Initial Access Intelligence

Tags API

VulnCheck Initial Access Intelligence includes a Tags API endpoint that returns a list of IP addresses associated with a given tag.

VulnCheck Initial Acess Intelligence includes IP Intelligence features for tracking potentially vulnerable systems as well as attacker Command & Control (C2) infrastructure. VulnCheck Initial Access Intelligence includes a Tags API that makes this IP Intelligence data easily consumable by third-party controls, such as Next-Generation Firewalls.

Supported IP Intelligence Tags

Below is a list of currently supported IP Intelligence Tags:

Tag NameDynamic Tag URL
vulncheck-c2https://api.vulncheck.com/v3/tags/vulncheck-c2

Query by IP Intelligence Tag

To query for IP addresses matching a given tag, simply call /v3/tags/{tag} as follows:

curl --request GET \
     --cookie "TOKEN=insert_token_here"
     --url https://api.vulncheck.com/v3/tags/vulncheck-c2 \
     --header 'Accept: application/json' \

The above example requests a IP addresses, both IPv4 and IPv6, which have been identified as part of attacker Command & Control (C2) infrastructure.