Developers can check API Specification here:
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/ip/172.93.211.144
import requests
import json
url = 'https://api.maltiverse.com/ip/172.93.211.144'
response = requests.get(url)
print(json.dumps(response.json(), indent=4, sort_keys=True))
$url = 'https://api.maltiverse.com/ip/172.93.211.144'
$headers = @{Authorization=("Bearer {0}" -f "<API_KEY>")}
$response = Invoke-RestMethod $url -Headers $headers
Write-Output $response
{
"blacklist": [
{
"count": 37,
"description": "Proxy",
"first_seen": "2023-01-02 07:38:39",
"labels": [
"anonymization"
],
"last_seen": "2025-07-22 09:14:11",
"ref": [
1,
21745
],
"source": "FireHOL"
},
{
"count": 1,
"description": "Anonymizer",
"first_seen": "2020-11-22 01:52:58",
"labels": [
"anonymizer"
],
"last_seen": "2021-05-19 12:20:31",
"source": "Maltiverse Research Team"
}
],
"classification": "suspicious",
"creation_time": "2020-11-22 01:52:58",
"ip_addr": "172.93.211.144",
"ip_version": 4,
"is_cdn": false,
"is_cnc": false,
"is_distributing_malware": false,
"is_hosting": false,
"is_iot_threat": false,
"is_known_attacker": false,
"is_known_scanner": false,
"is_mining_pool": false,
"is_open_proxy": false,
"is_sinkhole": false,
"is_tor_node": false,
"is_vpn_node": false,
"modification_time": "2025-07-22 09:14:11",
"number_of_blacklisted_domains_resolving": 0,
"number_of_domains_resolving": 0,
"number_of_offline_malicious_urls_allocated": 0,
"number_of_online_malicious_urls_allocated": 0,
"number_of_whitelisted_domains_resolving": 0,
"tag": [
"anonymization",
"anonymizer"
],
"type": "ip"
}