API Resources

GET
/v3/tags/{filter}

Return a list of newline-separated (or JSON) IP addresses based on a IP tag

VulnCheck's IP Intelligence Tags API may be used to in a variety of ways, including in Next Generation (NG) Firewalls that leverage third-party denylists (like VulnCheck) to block Command and Control (C2) and attacker infrastructure via External Block List (EBL) or Dynamic Block List (DBL) functionality.

Example Request for C2 IP Addresses (Newline-Separated)

curl --request GET \
    --url https://api.vulncheck.com/v3/tags/vulncheck-c2 \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

Response

1.11.114.146
1.12.36.221
1.12.44.34
1.12.56.98
1.12.58.65
1.12.181.224
1.12.221.241
1.12.228.16
1.12.230.223
1.12.253.64
...

Example Request for C2 IP Addresses (JSON)

curl --request GET \
    --url https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

/v3/rules/initial-access/{rules}

Request Initial Access Intelligence Suricata or Snort rules

/v3/pdns/{filter}

Return a list of newline-separated (or JSON) hostnames based on a hostname list for Protective DNS