MSPs & integrators
Check client IPs for blacklisting and exposure before they complain
AdminKit's free tools let MSPs check a client's exposed services, certificates, and HTTP headers today, catching problems like an open admin panel or an expiring certificate proactively instead of after a client reports them, and the AdminKit Check API at api.adminkit.net lets you script the same checks across many clients.
Updated
At a glance
Part of the IP & network cluster — more tools, guides and terms on ip & network.
The problem
MSPs and integrators are usually responsible for more client IPs and domains than they can realistically check by hand on a regular basis. In practice, that often means problems get noticed reactively: a client’s email starts bouncing, and only then does anyone check whether the client’s IP has landed on a blacklist.
Forward-facing services are another recurring issue. A client’s database, an MQTT broker, or an admin panel can end up reachable from the public internet without anyone having decided that on purpose, often left over from a quick setup or a default configuration nobody revisited. Spotting this across dozens or hundreds of client assets, one at a time through a web form, doesn’t scale well.
None of this is unique to any one client; it’s a natural result of managing many networks you don’t personally sit inside of, with limited time to check each one individually. The underlying checks are simple on their own — the challenge is doing them consistently across a growing client list rather than only when something has already gone wrong.
Talk to an expert
Huy Nguyen (David), Founder & CEO, Netbase JSC
Ask how AdminKit fits msps & integrators — setup, timeline, or pricing.
What can an MSP check for free?
- Check a client’s public IP and CGNAT status — useful context when investigating exposure or blacklist findings.
- Check which commonly-exposed ports are open — a quick way to spot an exposed database, broker, or admin panel on a client’s IP.
- Check a client’s SSL certificate — flags expired or misconfigured certificates before they cause an outage.
- Check a client’s HTTP response headers — useful for spotting missing security headers on client-facing sites; see how to read the result for what each header means, or how this check compares to securityheaders.com if a client asks why you’re not using that instead.
If port-check turns up an unexpected open admin panel, is port 8080 (a web admin panel) exposed covers why that’s risky and how to lock it down.
How do you check many clients at once?
AdminKit’s blacklist check walks you through the DNSBL lookup, so MSPs can check a client’s IP proactively instead of waiting for a bounce complaint, and why is my IP blacklisted, and how do I get delisted covers finding the cause and requesting removal.
The Check API at api.adminkit.net runs the same DNS, mail, whois, TLS and HTTP-header checks behind the free tool pages as structured JSON, so you can script them across many client domains instead of running them one at a time through the website. Small volumes need no key; a free account gives you an API key with higher limits. Active port, MQTT, Modbus and RTSP checks run only against the caller’s own IP or assets whose ownership is verified.
Need reports in your own brand, or checks wired into your PSA or ticketing tool? Netbase builds that as custom development — talk to our team about your client list and the report you want to send.
This page is general guidance, not a security audit of your specific network — see our disclaimer for what AdminKit's guidance does and does not commit to.
Frequently asked questions
How do we usually find out a client's IP got blacklisted?
Often the client notices first, when their email stops arriving or bounces, and reports it before the MSP has checked anything. AdminKit's blacklist check page walks you through the DNSBL lookup so you can check proactively instead of waiting for that call, and port-check and http-headers can surface other exposed services early.
Can AdminKit check multiple client IPs automatically?
Yes, with the AdminKit Check API at api.adminkit.net: DNS, mail, whois, TLS and HTTP-header checks for any client domain, no key needed for small volumes and a free account for an API key. Port, MQTT, Modbus and RTSP checks run only on the caller's own IP or verified assets.
Can we get client reports in our own brand?
Netbase can build branded reporting on top of the Check API as custom development for your MSP. Talk to our team at /contact/ with the number of clients and the checks you want in each report.
What kinds of exposed services should we be checking for on client IPs?
Common ones include open admin panels, exposed databases, and MQTT brokers left reachable from the internet without anyone intending that. The port-check and http-headers tools can help spot some of these from outside.
Can AdminKit see inside a client's network without us doing anything?
No. From outside, AdminKit only sees what's reachable at the client's public IP, the same as any visitor would see. It would only see more if the client specifically opted into something like a DNS change or an agent.
More in the IP & network cluster
Want AdminKit set up for you?
Tell us about your setup — our team will scope AdminKit for it and, if you need it, add hands-on expert help from Netbase.
How AdminKit works with you
- Delivered remotely — Netbase JSC, the company behind AdminKit, has worked with clients in 80 countries.
- Contracts and invoices are issued by Netbase JSC; payment goes to the company by bank transfer to Netbase JSC's company account or PayPal Business.
- Talk to the CEO, Huy Nguyen (David), directly on WhatsApp or by email at [email protected].