Tags API
VulnCheck Initial Access Intelligence includes a Tags API endpoint that returns a list of IP addresses associated with a given tag.
VulnCheck Initial Acess Intelligence includes IP Intelligence features for tracking potentially vulnerable systems as well as attacker Command & Control (C2) infrastructure. VulnCheck Initial Access Intelligence includes a Tags API that makes this IP Intelligence data easily consumable by third-party controls, such as Next-Generation Firewalls.
Supported IP Intelligence Tags
Below is a list of currently supported IP Intelligence Tags:
| Tag Name | Dynamic Tag URL |
|---|---|
| vulncheck-c2 | https://api.vulncheck.com/v3/tags/vulncheck-c2 |
Query by IP Intelligence Tag
To query for IP addresses matching a given tag, simply call /v3/tags/{tag} as follows:
curl --request GET \
--url https://api.vulncheck.com/v3/tags/vulncheck-c2 \
--header 'Accept: application/json' \
--header 'Authorization: Bearer insert_token_here'
The above example requests a IP addresses, both IPv4 and IPv6, which have been identified as part of attacker Command & Control (C2) infrastructure.
IP Intelligence
VulnCheck Initial Access Intelligence includes tracking of potentially vulnerable systems that may be targeted by initial access exploits as well as tracking of command & control (C2) attacker infrastructure.
Introduction
VulnCheck KEV makes it easy to see which vulnerabilities have been exploited in the wild.
