API Resources

GET 1
/v3/pdns/{filter}

Return a list of newline-separated (or JSON) hostnames based on a hostname list for Protective DNS

VulnCheck's IP Intelligence Protective DNS (PDNS) API may be used to in a variety of ways, including in Protective DNS services that leverage third-party denylists (like VulnCheck) to block Command and Control (C2) and attacker infrastructure.

Example Request for C2 IP Addresses (Newline-Separated)

curl --request GET \
    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2 \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

Response

0-64-187-224-133.quickpacket.com
014198194219.ctinets.com
014199160130.ctinets.com
019-128-100-005.ip-addr.inexio.net
020116.vps-10.com
037008238050.gubin.vectranet.pl
056.168.151.89.chtts.ru
058177115124.ctinets.com
058177167198.ctinets.com
058177174111.ctinets.com
...

Example Request for C2 IP Addresses (JSON)

curl --request GET \
    --url https://api.vulncheck.com/v3/pdns/vulncheck-c2?format=json \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'