v2.3.0 · Live

IPShield API

Real-time IP risk intelligence combining AbuseIPDB, Shodan, VirusTotal, threat feeds, WHOIS/RDAP, reverse DNS, blacklist management, incident case tracking, and on-demand active vulnerability scanning.

Data Sources

23+

Endpoints

v1/v2

Versioned

30/min

Rate Limit

🔑

Authentication

All endpoints require the x-api-key header except /health and /docs. Set your key once using the Authorize button or paste it into any Try It request.

Note: Active Scanning endpoints additionally require a key with the analyst or admin role — readonly keys receive 403.

x-api-key: ••••••••••••••••••••••••

Rate Limits

ENDPOINT	LIMIT	WINDOW
/api/*	200 requests	15 minutes
/api/score/*	30 requests	1 minute
/api/whois/*	20 requests	1 minute
/api/report/*	10 requests	1 minute
/api/v2/scan/*	5 requests	10 minutes

When rate limited you receive HTTP 429 with Retry-After header and countdown in seconds.