Developers can check API Specification here:
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/ip/119.76.134.71
import requests
import json
url = 'https://api.maltiverse.com/ip/119.76.134.71'
response = requests.get(url)
print(json.dumps(response.json(), indent=4, sort_keys=True))
$url = 'https://api.maltiverse.com/ip/119.76.134.71'
$headers = @{Authorization=("Bearer {0}" -f "<API_KEY>")}
$response = Invoke-RestMethod $url -Headers $headers
Write-Output $response
{
"address": "14th,27 th, floor ,Fortune Town\n1 Ratchadaphisek Road, Din Daeng\nBangkok 10400",
"as_name": "AS17552 True Internet Co., Ltd.",
"as_number": "17552",
"asn_cidr": "119.76.128.0/18",
"asn_country_code": "TH",
"asn_date": "2008-01-22 00:00:00",
"asn_registry": "apnic",
"blacklist": [
{
"count": 1,
"description": "HTTP Attacker",
"first_seen": "2021-11-02 00:47:55",
"labels": [
"malicious-activity"
],
"last_seen": "2021-11-03 01:54:44",
"source": "Blocklist.de"
},
{
"count": 1,
"description": "SSH Attacker",
"first_seen": "2021-05-04 22:52:58",
"labels": [
"malicious-activity"
],
"last_seen": "2021-05-05 02:31:51",
"source": "Blocklist.de"
},
{
"count": 1,
"description": "Bruteforce login attacker",
"first_seen": "2021-11-02 00:58:06",
"labels": [
"malicious-activity"
],
"last_seen": "2021-11-02 00:58:06",
"source": "Blocklist.de"
}
],
"cidr": [
"119.76.128.0/17"
],
"city": "Din Daeng",
"classification": "suspicious",
"country_code": "TH",
"creation_time": "2021-05-04 22:52:58",
"email": [
"ipadmin@trueinternet.co.th",
"abuse@trueinternet.co.th"
],
"ip_addr": "119.76.134.71",
"ip_version": 4,
"is_cdn": false,
"is_cnc": false,
"is_distributing_malware": false,
"is_hosting": false,
"is_iot_threat": false,
"is_known_attacker": false,
"is_known_scanner": false,
"is_mining_pool": false,
"is_open_proxy": false,
"is_sinkhole": false,
"is_tor_node": false,
"is_vpn_node": false,
"location": {
"lat": 13.7620637,
"lon": 100.5577407
},
"modification_time": "2025-06-27 22:55:18",
"number_of_blacklisted_domains_resolving": 0,
"number_of_domains_resolving": 0,
"number_of_offline_malicious_urls_allocated": 0,
"number_of_online_malicious_urls_allocated": 0,
"number_of_whitelisted_domains_resolving": 0,
"postal_code": "10400",
"registrant_name": "True Internet Co., Ltd.",
"scoring_executed_time": "2025-06-27 22:55:18",
"tag": [
"apache",
"ddos",
"rfi",
"attacker",
"login",
"bruteforce",
"bot",
"joomla",
"wordpress",
"ssh"
],
"type": "ip"
}