VulnCheckのIPインテリジェンスタグAPIは、サードパーティのデナイリスト(VulnCheckなど)を活用して、次世代ファイアウォール(NGFW)の外部ブロックリスト(EBL)または動的ブロックリスト(DBL)機能を通じて、コマンド&コントロール(C2)や攻撃者インフラをブロックするために使用できます。
curl --request GET \
    --url https://api.vulncheck.com/v3/tags/vulncheck-c2 \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'
package main
import (
    "context"
    "fmt"
    "log"
    "os"
    vulncheck "github.com/vulncheck-oss/sdk-go-v2/v2"
)
func main() {
    configuration := vulncheck.NewConfiguration()
    configuration.Scheme = "https"
    configuration.Host = "api.vulncheck.com"
    client := vulncheck.NewAPIClient(configuration)
    token := os.Getenv("VULNCHECK_API_TOKEN")
    auth := context.WithValue(
        context.Background(),
        vulncheck.ContextAPIKeys,
        map[string]vulncheck.APIKey{
            "Bearer": {Key: token},
        },
    )
    resp, httpRes, err := client.EndpointsAPI.TagsVulncheckC2Get(auth).Execute()
    if err != nil || httpRes.StatusCode != 200 {
        log.Fatal(err)
    }
    fmt.Printf("%+v", resp)
}
import vulncheck_sdk
configuration = vulncheck_sdk.Configuration(host="https://api.vulncheck.com/v3")
configuration.api_key["Bearer"] = "insert_token_here"
with vulncheck_sdk.ApiClient(configuration) as api_client:
    endpoints_client = vulncheck_sdk.EndpointsApi(api_client)
    api_response = endpoints_client.tags_vulncheck_c2_get()
    print(api_response)
vulncheck tag vulncheck-c2
1.11.114.146
1.12.36.221
1.12.44.34
1.12.56.98
1.12.58.65
1.12.181.224
1.12.221.241
1.12.228.16
1.12.230.223
1.12.253.64
...
curl --request GET \
    --url https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'
package main
import (
    "fmt"
    "io"
    "net/http"
)
func main() {
    request, _ := http.NewRequest("GET", "https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json", nil)
    request.Header.Set("Accept", "application/json")
    request.Header.Set("Authorization", "Bearer insert_token_here")
    response, _ := http.DefaultClient.Do(request)
    defer response.Body.Close()
    bodyBytes, _ := io.ReadAll(response.Body)
    fmt.Println(string(bodyBytes))
}
import requests
url = "https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json"
headers = {
    "accept": "application/json"
}
cookies = {
    "token": "insert_token_here"
}
response = requests.get(url, headers=headers, cookies=cookies)
print(response.json())
vulncheck tag --json