IPWhois.net Blacklist

Community-driven IP threat intelligence. Search, check, and report malicious IP addresses.

186,817 IPs 8,265 reports Free API

Your API Key

Free tier: 1,000 checks + 1,000 reports per day.

or Register

GET Check IP 500 req/day free · 1,000 with API key

https://bl.ipwhois.net/api/check?ip=185.220.101.34

Response

{
  "ip": "185.220.101.34",
  "listed": true,
  "threat_type": "brute-force",
  "confidence": 48,
  "total_reports": 2,
  "first_seen": "2026-03-28 21:27:52",
  "last_seen": "2026-04-01 20:00:30",
  "source": "multiple",
  "num_distinct_users": 2,
  "reports": [
    {
      "threat_type": "brute-force",
      "message": "Fail2Ban SSH ban",
      "source": "fail2ban",
      "created_at": "2026-04-01 20:00:30",
      "reported_by": "mirko"
    }
  ],
  "rate_limit": {
    "limit": 1000,
    "remaining": 994
  }
}

Try it live

POST Report IP API key required

curl -X POST "https://bl.ipwhois.net/api/report?key=YOUR_KEY" \
  -d "ip=1.2.3.4" \
  -d "type=brute-force" \
  -d "message=SSH+brute+force"

Response

{
  "ok": true,
  "message": "IP reported successfully.",
  "reports_today": 5,
  "daily_limit": 1000
}

Types: brute-force spam ddos scan phishing malware bot web-attack other