IP情报批量查询
接口说明
该接口是一个IP情报批量查询服务,能够对批量IP信息进行查询。支持在param输入IP值,多个查询IP使用英文逗号分隔,最多50个,根据不同的查询实体,返回信息,返回信息包括IP、风险等级、置信度、一级标签、国家、省份、城市、经度坐标、纬度坐标、注册机构、网络类型等相关ip情报信息。
具体的请求示例:
{
"param": "101.133.131.45,104.152.52.73"
}。
请求地址
https://api.f.360.cn/ip
请求方法
POST
请求参数
| 参数名 | 类型 | 位置 | 是否必填 | 示例值 | 说明 |
|---|---|---|---|---|---|
| param | string | body | 是 | 101.133.131.45,104.152.52.73 | 查询的参数,类型为:IP;多个查询参数以逗号分隔,参数最多设置为50个 |
响应参数
| 名称 | 类型 | 示例值 | 描述 |
|---|---|---|---|
| errno | int | 2000 | 响应状态码 |
| msg | string | success | 响应状态信息 |
| result | map | 查询结果 | |
| result.summary | object | 摘要 | |
| result.summary.ip | string | IP的值 | |
| result.summary.risk | string | unknown/low/medium/high | 风险等级 |
| result.summary.confidence | string | unknown/low/medium/high | 置信度 |
| result.summary.block_impact | int | -1/1/2/3/4/5 | 阻断系数(具体说明见附录表一) |
| result.summary.geo_info | object | 地理位置信息 | |
| result.summary.geo_info.country | string | 国家 | |
| result.summary.geo_info.province | string | 省份/州 | |
| result.summary.geo_info.city | string | 城市 | |
| result.summary.geo_info.operator | string | IP注册机构 | |
| result.summary.geo_info.as | string | AS组织名称 | |
| result.summary.geo_info.asn | int | ASN | |
| result.summary.network_type | array | IP的网络类型 | |
| result.summary.anonymous_type | string | 匿踪类型 | |
| result.summary.threat_type | array | 威胁类型 | |
| result.tags | array | 一级标签(具体说明见附录表二) |
请求示例
支持cUrl、Python、Java、PHP、Go语言的请求,示例如下
#!/usr/bin/env bash
set -euo pipefail
APPID="" # apikey
SECRET="" # salt
URL="https://api.f.360.cn/ip"
BODY='{"param":"101.133.131.45,26.26.26.2"}'
NONCE=$(printf '%08d' $((RANDOM % 100000000)))
TIMESTAMP=$(date +%s)
BODY_MD5=$(printf '%s' "$BODY" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=$(printf '%s' "${BODY_MD5}${APPID}${NONCE}${TIMESTAMP}${SECRET}" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=${SIGNATURE:16}
curl --location --request POST "$URL" \
--header "Content-Type: application/json" \
--header "X-360-Key: ${APPID}" \
--header "X-360-Nonce: ${NONCE}" \
--header "X-360-Timestamp: ${TIMESTAMP}" \
--header "X-360-Signature: ${SIGNATURE}" \
--data "${BODY}"# python3.6.8
# -*- coding:utf-8 -*—
import hashlib
import json
import random
import time
import requests
APPID = "" # apikey
SECRET = "" # salt
def make_headers(appid, secret, body=""):
headers = {}
headers["X-360-Key"] = appid
headers["X-360-Nonce"] = str(random.randint(0, 99999999)).zfill(8)
headers["X-360-Timestamp"] = str(int(time.time()))
s = (
hashlib.md5(body.encode("utf8")).hexdigest()
+ headers["X-360-Key"]
+ headers["X-360-Nonce"]
+ headers["X-360-Timestamp"]
+ secret
)
md5 = hashlib.md5(s.encode("utf8")).hexdigest()
headers["X-360-Signature"] = md5[16:]
headers["Content-Type"] = "application/json"
return headers
def do_post(url, body):
res = requests.post(
url,
data=json.dumps(body),
headers=make_headers(APPID, SECRET, json.dumps(body)),
)
print(res.text)
if __name__ == "__main__":
# 请求地址
url = "https://api.f.360.cn/ip"
# 查询参数
query = {"param": "101.133.131.45,26.26.26.2"}
do_post(url, query)import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.util.concurrent.ThreadLocalRandom;
public class Demo {
static String md5(String input) throws Exception {
byte[] digest = MessageDigest.getInstance("MD5")
.digest(input.getBytes(StandardCharsets.UTF_8));
StringBuilder sb = new StringBuilder();
for (byte b : digest) {
sb.append(String.format("%02x", b & 0xff));
}
return sb.toString();
}
public static void main(String[] args) throws Exception {
String appid = ""; // apikey
String secret = ""; // salt
String url = "https://api.f.360.cn/ip";
String body = "{\"param\":\"101.133.131.45,26.26.26.2\"}";
String nonce = String.format("%08d", ThreadLocalRandom.current().nextInt(100000000));
String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
String signature = md5(md5(body) + appid + nonce + timestamp + secret).substring(16);
HttpRequest request = HttpRequest.newBuilder()
.uri(URI.create(url))
.header("Content-Type", "application/json")
.header("X-360-Key", appid)
.header("X-360-Nonce", nonce)
.header("X-360-Timestamp", timestamp)
.header("X-360-Signature", signature)
.POST(HttpRequest.BodyPublishers.ofString(body, StandardCharsets.UTF_8))
.build();
HttpClient client = HttpClient.newHttpClient();
HttpResponse<String> response = client.send(
request, HttpResponse.BodyHandlers.ofString(StandardCharsets.UTF_8));
System.out.println(response.body());
}
}<?php
// apikey
$appid = "";
// salt
$secret = "";
$url = 'https://api.f.360.cn/ip';
$body = json_encode(['param' => '101.133.131.45,26.26.26.2'], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
$nonce = str_pad((string) random_int(0, 99999999), 8, "0", STR_PAD_LEFT);
$timestamp = (string) time();
$signature = substr(md5(md5($body) . $appid . $nonce . $timestamp . $secret), 16);
$ch = curl_init($url);
$options = [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-360-Key: {$appid}",
"X-360-Nonce: {$nonce}",
"X-360-Timestamp: {$timestamp}",
"X-360-Signature: {$signature}",
],
];
$options[CURLOPT_POST] = true;
$options[CURLOPT_POSTFIELDS] = $body;
curl_setopt_array($ch, $options);
$response = curl_exec($ch);
if ($response === false) {
echo curl_error($ch), PHP_EOL;
} else {
echo $response, PHP_EOL;
}
curl_close($ch);package main
import (
"bytes"
"crypto/md5"
"encoding/hex"
"fmt"
"io"
"math/rand"
"net/http"
"time"
)
func md5Hex(s string) string {
sum := md5.Sum([]byte(s))
return hex.EncodeToString(sum[:])
}
func main() {
appid := "" // apikey
secret := "" // salt
url := "https://api.f.360.cn/ip"
body := []byte(`{"param":"101.133.131.45,26.26.26.2"}`)
nonce := fmt.Sprintf("%08d", rand.Intn(100000000))
timestamp := fmt.Sprintf("%d", time.Now().Unix())
signature := md5Hex(md5Hex(string(body)) + appid + nonce + timestamp + secret)[16:]
req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(body))
if err != nil {
panic(err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("X-360-Key", appid)
req.Header.Set("X-360-Nonce", nonce)
req.Header.Set("X-360-Timestamp", timestamp)
req.Header.Set("X-360-Signature", signature)
resp, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
respBody, err := io.ReadAll(resp.Body)
if err != nil {
panic(err)
}
fmt.Println(string(respBody))
}响应示例
业务正常响应
{
"msg": "success",
"errno": 2000,
"from": "360威胁情报中心",
"result": {
"101.133.131.45": {
"tags": [
"SCANNER"
],
"summary": {
"confidence": "medium",
"risk": "high",
"ip": "101.133.131.45",
"geo_info": {
"province": "上海市",
"city": "上海市",
"country": "中国",
"asn": 37963,
"as": "CNNIC-ALIBABA-CN-NET-AP",
"operator": "阿里云"
},
"block_impact": -1,
"user_type": "",
"threat_type": [
"SCANNER"
],
"anonymous_type": "",
"network_type": [
"数据中心"
]
}
},
"26.26.26.2": {
"tags": [],
"summary": {
"confidence": "unknown",
"risk": "unknown",
"ip": "26.26.26.2",
"geo_info": {
"province": "俄亥俄州",
"city": "哥伦布",
"country": "美国",
"asn": 749,
"as": "DNIC-AS-00749",
"operator": "美国国防部网络信息中心"
},
"block_impact": -1,
"user_type": "",
"threat_type": [],
"anonymous_type": "",
"network_type": [
"已路由-未使用"
]
}
}
},
"invalid": []
}业务异常响应
{
"code": "GC00105",
"src": "apiholder",
"msg": "appid over field"
}