Ip Intelligence

Tags API

VulnCheck IP Intelligence includes a Tags API endpoint that returns a list of IP addresses associated with a given tag.

VulnCheck IP Intelligence includes a Tags API that makes our C2 data easily consumable by third-party controls, such as Next-Generation Firewalls.

Supported IP Intelligence Tags

Below is a list of currently supported IP Intelligence tags:

Tag NameDynamic Tag URL
vulncheck-c2https://api.vulncheck.com/v3/tags/vulncheck-c2

Query by IP Intelligence Tag

To query for IP addresses matching a given tag, simply call /v3/tags/{tag} as follows:

curl --request GET \
    --url https://api.vulncheck.com/v3/tags/vulncheck-c2 \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

The above example requests a IP addresses, both IPv4 and IPv6, which have been identified as part of attacker Command & Control (C2) infrastructure.