Host details

The host details endpoint allows you to get information about a specific IP.

GET /host/:ip

Parameters

name	placement	comment
accept	header	Must be set to `application/json`
api-key	header	Your API key
ip	url path	Must contain the IP

Curl example

1curl -H 'accept: application/json' "https://leakix.net/host/157.90.211.37"

Successful response

Receiving 200 means the request was successful.

The response will contain two field, Services and Leaks both being an array of l9events.

They can be null if no information was found.

  1{
  2  "Services": [
  3    {
  4      "event_type": "service",
  5      "event_source": "HttpPlugin",
  6      "event_pipeline": [
  7        "CertStream",
  8        "l9scan",
  9        "tcpid",
 10        "HttpPlugin"
 11      ],
 12      "event_fingerprint": "6d1f2e7ca5e9923a7028676ebb61f31f953e09cfa2883d1a5560acfc769e213c",
 13      "ip": "157.90.211.37",
 14      "host": "leakix.org",
 15      "reverse": "",
 16      "port": "443",
 17      "mac": "",
 18      "vendor": "",
 19      "transport": [
 20        "tcp",
 21        "tls",
 22        "http"
 23      ],
 24      "protocol": "https",
 25      "http": {
 26        "root": "",
 27        "url": "",
 28        "status": 0,
 29        "length": 0,
 30        "header": {
 31          "content-length": "169",
 32          "location": "https://leakix.net/",
 33          "server": "nginx/1.19.0"
 34        },
 35        "title": "301 Moved Permanently",
 36        "favicon_hash": ""
 37      },
 38      "summary": "Content-Length: 169\r\nContent-Type: text/html\r\nDate: Fri, 20 Jan 2023 11:25:44 GMT\r\nLocation: https://leakix.net/\r\nServer: nginx/1.19.0\r\nConnection: close\r\n\nPage title: 301 Moved Permanently\n\n<html>\r\n<head><title>301 Moved Permanently</title></head>\r\n<body>\r\n<center><h1>301 Moved Permanently</h1></center>\r\n<hr><center>nginx/1.19.0</center>\r\n</body>\r\n</html>\r\n",
 39      "time": "2023-01-20T11:25:41.135469289Z",
 40      "ssl": {
 41        "detected": false,
 42        "enabled": true,
 43        "jarm": "3fd21b20d3fd3fd21c3fd21b21b3fd02f2ce530964392ff49a9ba1e4931ee9",
 44        "cypher_suite": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
 45        "version": "TLSv1.2",
 46        "certificate": {
 47          "cn": "www.leakix.net",
 48          "domain": [
 49            "leakix.com",
 50            "leakix.org",
 51            "leaks.nobody.run",
 52            "www.leakix.com",
 53            "www.leakix.net",
 54            "www.leakix.org"
 55          ],
 56          "fingerprint": "408f41c899c9a75c6f71b70fec08f1d19f0c230ad55cb1ff8b69bf6bf1e7465d",
 57          "key_algo": "RSA",
 58          "key_size": 4096,
 59          "issuer_name": "R3",
 60          "not_before": "2023-01-20T10:23:55Z",
 61          "not_after": "2023-04-20T10:23:54Z",
 62          "valid": true
 63        }
 64      },
 65      "ssh": {
 66        "fingerprint": "",
 67        "version": 0,
 68        "banner": "",
 69        "motd": ""
 70      },
 71      "service": {
 72        "credentials": {
 73          "noauth": false,
 74          "username": "",
 75          "password": "",
 76          "key": "",
 77          "raw": null
 78        },
 79        "software": {
 80          "name": "nginx",
 81          "version": "1.19.0",
 82          "os": "",
 83          "modules": null,
 84          "fingerprint": ""
 85        }
 86      },
 87      "leak": {
 88        "stage": "",
 89        "type": "",
 90        "severity": "",
 91        "dataset": {
 92          "rows": 0,
 93          "files": 0,
 94          "size": 0,
 95          "collections": 0,
 96          "infected": false,
 97          "ransom_notes": null
 98        }
 99      },
100      "tags": [],
101      "geoip": {
102        "continent_name": "Europe",
103        "region_iso_code": "",
104        "city_name": "",
105        "country_iso_code": "DE",
106        "country_name": "Germany",
107        "region_name": "",
108        "location": {
109          "lat": 51.2993,
110          "lon": 9.491
111        }
112      },
113      "network": {
114        "organization_name": "Hetzner Online GmbH",
115        "asn": 24940,
116        "network": "157.90.0.0/16"
117      }
118    }
119  ],
120  "Leaks": null
121}

Rate limiting

All requests to LeakIX.net's API are limited at ~1 request per second.

If the limit is reached, the API will return a 429 http status code and a x-limited-for header.

The client MUST wait for the duration of x-limited-for before the next request.

1HTTP/1.1 429 Rate-limited
2Date: Mon, 27 Jul 2009 12:28:53 GMT
3x-limited-for: 344.24ms