Get IP Address Report

Get an IP address report.
External Documentation
To learn more, visit the VirusTotal documentation.
Parameters

Parameter	Description
IP	IP address.
Example Output

{
    "data": {
        "attributes": {
            "regional_internet_registry": "ARIN",
            "jarm": "29d3fd00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
            "network": "8.8.8.0/24",
            "last_https_certificate_date": 1668678815,
            "tags": [],
            "crowdsourced_context": [
                {
                    "source": "benkow.cc",
                    "timestamp": 1638576000,
                    "detail": "A domain seen in a CnC panel URL for the SmokeLoader malware resolved to this IP address",
                    "severity": "high",
                    "title": "CnC Panel"
                }
            ],
            "country": "US",
            "last_analysis_date": 1668678485,
            "as_owner": "GOOGLE",
            "last_analysis_stats": {
                "harmless": 79,
                "malicious": 1,
                "suspicious": 0,
                "undetected": 16,
                "timeout": 0
            },
            "asn": 15169,
            "whois_date": 1668539313,
            "last_analysis_results": {
                "Bkav": {
                    "category": "undetected",
                    "result": "unrated",
                    "method": "blacklist",
                    "engine_name": "Bkav"
                },
                "CMC Threat Intelligence": {
                    "category": "harmless",
                    "result": "clean",
                    "method": "blacklist",
                    "engine_name": "CMC Threat Intelligence"
                }
            },
            "reputation": 475,
            "last_modification_date": 1668680463,
            "total_votes": {
                "harmless": 134,
                "malicious": 21
            },
            "last_https_certificate": {
                "public_key": {
                    "rsa": {
                        "key_size": 2048,
                        "modulus": "00c0c848d9ed9191a6047cd149699696b05304927afab55d9f701c6836fe4ba74c9071955644836c2c7bfdcae41dbffc67f1bb515182d120ec9649017aa017d158daeda26463dd1901b509fc9b3fcc28276185420900e2d00c3b95c4329c078780b9b8985b9a65c4d50839e3f8841aff6704fe67530d4b44aad3e71de12c073d31b13f4a3981499d1f4c90d6eceee4a424edf00d9e63dbd6906fb939f1a35474d4d55c91d61829e53494fb019c44cfd6c3e3c5af556bb216c6d5770df9721e1562c8060b5489f7146278ae151406106790d72e2e91a2a8a77ed08d832469e48a325a84b9bc024cd3c71eacbaced8ccdd493c3248dda28f98d929c6225418fc2e0d",
                        "exponent": "010001"
                    },
                    "algorithm": "RSA"
                },
                "thumbprint_sha256": "1156228b9948f1d24462e11b9e307b3702f9d797756bb756b8f6c16d8eac42e4",
                "tags": [],
                "signature_algorithm": "sha256RSA",
                "subject": {
                    "CN": "dns.google"
                },
                "validity": {
                    "not_after": "2023-01-25 13:45:41",
                    "not_before": "2022-11-02 13:45:42"
                },
                "version": "V3",
                "extensions": {
                    "certificate_policies": [
                        "2.23.140.1.2.1",
                        "1.3.6.1.4.1.11129.2.5.3"
                    ],
                    "extended_key_usage": [
                        "serverAuth"
                    ],
                    "tags": [],
                    "subject_alternative_name": [
                        "dns.google",
                        "dns.google.com",
                        "*.dns.google.com",
                        "8888.google",
                        "dns64.dns.google",
                        "8.8.8.8",
                        "8.8.4.4",
                        "2001:4860:4860:0:0:0:0:8888",
                        "2001:4860:4860:0:0:0:0:8844",
                        "2001:4860:4860:0:0:0:0:6464",
                        "2001:4860:4860:0:0:0:0:64"
                    ],
                    "authority_key_identifier": {
                        "keyid": "8a747faf85cdee95cd3d9cd0e24614f371351d27"
                    },
                    "ca_information_access": {
                        "CA Issuers": "http://pki.goog/repo/certs/gts1c3.der",
                        "OCSP": "http://ocsp.pki.goog/gts1c3"
                    },
                    "subject_key_identifier": "39d6388823376e9e036b2e98567bce47dbfa2b54",
                    "crl_distribution_points": [
                        "http://crls.pki.goog/gts1c3/QqFxbi9M48c.crl"
                    ],
                    "key_usage": [
                        "ff"
                    ],
                    "1.3.6.1.4.1.11129.2.4.2": "0481f300f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb",
                    "CA": true
                },
                "cert_signature": {
                    "signature_algorithm": "sha256RSA",
                    "signature": "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"
                },
                "serial_number": "0ee14fe40df476a00a744dd13bf4e948",
                "thumbprint": "366b8c09c47f5b80471b1b188ce9e56a471bfafb",
                "issuer": {
                    "C": "US",
                    "CN": "GTS CA 1C3",
                    "O": "Google Trust Services LLC"
                },
                "size": 1511
            },
            "continent": "NA",
            "whois": "No match found for dns.google.\n"
        },
        "type": "ip_address",
        "id": "8.8.8.8",
        "links": {
            "self": "https://www.virustotal.com/api/v3/ip_addresses/8.8.8.8"
        }
    }
}
Workflow Library Example

Get Ip Address Report with Virustotal and Send Results Via Email
Preview this Workflow on desktop
Get IP Address Report

Parameters​

Example Output​

Workflow Library Example​

Parameters

Example Output

Workflow Library Example
