跳到正文

IP情报批量查询

接口说明

该接口是一个IP情报批量查询服务,能够对批量IP信息进行查询。支持在param输入IP值,多个查询IP使用英文逗号分隔,最多50个,根据不同的查询实体,返回信息,返回信息包括IP、风险等级、置信度、一级标签、国家、省份、城市、经度坐标、纬度坐标、注册机构、网络类型等相关ip情报信息。

具体的请求示例:

{
  "param": "101.133.131.45,104.152.52.73"
}

。

请求地址

https://api.f.360.cn/ip

请求方法

POST

请求参数

参数名类型位置是否必填示例值说明
paramstringbody是101.133.131.45,104.152.52.73查询的参数,类型为:IP;多个查询参数以逗号分隔,参数最多设置为50个

响应参数

名称类型示例值描述
errnoint2000响应状态码
msgstringsuccess响应状态信息
resultmap查询结果
result.summaryobject摘要
result.summary.ipstringIP的值
result.summary.riskstringunknown/low/medium/high风险等级
result.summary.confidencestringunknown/low/medium/high置信度
result.summary.block_impactint-1/1/2/3/4/5阻断系数(具体说明见附录表一)
result.summary.geo_infoobject地理位置信息
result.summary.geo_info.countrystring国家
result.summary.geo_info.provincestring省份/州
result.summary.geo_info.citystring城市
result.summary.geo_info.operatorstringIP注册机构
result.summary.geo_info.asstringAS组织名称
result.summary.geo_info.asnintASN
result.summary.network_typearrayIP的网络类型
result.summary.anonymous_typestring匿踪类型
result.summary.threat_typearray威胁类型
result.tagsarray一级标签(具体说明见附录表二)

请求示例

支持cUrl、Python、Java、PHP、Go语言的请求,示例如下

#!/usr/bin/env bash
set -euo pipefail

APPID=""  # apikey
SECRET=""  # salt
URL="https://api.f.360.cn/ip"
BODY='{"param":"101.133.131.45,26.26.26.2"}'

NONCE=$(printf '%08d' $((RANDOM % 100000000)))
TIMESTAMP=$(date +%s)
BODY_MD5=$(printf '%s' "$BODY" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=$(printf '%s' "${BODY_MD5}${APPID}${NONCE}${TIMESTAMP}${SECRET}" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=${SIGNATURE:16}

curl --location --request POST "$URL" \
  --header "Content-Type: application/json" \
  --header "X-360-Key: ${APPID}" \
  --header "X-360-Nonce: ${NONCE}" \
  --header "X-360-Timestamp: ${TIMESTAMP}" \
  --header "X-360-Signature: ${SIGNATURE}" \
  --data "${BODY}"

响应示例

业务正常响应

{
    "msg": "success",
    "errno": 2000,
    "from": "360威胁情报中心",
    "result": {
        "101.133.131.45": {
            "tags": [
                "SCANNER"
            ],
            "summary": {
                "confidence": "medium",
                "risk": "high",
                "ip": "101.133.131.45",
                "geo_info": {
                    "province": "上海市",
                    "city": "上海市",
                    "country": "中国",
                    "asn": 37963,
                    "as": "CNNIC-ALIBABA-CN-NET-AP",
                    "operator": "阿里云"
                },
                "block_impact": -1,
                "user_type": "",
                "threat_type": [
                    "SCANNER"
                ],
                "anonymous_type": "",
                "network_type": [
                    "数据中心"
                ]
            }
        },
        "26.26.26.2": {
            "tags": [],
            "summary": {
                "confidence": "unknown",
                "risk": "unknown",
                "ip": "26.26.26.2",
                "geo_info": {
                    "province": "俄亥俄州",
                    "city": "哥伦布",
                    "country": "美国",
                    "asn": 749,
                    "as": "DNIC-AS-00749",
                    "operator": "美国国防部网络信息中心"
                },
                "block_impact": -1,
                "user_type": "",
                "threat_type": [],
                "anonymous_type": "",
                "network_type": [
                    "已路由-未使用"
                ]
            }
        }
    },
    "invalid": []
}

业务异常响应

{
    "code": "GC00105", 
    "src": "apiholder",
    "msg": "appid over field"
}