309 Services from ip.intel.rallylive.ca

Checks whether a given IPv4 address is listed on the Spamhaus DROP blocklist (drop.spamhaus.org) via a DNSBL query using Cloudflare DoH, returning listed status and reason codes.

Checks whether a given IPv4 address is listed on the Backscatterer DNSBL (ips.backscatterer.org) and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the Barracuda reputation blocklist (b.barracudacentral.org) via a DNS-based lookup and returns listed/not-listed with return codes and reason text.

Checks whether a given IPv4 address is listed on the Composite Blocking List (cbl.abuseat.org) via DNSBL lookup, returning listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the Spamhaus DBL DNSBL (dbl.spamhaus.org) and returns listing status, return codes, and reason text.

Checks whether an IPv4 address is listed on DroneBL (dnsbl.dronebl.org) and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the NixSpam DNSBL (ix.dnsbl.manitu.net) and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the PSBL (psbl.surriel.com) DNS-based blacklist and returns the listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the s5h blocklist (all.s5h.net) via a DNSBL query using Cloudflare DoH, returning listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the SORBS DNSBL (dnsbl.sorbs.net) and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the SORBS DUL (Dial-Up List) DNS blocklist at dul.dnsbl.sorbs.net and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on SpamCop's blocklist (bl.spamcop.net) via a DNSBL DNS query, returning listed status, return codes, and reason text.

Monitors whether an IPv4 address is listed on SpamCop's DNSBL and alerts when that status changes between checks.

Checks whether a given IPv4 address is listed on the Spamhaus PBL (Policy Block List) via DNSBL lookup, returning listed status, return codes, and reason text.

Checks whether an IPv4 address is listed on the Spamhaus SBL (Spam Block List) via DNSBL query and returns the listed status, return codes, and reason text.

Checks whether an IPv4 address is listed on the Spamhaus XBL (Exploits Block List) DNSBL and returns listed status, return codes, and reason text

Checks whether a given IPv4 address is listed on the Spamhaus ZEN DNSBL and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the SpamRATS NOPTR blacklist (noptr.spamrats.com) via DNS-based lookup and returns listed status, return codes, and reason text.

Checks whether an IPv4 address is listed as a Tor exit node on the torexit.dan.me.uk DNSBL and returns the listed status, return codes, and reason text.

Checks whether an IPv4 address is listed on the UCEPROTECT Level 1 DNSBL (dnsbl-1.uceprotect.net) and returns the listing status, return codes, and reason text.

Checks whether TCP port 443 (HTTPS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network, returning status and connect time.

Checks whether TCP port 465 (SMTPS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Performs a reverse DNS (PTR) lookup for an IPv4 address using DNSPod (doh.pub) and returns hostname(s), TTL, response code, and forward-confirmed reverse DNS (FCrDNS) status.

Performs a reverse DNS (PTR) lookup for an IPv4 address using the DNS.SB resolver, returning hostnames, TTL, response code, and forward-confirmed reverse DNS (FCrDNS) status.

Checks whether a given IPv4 address is announced by Alibaba's autonomous systems by resolving its origin ASN via Team Cymru DNS and comparing against Alibaba's known ASNs (AS45102, AS37963, AS24429).

Checks whether TCP port 11211 (Memcached) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether a given IPv4 address is listed on the Mailspike blacklist (bl.mailspike.net) and returns the listing status, return codes, and reason text.

Checks whether an IPv4 address is listed on the SpamRATS blacklist (spam.spamrats.com) via DNSBL lookup and returns listed status with return codes and reason text.

Checks whether TCP port 139 (NetBIOS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 445 (SMB/Windows file sharing) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 873 (rsync) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Performs a reverse DNS (PTR) lookup for an IPv4 address using NextDNS as the resolver, returning hostnames, TTL, response code, and forward-confirmed reverse DNS (FCrDNS) status.

Checks whether an IPv4 address is listed on the EFnet RBL (rbl.efnetrbl.org) DNS-based blacklist, returning listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the SORBS Web DNSBL (web.dnsbl.sorbs.net) and returns listed status, return codes, and reason text.

Monitors whether an IP address is listed on the Spamhaus SBL (Spam Block List) and returns change detection results compared to the previous check.

Checks whether an IPv4 address is listed on the UCEPROTECT Level 3 DNSBL (dnsbl-3.uceprotect.net) and returns the listing status, return codes, and reason text.

Checks whether TCP port 22 (SSH) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 389 (LDAP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 502 (Modbus) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 636 (LDAPS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Performs a reverse DNS (PTR) lookup for an IPv4 address using CleanBrowsing's security-filtered resolver, returning hostname(s), TTL, response code, and forward-confirmed reverse DNS (FCrDNS) status.

Performs a reverse DNS (PTR) lookup for an IPv4 address using Mullvad DNS and verifies forward-confirmed reverse DNS (FCrDNS)

Checks whether an IPv4 address is listed on the 0spam DNSBL (bl.0spam.org) and returns listed status, return codes, and reason text.

Monitors whether an IP address is listed on the 0spam DNSBL and alerts when the listing status changes between checks.

Checks if an IP is listed on Abuse.ch Spamhaus DROP and returns whether the listing status has changed since the last call, with before/after field diffs.

Monitors whether an IPv4 address is listed on the Backscatterer DNSBL and alerts on changes compared to the previous check.

Checks up to 20 IP addresses at once against the Barracuda blacklist/reputation database, returning concurrent results in input order with per-item error handling.

Monitors whether an IP address is listed on the Barracuda blacklist and alerts when the status changes between checks.

Checks whether a given IPv4 address is listed on bl.blocklist.de by performing a DNSBL query via Cloudflare DoH and returns listed status, return codes, and reason text.

Monitors whether a given IP address is listed on Blocklist.de, returning the current status, whether it changed since the last check, and which fields changed with before/after values.

Monitors whether an IP address is listed on the Composite Blocking List (CBL) and returns change detection results compared to the previous check.

Monitors whether an IP address is listed on the DBL Spamhaus blacklist and alerts on changes compared to the previous check.

Checks up to 20 IPv4 addresses at once against the DroneBL DNSBL blacklist, returning per-IP results with error handling and a failure count.

Checks if an IP is listed on the DroneBL blacklist, compares against the previous result (kept 90 days), and returns whether the listing status has changed along with before/after field diffs.

Monitors whether a given IP is listed on the EFnet Real-time Blacklist (RBL) and returns a change-diff comparing the current result against the last check stored for that IP.

Checks whether a given IPv4 address is listed on the HostKarma Black DNSBL (hostkarma.junkemailfilter.com) and returns listed status, return codes, and reason text.

Checks whether a given IPv4 address is listed on the InterServer DNS blacklist (rbl.interserver.net) and returns the listing status, return codes, and reason text.

Monitors whether an IP is listed on the Interserver blacklist and returns whether that status has changed since your last check, with before/after field diffs.

Checks whether a given IPv4 address is listed on the Invaluement SIP spam blacklist (sip.invaluement.com) via DNSBL lookup using Cloudflare DoH, returning listed status, return codes, and reason text.

Checks whether an IPv4 address is listed on the Lashback Unsubscribe Blacklist (ubl.unsubscore.com) via a DNSBL lookup using Cloudflare DoH, returning listed status, return codes, and reason text.

Checks if an IP is listed on the LashBack DNSBL, compares the result to the previous check (stored 90 days), and returns whether the status changed, which fields changed, and when it was last seen.

Monitors whether an IPv4 address is listed on the Mailspike DNSBL and alerts when the listing status changes between checks.

Monitors whether an IPv4 address is listed on the NixSpam DNSBL and alerts when its blacklist status changes between checks.

Checks whether a given IPv4 address is listed on the NordSpam blacklist (bl.nordspam.com) via DNSBL lookup and returns listed status with return codes and reason text.

Change-watch endpoint that checks if an IP is listed on the NordSpam DNSBL, compares with the previous result, and returns whether the listing status changed.

Bulk-checks up to 20 IPv4 addresses against the PSBL (Passive Spam Block List) DNSBL in a single concurrent call, returning ordered results with per-item error fields and a failure count.

Checks whether an IPv4 address is listed on the rbl.jp DNSBL (all.rbl.jp) and returns listed status, return codes, and reason text

Monitors whether an IP address is listed on the RBL-JP blacklist and returns whether the status has changed since the last check, with before/after field diffs.

Checks up to 20 IPv4 addresses against the SORBS DNSBL blacklist in a single concurrent batch call, returning per-item results in input order with error fields and a failure count.

Monitors whether an IP address is listed on the SORBS DUL (Dial-Up List) blacklist and alerts when the listing status changes between checks.

Checks whether a given IPv4 address is listed on the SORBS spam blacklist (spam.dnsbl.sorbs.net) via DNS-based blocklist (DNSBL) lookup using Cloudflare DoH.

Bulk checks up to 20 IPv4 addresses against the SORBS SPAM DNSBL in a single concurrent call, returning per-item results in input order with error fields and a failure count.

Checks if an IP is listed on SORBS Spam blacklist, compares with the previous result, and returns whether the status has changed.

Monitors whether an IP address is listed on SORBS (Spam and Open Relay Blocking System) and alerts you when that status changes between calls.

Checks if an IP is listed on the SORBS Web blacklist and returns whether the result has changed since the last check, with before/after field diffs.

Checks up to 20 IP addresses concurrently against the SpamCop blacklist in a single batch call, returning per-item results in input order with error flags.

Checks whether an IPv4 address is listed on the SpamEatingMonkey blocklist (bl.spameatingmonkey.net) via DNS-based blackhole list (DNSBL) query and returns listed status with return codes and reason text.

Bulk-checks up to 20 IP addresses against the Spamhaus Policy Block List (PBL) in a single concurrent call, returning ordered results with per-item error fields and a failure count.

Monitors whether an IP address is listed on the Spamhaus Policy Block List (PBL) and alerts when the listing status changes between checks.

Bulk-checks up to 20 IPv4 addresses against the Spamhaus Exploits Block List (XBL) DNSBL in a single concurrent call, returning per-item results in input order.

Monitors whether a given IP address is listed on the Spamhaus XBL blacklist and returns whether the status has changed since the last check.

Checks up to 20 IP addresses against the Spamhaus ZEN blacklist in a single concurrent batch call, returning per-item results in input order with error fields and a failure count.

Monitors whether an IP is listed on Spamhaus ZEN DNSBL and alerts when the listing status changes compared to the previous check.

Bulk-checks up to 20 IPv4 addresses against the SpamRATS DNSBL in one concurrent call, returning per-item blacklist status and a failure count.

Checks whether a given IPv4 address is listed on the SpamRATS DYNA blacklist (dyna.spamrats.com) via DNS-based blackhole list query

Bulk-checks up to 20 IPv4 addresses against the SpamRats DYNA DNSBL in a single concurrent call, returning per-IP listing results in input order with per-item error fields and a failure count.

Monitors whether an IP address is listed on the SpamRats DYNA blacklist and returns whether the status has changed since the last check.

Bulk-checks up to 20 IPv4 addresses against the SpamRATS NOPTR DNSBL in a single concurrent call, returning per-IP listing status and a failure count.

Monitors whether an IP address is listed on the SpamRATS DNSBL and alerts when the listing status changes compared to a previous check.

Checks whether an IPv4 address is listed on the SURBL multi blocklist (multi.surbl.org) via DNS-based lookup, returning listed status, return codes, and reason text.

Monitors whether an IP address is listed on the Dan.me.uk Tor exit node list and returns whether that status has changed since the last check.

Checks whether a given IPv4 address is listed on the Truncate DNSBL (truncate.gbudb.net) via Cloudflare DoH and returns listed status, return codes, and reason text.

Checks up to 20 IP addresses concurrently against the UCEPROTECT Level 1 spam blacklist and returns per-item results in input order with error fields and a failure count.

Checks if an IP is listed on the UCEPROTECT-1 blacklist and returns whether the status has changed since the last call, with before/after field diffs.

Checks whether a given IPv4 address is listed on the UCEPROTECT Level 2 DNSBL (dnsbl-2.uceprotect.net) and returns the listing status, return codes, and reason text if available.

Bulk-checks up to 20 IP addresses against the UCEPROTECT Level 2 blacklist in a single concurrent call, returning per-item results in input order.

Monitors whether an IPv4 address is listed on UCEProtect Level 3 (dnsbl-3.uceprotect.net) and returns the current status plus a change diff compared to the previous check.

Checks whether an IPv4 address is listed on the URIBL Black DNS blocklist (black.uribl.com) and returns the listing status, return codes, and reason text.

Monitors whether an IP address is listed on the URIBL Black blacklist and reports if that status has changed since the last check.

Checks whether a given IPv4 address is listed on the WPBL DNS blacklist (db.wpbl.info) and returns the listing status, return codes, and reason text.

Monitors whether an IPv4 address is listed on the WPBL blacklist and returns change detection results compared to the previous check.

Checks up to 20 IP addresses in a single concurrent batch to determine whether each belongs to Akamai's network infrastructure.

Monitors whether a given IP address belongs to Apple and alerts on changes compared to the previous check, returning current status, change flag, and diff with before/after values.

Bulk-checks up to 20 IP addresses in a single call to determine whether each belongs to Amazon Web Services (AWS) infrastructure, returning results in input order with per-item errors and a failure count.

Checks up to 20 IP addresses concurrently to determine if each belongs to Microsoft Azure's infrastructure, returning ordered results with per-item error fields and a failure count.

Monitors whether an IP address belongs to Backblaze and alerts when that classification changes between checks.

Checks up to 20 IP addresses in one concurrent batch to determine whether each belongs to Bunny CDN's infrastructure, returning results in input order with per-item error fields and a failure count.

Monitors whether an IP address belongs to Bunny CDN, returning the current result plus a change flag and before/after diff compared to the previous check.

Monitors whether an IP address belongs to CDN77, alerting you when that classification changes between checks.

Checks up to 20 IP addresses in a single concurrent batch to determine whether each belongs to Cloudflare's infrastructure, returning ordered results with per-item error fields and a failure count.

Monitors whether an IP address belongs to Cogeco, alerting you when the status changes between checks.

Checks up to 20 IPv4 addresses concurrently to determine if each is announced by DreamHost, returning ordered results with per-item errors and a failure count.

Monitors whether an IPv4 address belongs to GitHub's network and alerts when that status changes between calls.

Checks up to 20 IP addresses at once to determine if each belongs to GoDaddy's infrastructure, returning results in input order with per-item error fields and a failure count.

Checks up to 20 IP addresses in a single call to determine whether each belongs to Google Cloud infrastructure, returning results in input order with per-item error fields.

Checks up to 20 IPv4 addresses in a single concurrent batch call to determine whether each is announced by Heroku's ASN, returning ordered results with per-item errors and a failure count.

Change-detection watch that checks whether an IP address belongs to Heroku, compares the result to the previous check (retained 90 days), and returns what changed with before/after values.

Checks up to 20 IP addresses in a single call to determine whether each belongs to Hostinger's network, returning results in input order with per-item errors and a failure count.

Watches an IP address for changes in its Imperva classification, returning the current result, whether it changed, which fields changed, and when it was last seen.

Performs a pure bitmask check to determine whether an IPv4 address falls within Bell Canada's 70.24.0.0/13 CIDR block, returning true/false along with range boundaries and size.

Checks whether an IP address belongs to Microsoft Corp, compares the result to the previous check (retained 90 days), and returns whether the classification changed along with before/after field diffs.

Monitors whether a given IP address belongs to Mullvad VPN, comparing current results against the previous check and returning what changed.

Checks whether an IP address belongs to Netflix infrastructure and returns both the current result and a change-detection diff compared to the previous call for that IP.

Monitors whether a given IP address belongs to Netlify's infrastructure and alerts when that status changes between calls.

Checks whether an IP address belongs to NordVPN infrastructure, compares the result against the previous check (retained 90 days), and returns whether anything changed along with before/after field diffs.

Monitors whether an IP address belongs to Oracle Dyn, returning the current result, whether it changed since last check, and what fields changed with before/after values.

Monitors whether a given IP address belongs to ProtonVPN and alerts when that classification changes, returning the current result, a changed flag, field-level before/after diffs, and last-seen timestamp.

Bulk-checks up to 20 IP addresses at once to determine if each is associated with the Render hosting/cloud platform, returning concurrent results in input order with per-item errors and a failure count.

Monitors whether an IP address belongs to Render's infrastructure, returning change detection with before/after field diffs and last-seen timestamp.

Change watch that checks if an IPv4 address belongs to Rogers, compares against the previous result, and returns what changed and when.

Monitors whether an IP address belongs to Shaw Communications and alerts when that classification changes, returning a diff of before/after values.

Bulk-checks up to 20 IPv4 addresses concurrently to determine if each is announced by SiteGround's ASN, returning ordered results with per-item error fields and a failure count.

Monitors whether a given IP address belongs to StackPath's network, detecting and reporting changes since the last check with before/after diff and timestamp.

Checks up to 20 IP addresses in one call to determine if each is announced by Tencent, returning per-item results with error fields and a failure count.

Monitors whether an IP address belongs to Twitter/X and alerts when that classification changes between calls.

Change-watch endpoint that checks if an IP belongs to Verizon, compares the result against the previous call (retained 90 days), and returns whether the answer changed along with before/after field diffs.

Checks up to 20 IP addresses in a single call to determine whether each belongs to Vultr's infrastructure, returning results in input order with per-item error fields.

Checks up to 20 IP addresses concurrently to determine if each belongs to Wasabi cloud storage infrastructure, returning ordered results with per-item errors and a failure count.

Monitors whether a given IP address belongs to Zoom and alerts when that status changes, comparing against the last result stored for up to 90 days.

Checks whether TCP port 102 (S7comm/Siemens industrial protocol) is open, closed, or filtered on a given host, as observed from Cloudflare's edge network.

Checks whether TCP port 110 (POP3) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 111 (RPC/portmapper) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Monitors whether TCP port 111 (portmapper/rpcbind) is open on a host, returning the current status plus a change-detection diff against the last call for that host within 90 days.

Checks whether TCP port 123 (NTP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 135 (MS-RPC) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Monitors whether TCP port 135 (MSRPC/DCE) is open on a host and returns whether the result has changed since the last check.

Checks whether TCP port 137 (NetBIOS-NS) is open, closed, or filtered on a given host, returning the connection result and connect time from Cloudflare's edge.

Checks whether TCP port 143 (IMAP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 161 (SNMP) is open, closed, or filtered on a given host by probing from Cloudflare's edge network

Bulk-checks whether TCP port 161 (SNMP) is open on up to 20 hosts in a single concurrent call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 179 (BGP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 179 (BGP) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 19 (Chargen) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 21 (FTP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 22 (SSH) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Monitors whether TCP port 22 (SSH) is open on a host and returns whether the status has changed since the last check, with before/after diff values.

Checks whether TCP port 23 (Telnet) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 25 (SMTP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 25 (SMTP) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Monitors whether port 25 (SMTP) is open on a given IP/host, returning the current status, whether it changed since the last check, and a diff of changed fields.

Checks whether TCP port 389 (LDAP) is open on up to 20 hosts concurrently in a single API call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 445 (SMB/CIFS) is open on up to 20 hosts concurrently in a single batch call, returning results in input order with per-item errors and a failure count.

Checks whether TCP port 464 (kpasswd/Kerberos password change) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 464 is open on a host, compares the result with the previous check (stored up to 90 days), and returns the current state plus whether it changed and what changed.

Checks whether TCP port 465 (SMTPS) is open on up to 20 hosts concurrently in a single API call, returning ordered results with per-item errors and a failure count.

Checks whether TCP port 500 (IKE/IPsec) is open, closed, or filtered on a given host by probing from Cloudflare's edge network

Bulk-checks whether TCP/UDP port 500 (IKE/IPsec) is open on up to 20 hosts in a single concurrent API call, returning results in input order with per-item error fields and a failure count.

Checks whether TCP port 512 (rexec) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 513 (rlogin) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 513 (rlogin/rwho) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 514 (syslog) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 515 (LPD/Line Printer Daemon) is open, closed, or filtered on a given host, reporting connect time from Cloudflare's edge.

Checks whether TCP port 53 (DNS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 548 (Apple Filing Protocol / AFP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 554 (RTSP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network

Checks whether TCP port 587 (SMTP Submission) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 631 (IPP - Internet Printing Protocol) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Monitors TCP port 636 (LDAPS) on a host for open/closed state changes, returning the current result and a diff against the previous check stored for 90 days.

Checks whether TCP port 69 (TFTP) is open, closed, or filtered on a given host, reporting connection time and Cloudflare-edge caveats.

Checks whether TCP port 7 (Echo) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 80 (HTTP) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network and reporting the result with connect time.

Monitors whether TCP port 80 (HTTP) is open on a host and returns a change diff compared to the previous check, alerting when the status changes.

Bulk-checks whether TCP port 873 (rsync) is open on up to 20 hosts concurrently, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 88 (Kerberos) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 993 (IMAPS) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 993 (IMAPS) is open on up to 20 hosts concurrently in a single API call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 995 (POP3S) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

Checks whether TCP port 995 (POP3S) is open on up to 20 hosts concurrently in a single batch call, returning per-item results in input order with error details and a failure count.

Monitors reverse DNS (PTR) lookups for an IP address using AdGuard, detecting and reporting changes compared to the previous check.

Monitors an IP's reverse DNS (PTR) record as resolved via CleanBrowsing, detects changes between calls, and returns current value, changed flag, before/after diffs, and last-seen timestamp.

Monitors reverse DNS (PTR) lookups for an IP address via Cloudflare, detecting and reporting changes compared to the previous call, with before/after field diffs.

Monitors reverse DNS (PTR) records for an IP address using DNSPod and alerts when the result changes compared to a previous check.

Monitors reverse DNS (PTR record) lookups for an IP address via DNS.SB and alerts when the result changes compared to the previous check.

Monitors reverse DNS (PTR record) lookups via Google for a given IP, returning the current result, whether it changed, and a before/after diff compared to the previous call.

Monitors the reverse DNS (PTR) record of an IP address via NextDNS, detecting and reporting any changes since the last check.

Monitors reverse DNS (PTR) records for an IP via OpenDNS, detects changes by comparing against the previous result (retained 90 days), and returns current value, changed flag, and field-level diffs.

Monitors whether a given IP address belongs to Bell Canada and alerts when that classification changes between checks.

Checks up to 20 IP addresses in a single concurrent call to determine if each is listed on the Spamhaus SBL (Spam Block List), returning results in input order with per-item errors and a failure count.

Monitors an IP address for changes in its SURBL Multi blacklist status, returning current result, change flag, before/after diffs, and last-seen timestamp.

Monitors whether an IP address belongs to Gcore and alerts when that status changes, comparing against the previous result stored for up to 90 days.

Bulk-checks up to 20 IPv4 addresses against the Composite Blocking List (CBL) DNSBL in a single concurrent call, returning per-item results in input order with error fields and a failure count.

Checks if an IP is listed on the PSBL (Passive Spam Block List) and returns whether the result has changed since the last check, with before/after field diffs and last-seen timestamp.

Monitors whether an IP address is listed on the S5H DNSBL and alerts when the listing status changes between calls.

Checks up to 20 IP addresses in a single call to determine if each belongs to Backblaze's infrastructure, returning results in input order with per-item error fields.

Bulk-checks up to 20 IP addresses at once to determine whether each belongs to Contabo's infrastructure, returning results in input order with per-item errors and a failure count.

Checks up to 20 IP addresses concurrently to determine if each belongs to Hetzner's network, returning results in input order with per-item error fields and a failure count.

Checks up to 20 IP addresses in a single concurrent batch to determine whether each belongs to LeaseWeb's network infrastructure.

Monitors whether a given IP address belongs to Starlink's network, returning a change-diff with before/after values and a changed flag compared to the previous call.

Checks up to 20 IP addresses in one call to determine whether each belongs to WP Engine's infrastructure, returning ordered results with per-item errors and a failure count.

Checks if port 102 is open on a host and returns a change-detected result comparing against the previous check (retained 90 days), including changed flag and before/after field diffs.

Checks whether TCP port 1080 (SOCKS proxy) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 139 (NetBIOS/SMB) is open on up to 20 hosts in a single concurrent batch call, returning per-host results in input order with error fields and a failure count.

Monitors whether TCP port 139 (NetBIOS Session Service) is open on a host and returns whether the status has changed since the last check, with before/after diff and timestamp.

Monitors whether TCP port 143 (IMAP) is open on a host and returns change detection data comparing the current result to the previous check.

Monitors whether TCP port 1080 (SOCKS proxy) is open on a host and returns whether the status has changed since the last check.

Monitors reverse DNS (PTR record) lookups via Mullvad for a given IP, detecting and reporting changes compared to the previous check result stored up to 90 days.

Returns the name, country, RIR, and announced IPv4/IPv6 prefix counts and samples for Autonomous System AS1273 (Vodafone)

Monitors whether a given IP address is listed on the HostKarma Black blacklist and returns whether that status has changed since the last check, along with before/after field diffs and last-seen timestamp.

Monitors whether an IP address is listed on the IVMSIP blacklist and alerts when that listing status changes between checks.

Batch checks up to 20 IPv4 addresses against the Mailspike DNSBL blacklist in a single concurrent call, returning per-item results in input order.

Checks up to 20 IPv4 addresses in one call against the SORBS DUL (Dial-Up List) DNSBL and returns ordered results with per-item error fields and a failure count.

Bulk-checks up to 20 IPv4 addresses against the SORBS Web DNSBL in a single concurrent call, returning per-item results in input order with error fields and a failure count.

Monitors whether an IP address is listed on the SpamEatingMonkey DNSBL and alerts when the listing status changes between checks.

Monitors whether a given IP address is listed on the SpamRATS NoPtr DNS blacklist and returns whether that status has changed since the last check.

Monitors whether an IP is listed on the UCEPROTECT Level 2 blacklist and returns change detection results compared to the previous check.

Calculates the /64 network prefix for a given IPv6 address using pure local computation — no network lookups involved.

Checks whether an IP address belongs to Comcast and returns the current result along with a change diff compared to the previous check (retained 90 days)

Checks up to 20 IP addresses in a single call to determine whether each belongs to DigitalOcean's infrastructure, returning results in input order with per-item errors and a failure count.

Checks up to 20 IP addresses at once to determine if each belongs to Equinix infrastructure, returning results in input order with per-item error handling.

Checks up to 20 IP addresses in one call to determine whether each belongs to Fly.io infrastructure, returning results in input order with per-item errors and a failure count.

Monitors whether a given IP address belongs to Fly.io infrastructure and alerts when that status changes between calls.

Bulk-checks up to 20 IP addresses at once to determine whether each belongs to GitHub's infrastructure, returning concurrent results in input order with per-item error details.

Checks whether an IP address belongs to GitLab, compares the result against the previous check (retained 90 days), and returns what changed and when.

Checks up to 20 IPv4 addresses in a single call to determine whether each is announced by HostGator's ASN, returning results in input order with per-item error fields and a failure count.

Checks up to 20 IP addresses concurrently to determine if each belongs to IBM's infrastructure, returning results in input order with per-item errors and a failure count.

Monitors whether an IP address belongs to Mimecast, returning the current result, whether it changed since the last check, which fields changed with before/after values, and when it was last seen.

Bulk-checks up to 20 IP addresses in a single call to determine if each belongs to Netlify's infrastructure, returning per-item results in input order with error tracking.

Checks up to 20 IP addresses in a single concurrent batch to determine if each is an Oracle Corporation IP, returning per-item results in input order with error details and a failure count.

Monitors whether an IP address belongs to Orange (telecom) and alerts when that status changes, returning current result, change flag, diff details, and last-seen timestamp.

Bulk-checks up to 20 IP addresses concurrently to determine if each belongs to OVH hosting infrastructure, returning results in input order with per-item error fields.

Checks up to 20 IP addresses in a single concurrent batch to determine whether each belongs to Rackspace infrastructure, returning per-item results in input order with error fields and a failure count.

Bulk-checks up to 20 IP addresses concurrently to determine if each belongs to Railway's infrastructure, returning ordered results with per-item error fields and a failure count.

Monitors whether an IP address belongs to Railway's infrastructure and alerts when that classification changes between checks.

Checks up to 20 IP addresses concurrently to determine whether each belongs to Scaleway's infrastructure, returning ordered results with per-item error fields and a failure count.

Monitors whether a given IP address belongs to Telus, alerting you when that status changes between calls.

Monitors whether a given IP address belongs to TikTok/ByteDance, returns current result plus a diff (changed true/false, before/after field values) compared to your last check stored for up to 90 days.

Monitors whether a given IP address belongs to T-Mobile and alerts on changes compared to the previous check result.

Monitors whether an IP address belongs to Twilio, returning the current result, whether it changed since the last check, and what fields changed with before/after values.

Checks up to 20 IP addresses in one call to determine whether each belongs to UpCloud's infrastructure, returning per-item results concurrently with error fields and a failure count.

Checks up to 20 IP addresses in one call to determine if each belongs to Vercel's infrastructure, returning ordered results with per-item error fields and a failure count.

Monitors whether an IP address belongs to Vercel's infrastructure and alerts you when that status changes between checks.

Monitors whether a given IP address belongs to Videotron and alerts when that classification changes, returning before/after diffs and change timestamps.

Change-watch for TCP port 110 (POP3) availability on a host: runs the check, diffs against the previous result (retained 90 days), and returns what changed.

Checks whether TCP/UDP port 111 (portmapper/rpcbind) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Checks whether port 123 (NTP) is open on up to 20 hosts in a single concurrent batch call, returning per-item results in input order with error fields and a failure count.

Monitors whether TCP port 123 (NTP) is open on a host, returning the current status, whether it changed since the last check, and before/after field diffs.

Monitors whether TCP port 137 (NetBIOS Name Service) is open on a host, comparing current results against a previous check to detect changes.

Checks whether IMAP port 143 is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error fields and a failure count.

Monitors whether TCP/UDP port 161 (SNMP) is open on a host, returning current status plus a change diff compared to the previous check within 90 days.

Change-detection watch for TCP port 179 (BGP) availability: runs the check, compares to the previous result (stored 90 days), and returns current status plus a changed flag with before/after diff.

Checks whether TCP port 23 (Telnet) is open on a host and returns whether the result has changed since the last check, with before/after field diffs.

Monitors whether port 389 (LDAP) is open on a given host and returns change detection data compared to the previous check.

Checks whether TCP port 443 (HTTPS) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields.

Checks whether TCP/UDP port 514 (syslog) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error details.

Change-watches whether TCP port 53 (DNS) is open on a host, returning current status, a changed flag, before/after diffs, and last-seen timestamp compared against the previous call.

Checks whether TCP port 587 (SMTP submission) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Bulk-checks whether TCP port 636 (LDAPS) is open on up to 20 hosts in a single concurrent API call, returning per-host results in input order with error details and a failure count.

Monitors whether TCP port 69 (TFTP) is open on a host and returns change detection comparing current result to the previous check stored for up to 90 days.

Performs a reverse DNS (PTR) lookup for an IP using AliDNS, then compares the result against the previously stored result to detect changes.

Runs a check on whether a given IP is listed on the Truncate blacklist, compares with the previous result (kept 90 days), and returns whether the listing status has changed along with before/after field diffs.

Checks up to 20 IP addresses concurrently against the UCEPROTECT Level 3 blacklist and returns results in input order with per-item error fields and a failure count.

Checks up to 20 IP addresses concurrently to determine if each belongs to Alibaba Cloud, returning per-item results with error fields and a failure count.

Monitors whether an IP address belongs to AT&T and alerts on changes by comparing current results with the previously stored check from up to 90 days ago.

Checks up to 20 IP addresses concurrently to determine whether each belongs to Bluehost's network, returning results in input order with per-item errors and a failure count.

Monitors whether an IP address belongs to BT (British Telecom) and alerts when that classification changes between calls.

Monitors whether a given IP belongs to Deutsche Telekom and alerts you when that classification changes, returning before/after diff and timestamp.

Checks up to 20 IP addresses in a single concurrent batch call to determine whether each IP belongs to Fastly's CDN network

Bulk-checks up to 20 IP addresses concurrently to determine whether each belongs to GitLab's infrastructure, returning ordered results with per-item error fields and a failure count.

Checks up to 20 IP addresses in a single concurrent batch to determine whether each belongs to Linode (Akamai Cloud) infrastructure.

Monitors whether an IP address belongs to Meta and alerts you when that classification changes, tracking before/after values over 90 days.

Bulk-checks up to 20 IP addresses concurrently to determine whether each belongs to Namecheap's infrastructure, returning ordered results with per-item errors and a failure count.

Monitors whether an IP address belongs to Proofpoint's infrastructure, returning the current result, whether it changed since last check, and what fields changed with before/after values.

Monitors whether an IP address belongs to Telefonica, tracking changes over time and reporting what changed between calls.

Monitors whether a given IP address belongs to Vodafone, returning the current result, whether it changed since last check, and before/after field diffs.

Monitors whether a given IP address belongs to Wasabi (cloud storage), returning the current result, whether it changed since the last check, and a diff of changed fields.

Checks whether an IP address belongs to Zscaler, compares the result against the previous check (retained 90 days), and returns whether anything changed along with before/after field diffs.

Checks whether TCP port 102 (ISO-TSAP) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error fields and a failure count.

Checks whether TCP port 135 (Microsoft RPC) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error fields.

Checks whether TCP port 19 (Chargen) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Change-watch for port 19 (chargen) open status on a given IP/host, returning current result, whether it changed, field-level before/after diffs, and last-seen timestamp.

Checks whether TCP port 21 (FTP) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Checks whether port 21 (FTP) is open on a given host, compares with the previous result (kept 90 days), and returns the current status plus a changed flag with before/after field diffs.

Checks whether TCP port 23 (Telnet) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Bulk-checks whether TCP port 502 (Modbus) is open on up to 20 hosts concurrently, returning ordered results with per-item errors and a failure count.

Checks whether TCP port 515 (LPD/printer) is open on up to 20 hosts in a single concurrent batch call, returning per-host results with error fields and a failure count.

Checks whether TCP/UDP port 53 (DNS) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error fields and a failure count.

Bulk-checks whether TCP port 548 (AFP/Apple Filing Protocol) is open on up to 20 hosts in a single concurrent call, returning ordered results with per-item errors and a failure count.

Checks whether TCP port 554 (RTSP) is open on up to 20 hosts concurrently in a single API call, returning ordered results with per-item error fields and a failure count.

Bulk-checks whether TCP port 631 (IPP/CUPS printing) is open on up to 20 hosts in a single concurrent call, returning per-item results and a failure count.

Checks whether TCP/UDP port 69 (TFTP) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item errors and a failure count.

Bulk-checks whether TCP/UDP port 7 (Echo) is open on up to 20 hosts in a single concurrent call, returning ordered results with per-item errors and a failure count.

Monitors whether TCP port 7 (Echo) is open on a host and returns a change diff compared to the previous check, alerting when the status changes.

Checks whether TCP port 80 (HTTP) is open on up to 20 hosts in a single concurrent batch call, returning ordered results with per-item error fields and a failure count.

Checks whether port 88 (Kerberos) is open on up to 20 hosts concurrently in a single API call, returning ordered results with per-item error details.

Monitors whether TCP port 88 is open on a host and returns whether the status has changed since your last check, with before/after field diffs.

Checks whether TCP port 110 (POP3) is open on up to 20 hosts concurrently in a single batch call, returning ordered results with per-item error details.

Bulk-checks whether TCP port 512 is open on up to 20 hosts in a single concurrent call, returning ordered results with per-item errors and a failure count.

Bulk-checks whether TCP/UDP port 137 (NetBIOS Name Service) is open on up to 20 hosts in a single concurrent API call, returning ordered results with per-item error details.

Checks whether TCP port 464 (Kerberos password change) is open on up to 20 hosts in a single concurrent batch call, returning per-host results in input order.