GriffinGuardGriffinGuardGRIFFINGUARD
Developer resources

Scan feed.

The authenticated scan feed returns observed IP records as paginated JSON. It is not a firewall-ready blocklist.

Your feeds

Save named scan feeds from the Tag, Port, Fingerprint and Dashboard pages, or build one here with country, tag or an advanced filter (tag, port, fingerprint, asn, classification…). The data endpoint returns recent IP-day scan records; the latest-ips endpoint returns one latest record per IP. Each feed is private to your account.

Sign in to create a feed

GET /api/scans

Requests require an API key in the X-API-Key header. The endpoint defaults to the last seven days and returns IP, date, country, ASN and organization, with a cursor for the next page.

curl --get https://griffinguard.io/api/scans \
  --header "X-API-Key: YOUR_API_KEY" \
  --data-urlencode "since=2026-10-01" \
  --data-urlencode "limit=100"

Optional filters: since (YYYY-MM-DD), country, tag, limit (1–500) and cursor. Follow next_cursor to continue. API quota and request-rate limits depend on the key’s plan.

Open API reference