about known IP addresses that have been collected across the internet for several decades, giving you insight into the reputation of an IP.

Run In Postman
Base URL​

ip-intel.<csp>.<region>.pangea.cloud

post/v2/reputation
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v2/reputation' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Reputation

POST
https://ip-intel.aws.us.pangea.cloud/v2/reputation

Retrieve a reputation score for an IP address from a provider, including an optional detailed report. When requesting reputation for multiple IP addresses, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

array<string>

The IP to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use reputation data from this provider

object

Pangea standard response schema

object
object
array<string>

The categories that apply to this indicator as determined by the provider

integer

The score, given by the Pangea service, for the indicator

string

The verdict, given by the Pangea service, for the indicator

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v2/domain
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v2/domain' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Domain

POST
https://ip-intel.aws.us.pangea.cloud/v2/domain

Retrieve the domain name associated with an IP address. When requesting domain information for multiple IP addresses, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

array<string>

The IP(s) to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use domain data from this provider

object

Pangea standard response schema

object
object
boolean

True, if the domain was found

string

The domain associated with the IP address

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v2/proxy
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v2/proxy' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Proxy V2

POST
https://ip-intel.aws.us.pangea.cloud/v2/proxy

Determine if an IP address originates from a proxy. When requesting information on multiple IP addresses, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

array<string>

The IP(s) to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use proxy data from this provider

object

Pangea standard response schema

object
object
boolean
  • True - Indicates the IP address belongs to a proxy service
  • False - Indicates the IP address is not associated with a proxy service
object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v2/vpn
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v2/vpn' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

VPN

POST
https://ip-intel.aws.us.pangea.cloud/v2/vpn

Determine if an IP address originates from a VPN. When requesting information on multiple IP addresses, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

array<string>

The IP(s) to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use vpn data from this provider

object

Pangea standard response schema

object
object
boolean
  • True - Indicates the IP address belongs to a VPN service
  • False - Indicates the IP address is not associated with a VPN service
object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v2/geolocate
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v2/geolocate' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Geolocate

POST
https://ip-intel.aws.us.pangea.cloud/v2/geolocate

Retrieve location information associated with an IP address. When requesting geolocation for multiple IP addresses, the response will be asynchronous. See API Reference/Asynchronous Responses

required parameters

array<string>

The IP(s) to be looked up

  • minItems: 1

  • maxItems: 100

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use location data from this provider

object

Pangea standard response schema

object
object
string

The country where the IP is located

string

The city where the IP is located

number

The latitude of the IP

number

The longitude of the IP

string

The postal code where the IP is located

string

The two-digit country code associated with the IP address

object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/reputation
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v1/reputation' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Reputation (deprecated)

POST
https://ip-intel.aws.us.pangea.cloud/v1/reputation

Retrieve a reputation score for an IP address from a provider, including an optional detailed report.

required parameters

string (ip-address)

The IP to be looked up

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use reputation data from this provider

object

Pangea standard response schema

object
object
array<string>

The categories that apply to this indicator as determined by the provider

integer

The score, given by the Pangea service, for the indicator

string

The verdict, given by the Pangea service, for the indicator

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/domain
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v1/domain' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Domain (deprecated)

POST
https://ip-intel.aws.us.pangea.cloud/v1/domain

Retrieve the domain name associated with an IP address

required parameters

string (ipv4)

The IP to be looked up

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use domain data from this provider

object

Pangea standard response schema

object
object
boolean

True, if the domain was found

string

The domain associated with the IP address

object

The parameters, which were passed in the request, echoed back

object

The raw data from the provider. Each provider's data will have its own format

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/proxy
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v1/proxy' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Proxy (deprecated)

POST
https://ip-intel.aws.us.pangea.cloud/v1/proxy

Determine if an IP address originates from a proxy.

required parameters

string (ipv4)

The IP to be looked up

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use proxy data from this provider

object

Pangea standard response schema

object
object
boolean
  • True - Indicates the IP address belongs to a proxy service
  • False - Indicates the IP address is not associated with a proxy service
object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/vpn
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v1/vpn' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

VPN (deprecated)

POST
https://ip-intel.aws.us.pangea.cloud/v1/vpn

Determine if an IP address originates from a VPN.

required parameters

string (ipv4)

The IP to be looked up

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use vpn data from this provider

object

Pangea standard response schema

object
object
boolean
  • True - Indicates the IP address belongs to a VPN service
  • False - Indicates the IP address is not associated with a VPN service
object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

post/v1/geolocate
curl -sSLX POST 'https://ip-intel.aws.us.pangea.cloud/v1/geolocate' \
-H 'Authorization: Bearer <your_token>' \
-H 'Content-Type: application/json' \
-d '{}'

Response

Geolocate (deprecated)

POST
https://ip-intel.aws.us.pangea.cloud/v1/geolocate

Retrieve location information associated with an IP address.

required parameters

string (ipv4)

The IP to be looked up

boolean
(default: false)

Echo the API parameters in the response

boolean
(default: false)

Include raw data from this provider

string

Use location data from this provider

object

Pangea standard response schema

object
object
string

The country where the IP is located

string

The city where the IP is located

number

The latitude of the IP

number

The longitude of the IP

string

The postal code where the IP is located

string

The two-digit country code associated with the IP address

object

The parameters, which were passed in the request, echoed back.

object

The raw data from the provider. Each provider's data will have its own format.

string

A unique identifier assigned to each request made to the API. It is used to track and identify a specific request and its associated data. The request_id can be helpful for troubleshooting, auditing, and tracing the flow of requests within the system. It allows users to reference and retrieve information related to a particular request, such as the response, parameters, and raw data associated with that specific request.

"request_id":"prq_x6fdiizbon6j3bsdvnpmwxsz2aan7fqd"
string

The timestamp indicates the exact moment when a request is made to the API. It represents the date and time at which the request was initiated by the client. The request_time is useful for tracking and analyzing the timing of requests, measuring response times, and monitoring performance metrics. It allows users to determine the duration between the request initiation and the corresponding response, aiding in the assessment of API performance and latency.

"request_time":"2022-09-21T17:24:33.105Z"
string

Duration it takes for the API to process a request and generate a response. It represents the elapsed time from when the request is received by the API to when the corresponding response is returned to the client.

"response_time":"2022-09-21T17:24:34.007Z"
string

It represents the status or outcome of the API request made for IP information. It indicates the current state or condition of the request and provides information on the success or failure of the request.

"status":"success"
string

Provides a concise and brief overview of the purpose or primary objective of the API endpoint. It serves as a high-level summary or description of the functionality or feature offered by the endpoint.

Was this article helpful?

Contact us