Skip to main content

Request IP Feed Information

GET 
/ip-feed

A GET request to retrieve the IP feed information by name, IP address or IP address range.

Request​

Query Parameters

    name string

    Possible values: [malicious, high-risk]

    Provides the IP feed entries by the feed name.

    Note: Returns only entries with 'released' status that exist in the Threat Intelligence database.

    curl -v -H 'X-API-KEY: API_KEY' \
      'https://api.threatvault.paloaltonetworks.com/service/v1/ip-feed?name=malicious'
    ipaddr string

    Provides the IP feed information by IP address.

    Note: Always returns a result. Returns feed information if IP Address exists in the Threat Intelligence database, otherwise returns only the Geolocation and Autonomous System information.

    curl -v -H 'X-API-KEY: API_KEY' \
      'https://api.threatvault.paloaltonetworks.com/service/v1/ip-feed?ipaddr=193.189.116.210'
    fromipaddr string

    Used together with toipaddr field. Provides the IP feed entries based on IP address range.

    Note: Returns entries with 'released', 'disabled' or 'expired' status that exist in the Threat Intelligence database.

    curl -v -H 'X-API-KEY: API_KEY' \
      'https://api.threatvault.paloaltonetworks.com/service/v1/ip-feed?fromipaddr=185.130.5.207&toipaddr=185.130.5.236'
    toipaddr string

    The right boundary of date range query, must use with toipaddr.

    Example can be found in toipaddr section

    limit string

    Optional parameter. The maximum number of results to return in each page.

    curl -v -H 'X-API-KEY: API_KEY' \
      'https://api.threatvault.paloaltonetworks.com/service/v1/ip-feed?name=high-risk&limit=3'
    offset string

    Optional parameter. The starting position of the query in relation to the complete set of the unpaginated results.

    curl -v -H 'X-API-KEY: API_KEY' \
      'https://api.threatvault.paloaltonetworks.com/service/v1/ip-feed?name=high-risk&limit=10&offset=10'

Responses​

Request succeeded

Response Headers
  • X-Day-RateLimit-Limit integer
    Example: 2000

    The maximum number of requests that the user is permitted to make per day.

  • X-Day-RateLimit-Remaining integer

    The number of requests remaining in the current rate limit window (one day).

  • X-Day-RateLimit-Reset integer

    The epoch timestamp at which the current rate limit window (one day) resets.

  • X-Minute-RateLimit-Limit integer
    Example: 200

    The maximum number of requests that the user is permitted to make per minute.

  • X-Minute-RateLimit-Remaining integer

    The number of requests remaining in the current rate limit window (one minute).

  • X-Minute-RateLimit-Reset integer

    The epoch timestamp at which the current rate limit window (one minute) resets.

Schema
    success boolean

    The response status.

    link object[]

    The pagination information of the results.

  • Array [
    • next string

    The URL of previous page with results.

    previous string

    The URL of next page with results.

  • ]
    • count integer

    The total number of entries found.

    data object[]

    The data of the response.

  • Array [
    • ipaddr string

    The IP address.

    name string

    The name of the IP Feed entry.

    status string

    The status of the IP Feed entry.

    release object

    The release information.

    first_release_version string

    The release version when the IP Feed was released.

    first_release_time string

    The release time when the IP Feed was released.

  • ]
    • message string

    Generic response message.

Loading...