🇪🇺Europe Native Threat Intelligence

Every edge needs a guardian.

GriffinGuard gives security analysts and enterprises actionable context on Internet activity observed by our sensor network. Stop noise. Hunt real threats.

Investigate IP verdicts, activity, and enrichment in one place.

View API plans Explore the data

Live API response · GET /api/ip/216.226.78.10

GET /api/ip/216.226.78.10JSON

{
  "ip": "216.226.78.10",
  "classification": "malicious",
  "confidence": 1,
  "ip_info": {
    "asn": "AS50219",
    "country": "US",
    "organization": "VT-255-50219"
  },
  "tags": [
    "CVE-2023-21554",
    "not-spoofable"
  ],
  "targeted_ports": [
{
      "port": 21,
      "protocol": "tcp"
    },
{
      "port": 26,
      "protocol": "tcp"
    },
{
      "port": 53,
      "protocol": "tcp"
    },
{
      "port": 80,
      "protocol": "tcp"
    },
{
      "port": 81,
      "protocol": "tcp"
    },
{
      "port": 82,
      "protocol": "tcp"
    },
{
      "port": 83,
      "protocol": "tcp"
    },
{
      "port": 84,
      "protocol": "tcp"
    },
{
      "port": 85,
      "protocol": "tcp"
    },
{
      "port": 88,
      "protocol": "tcp"
    }
  ],
  "targeted_ports_total": 232,
  "fingerprints": [
{
      "type": "ja4",
      "fingerprint": "t13i150900_8daaf6152771_18e8a06d9b2d",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 87,
      "other_hashes": 1
    },
{
      "type": "ja3",
      "fingerprint": "02fc9e6401d2c8c1bf8f91bd21b8e17e",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 87,
      "other_hashes": 1
    },
{
      "type": "ja3n",
      "fingerprint": "96f0b0fa565ae0918d9ea04974f40a51",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 87,
      "other_hashes": 1
    },
{
      "type": "ja4_o",
      "fingerprint": "t13i150900_acb858a92679_cf0e23a66fc1",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 87,
      "other_hashes": 1
    },
{
      "type": "hhv_ab",
      "fingerprint": "rsc02_49f8f26f3247",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 86,
      "other_hashes": 0
    },
{
      "type": "ja4h",
      "fingerprint": "ge11nn040000_e1d2031bdfea_000000000000_000000000000",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 86,
      "other_hashes": 0
    },
{
      "type": "hhv",
      "fingerprint": "rsc02_49f8f26f3247_ac628f4cfda1",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 86,
      "other_hashes": 0
    },
{
      "type": "ssh",
      "fingerprint": "ssh20rc_24b76e02b357",
      "first_seen": "2026-10-05",
      "last_seen": "2026-10-09",
      "hits": 16,
      "other_hashes": 0
    },
{
      "type": "rtsp",
      "fingerprint": "rtop1001r_deda2108ea72_000000000000",
      "first_seen": "2026-10-09",
      "last_seen": "2026-10-09",
      "hits": 1,
      "other_hashes": 0
    },
{
      "type": "redis",
      "fingerprint": "rdr02_a5287c21f5f0",
      "first_seen": "2026-10-07",
      "last_seen": "2026-10-07",
      "hits": 1,
      "other_hashes": 0
    },
{
      "type": "mongodb",
      "fingerprint": "mgq_isMaster_b6171f3b80ac",
      "first_seen": "2026-10-06",
      "last_seen": "2026-10-06",
      "hits": 1,
      "other_hashes": 0
    }
  ],
  "activity": {
    "total_requests": 34448,
    "threat_score": 100
  },
  "last_seen": "2026-10-09"
}

Works withMicrosoft Sentinel Splunk Elastic MISP OpenCTI TheHive fail2ban pfSense / OPNsense

Probes captured

—

in the last 7 days

Last 24 hours

—

Source addresses

—

Networks

—

Countries

—

Sensor network snapshot · refreshed hourly

Public data

Explore available observations.

Browse recent observations across ports, fingerprints, networks and countries.

Browse intelligence →

CVE tags · last 7 days

No recent data returned.

Ports · last 7 days

No recent data returned.

Fingerprints · last 7 days

No recent data returned.

Capabilities

Built for security-first teams.

Every feature is designed around the SOC analyst workflow: fast, scannable and decisive.

Sensor-derived intelligence

Investigate activity observed by our distributed sensor network, with classifications and context for analyst review.

Noise reduction

Use classifications and context to separate routine activity from signals that need an analyst’s attention.

Threat classification

Review IP classifications alongside tags, targeted ports and observed activity.

Global coverage

Explore observed activity enriched with network and geographic context.

OSINT enrichment

ASN, organization, country and city context alongside observed ports and activity.

Developer-first API

RESTful API with SDKs for Python, Go and Node. Feed verdicts straight into your SIEM, SOAR or custom tooling.

Integrations

Verdicts where you work.

Feed GriffinGuard intelligence straight into your SIEM, threat intel platform, case management and firewalls.

SIEM

Enrich alerts and incidents with GriffinGuard verdicts and context.

Threat intelligence platforms

Pull GriffinGuard indicators into your TIP alongside your other feeds.

Incident response

Add verdict, tags and activity context to cases and observables.

TheHive

Blocking

Block malicious IPs at the edge before they reach your services.

Ask about your stack

AI-assisted workflows

Connect to the GriffinGuard MCP service from a compatible client.

MCP setup details

Verdicts

Know who's knocking.

Malicious

Observed performing malicious activity against internet hosts. Block or quarantine.

Mirai botnet nodes
SSH/RDP brute-forcers
C2 servers
Exploit launchers

Unknown

Not enough evidence to classify. Investigate in context.

VPN exit nodes
Residential IPs
Proxies
Newly observed hosts

Institutional

Associated with an identified organization or service, including known crawlers and monitoring systems.

Search engine crawlers
Monitoring services
Identified organizations

Stop noise. Hunt real threats.

Reduce noise, identify real threats and respond faster. API access is available with paid plans.

Start free, no credit card Explore available data