IPv4¶
IPv4 endpoints¶
These endpoints return information for a given IPv4 address
IPv4 information¶
- GET /explore/ipv4/ipv4info/{ipv4}
Get IPv4 information
- Query Parameters
ipv4 (string) (required) –
IPv4 address
explain =<0|1> (int) (optional) –
show details of data used to calculate the different scores in the response
0 (default) - do not show details
1 - show underlying data used to calculate scores
scan_data =<0|1> (int) (optional) –
show details of data collected from IPv4 scanning
0 (default) - do not show details
1 - show collected data
sparse =<asn|asname|sp_risk_score> (string) (optional) –
return only specific information elements for this IPv4 address
asn - return AS Number for IPv4 address
asname - return AS Name for IPv4 address
sp_risk_score - return Silent Push Risk Score for IPv4 address
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/ipv4/ipv4info/1.1.1.1
Example Response
{
"status_code": 200,
"error": null,
"response": {
"ip2asn": [
{
"asn": 13335,
"asn_allocation_age": 4099,
"asn_allocation_date": 20100714,
"asn_rank": 0,
"asn_rank_score": 0,
"asn_reputation": 0,
"asn_reputation_score": 0,
"asn_takedown_reputation": 0,
"asn_takedown_reputation_score": 0,
"asname": "CLOUDFLARENET, US",
"benign_info": {
"actor": "",
"known_benign": false,
"tags": []
},
"date": 20211003,
"density": 48531,
"ip": "1.1.1.1",
"ip_is_dsl_dynamic": false,
"ip_is_dsl_dynamic_score": 0,
"ip_is_tor_exit_node": false,
"ip_location": {
"continent_code": "OC",
"continent_name": "Oceania",
"country_code": "AU",
"country_is_in_european_union": false,
"country_name": "Australia"
},
"ip_ptr": "one.one.one.one",
"listing_score": 0,
"malscore": 0,
"sinkhole_info": {
"known_sinkhole_ip": false,
"tags": []
},
"sp_risk_score": 0,
"subnet": "1.1.1.0/24",
"subnet_allocation_age": 3706,
"subnet_allocation_date": 20110811,
"subnet_reputation": 0,
"subnet_reputation_score": 0
}
]
}
}
Tip
Show explain details for scores:
https://api.silentpush.com/api/v1/merge-api/explore/ipv4/ipv4info/96.43.250.251?explain=1{ "status_code": 200, "error": null, "response": { "ip2asn": [ { "asn": 13614, "asn_allocation_age": 8117, "asn_allocation_date": 19990714, "asn_rank": 0, "asn_rank_score": 0, "asn_reputation": 13, "asn_reputation_explain": { "ips_in_asn": 61696, "ips_num_active": 2154, "ips_num_listed": 1 }, "asn_reputation_score": 13, "asn_takedown_reputation": 0, "asn_takedown_reputation_explain": {}, "asn_takedown_reputation_score": 0, "asname": "ALLWEST, US", "benign_info": { "actor": "", "known_benign": false, "tags": [] }, "date": 20211003, "density": 0, "ip": "96.43.250.251", "ip_is_dsl_dynamic": false, "ip_is_dsl_dynamic_score": 0, "ip_is_tor_exit_node": false, "ip_location": { "continent_code": "NA", "continent_name": "North America", "country_code": "US", "country_is_in_european_union": false, "country_name": "United States" }, "ip_ptr": "d96-43-250-251.allwest.net", "listing_score": 100, "listing_score_explain": { "listed_first": 20210701, "listed_first_ago": 94, "listed_recent": 20211003, "listed_recent_ago": 0, "listed_span": 94, "listings_all": 93, "listings_last_180": 93, "listings_last_30": 29, "listings_last_365": 93, "listings_last_7": 7, "listings_last_90": 88 }, "malscore": 0, "sinkhole_info": { "known_sinkhole_ip": false, "tags": [] }, "sp_risk_score": 100, "sp_risk_score_explain": { "sp_risk_score_decider": "listing_score" }, "subnet": "96.43.248.0/21", "subnet_allocation_age": "UNKNOWN", "subnet_allocation_date": "UNKNOWN", "subnet_reputation": 38, "subnet_reputation_explain": { "ips_in_subnet": 2048, "ips_num_active": 13, "ips_num_listed": 1 }, "subnet_reputation_score": 38 } ] } }
Tip
Show data collected from IPv4 scanning, if available:
https://api.silentpush.com/api/v1/merge-api/explore/ipv4/ipv4info/1.1.1.1?scan_data=1{ "status_code": 200, "error": null, "response": { "ip2asn": [ { "asn": 13335, "asn_allocation_age": 4291, "asn_allocation_date": 20100714, "asn_rank": 0, "asn_rank_score": 0, "asn_reputation": 0, "asn_reputation_score": 0, "asn_takedown_reputation": 0, "asn_takedown_reputation_score": 0, "asname": "CLOUDFLARENET, US", "benign_info": { "actor": "Cloudflare", "known_benign": true, "tags": [ "Cloudflare DNS" ] }, "date": 20220413, "density": 57807, "ip": "1.1.1.1", "ip_is_dsl_dynamic": false, "ip_is_dsl_dynamic_score": 0, "ip_is_tor_exit_node": false, "ip_location": { "continent_code": "OC", "continent_name": "Oceania", "country_code": "AU", "country_is_in_european_union": false, "country_name": "Australia" }, "ip_ptr": "one.one.one.one", "listing_score": 0, "malscore": 0, "scan_data": { "certificates": [ { "fingerprint_sha1": "099d03214d1414a5325db61090e73ddb94f37d72", "scan_date": 20220401 } ], "jarm": [ { "first_seen": 20220120, "jarm_hash": "27d3ed3ed0003ed1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "last_seen": 20220411, "server_banner": "cloudflare" } ] }, "sinkhole_info": { "known_sinkhole_ip": false, "tags": [] }, "sp_risk_score": 0, "subnet": "1.1.1.0/24", "subnet_allocation_age": 3898, "subnet_allocation_date": 20110811, "subnet_reputation": 0, "subnet_reputation_score": 0 } ] } }
Tip
Show only Silent Push Risk Score for IPv4 address:
https://api.silentpush.com/api/v1/merge-api/explore/ipv4/ipv4info/96.43.250.251?sparse=sp_risk_score{ "status_code": 200, "error": null, "response": { "ip2asn": [ { "ip": "96.43.250.251", "sp_risk_score": 100 } ] } }
Silent Push Risk Score for IPv4¶
- GET /explore/ipv4/riskscore/{ipv4}
Get Silent Push Risk Score for IPv4 address
- Query Parameters
ipv4 (string) (required) –
IPv4 address
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/ipv4/riskscore/1.1.1.1
Example Response
{
"status_code": 200,
"error": null,
"response": {
"ip2asn": [
{
"ip": "1.1.1.1",
"sp_risk_score": 0
}
]
}
}
IPv4 scan data - certificates¶
- GET /explore/scandata/ipv4/certificates
Get certificate data collected from IPv4 scanning
- Query Parameters
ipv4 (string) (optional) –
IPv4 address
netmask (int) (optional) –
network mask
default = 32
fingerprint_sha1 (string) (optional) –
certificate fingerprint
domain (string) (optional) –
domain name
wildcards are supported
expired_certs_only (int) (optional) –
only return results containing expired certificates
0 (default) - return all results
1 - return only expired certificates
window (int) (optional) –
include scan results within the last <window> days
default = 180
limit =<n> (int) (optional) –
number of results to return
default = 100
max 1000
skip =<n> (int) (optional) –
number of results to skip
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/certificates?ipv4=103.209.37.157
Example Response
{
"status_code": 200,
"error": null,
"response": {
"certificates": [
{
"103.209.39.17": [
{
"domains": [],
"fingerprint_sha1": "670e9afca67a8a1f7fad20c77806357962e7d431",
"issuer": "Product Root CA",
"not_after": 20160619,
"not_before": 20130618,
"scan_date": 20220416
}
]
}
]
}
}
IPv4 scan data - favicon¶
- GET /explore/scandata/ipv4/favicon
Get favicon data collected from IPv4 scanning
- Query Parameters
ipv4 (string) (optional) –
IPv4 address
netmask (int) (optional) –
network mask
default = 32
net =<in|notin> (int) (optional) –
search for data in or not in the network defined by ipv4 and netmask parameters
default = in
md5 (string) (optional) –
md5 hash of favicon
mmh3 (int) (optional) –
murmurhash3 of favicon
favicon_mmh3_from_url (string) (optional) –
url pointing to favicon
automatically calculate mmh3 hash from url and search for same
limit =<n> (int) (optional) –
number of results to return
default = 100
max 1000
skip =<n> (int) (optional) –
number of results to skip
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/favicon?ipv4=103.209.37.157
Example Response
{
"status_code": 200,
"error": null,
"response": {
"favicon": [
{
"103.209.37.157": [
{
"favicon_md5": "d29fa9f2ab3a72f2608e8e82c8c3d1c6",
"favicon_mmh3": -1494109266
}
]
}
]
}
}
Tip
Example search using url as seed:
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/favicon \ ?favicon_mmh3_from_url=https://paypal.com/favicon.ico &limit=3{ "status_code": 200, "error": null, "response": { "favicon": [ { "23.224.27.139": [ { "favicon_md5": "e1528b5176081f0ed963ec8397bc8fd3", "favicon_mmh3": 309020573 } ], "23.224.27.141": [ { "favicon_md5": "e1528b5176081f0ed963ec8397bc8fd3", "favicon_mmh3": 309020573 } ], "44.194.70.30": [ { "favicon_md5": "e1528b5176081f0ed963ec8397bc8fd3", "favicon_mmh3": 309020573 } ] } ] } }
IPv4 scan data - headers¶
- GET /explore/scandata/ipv4/headers
Get http header data collected from IPv4 scanning
- Query Parameters
ipv4 (string) (optional) –
IPv4 address
netmask (int) (optional) –
network mask
default = 32
header_search (string) (optional) –
search content of http headers - limited partial match
limit =<n> (int) (optional) –
number of results to return
default = 100
max 1000
skip =<n> (int) (optional) –
number of results to skip
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/headers?ipv4=103.209.37.157
Example Response
{
"status_code": 200,
"error": null,
"response": {
"headers": [
{
"194.166.64.102": [
{
"date": 20221001,
"headers": {
"connection": "keep-alive",
"content-length": "195",
"content-type": "text/html",
"date": "Sat, 01 Oct 2022 02:01:57 GMT",
"server": "nginx/1.14.2"
}
}
]
}
]
}
}
IPv4 scan data - jarm¶
- GET /explore/scandata/ipv4/jarm
Get jarm data collected from IPv4 scanning
- Query Parameters
ipv4 (string) (optional) –
IPv4 address
netmask (int) (optional) –
network mask
default = 32
jarm_hash (string) (optional) –
jarm hash
window (int) (optional) –
include scan results with a last_seen date within the last <window> days
default = 180
limit =<n> (int) (optional) –
number of results to return
default = 100
max 1000
skip =<n> (int) (optional) –
number of results to skip
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/jarm?ipv4=103.209.37.157
Example Response
{
"status_code": 200,
"error": null,
"response": {
"jarm": [
{
"103.209.39.17": [
{
"first_seen": 20220323,
"jarm_hash": "0ad02d0000ad0ad01c0ad02d0ad0ad9674c6b4e623ae36cc2d998e99e2262e",
"last_seen": 20220429,
"server_banner": null
}
]
}
]
}
}
IPv4 scan data - open directories¶
- GET /explore/scandata/ipv4/opendir
Get open directory data collected from IPv4 scanning
- Query Parameters
ipv4 (string) (optional) –
IPv4 address
netmask (int) (optional) –
network mask
default = 32
filename (string) (optional) –
filename to search for
wildcards are supported
filename_regex (string) (optional) –
re2 regular expression of filename to search for
must be valid re2 regular expression
window (int) (optional) –
include scan results within the last <window> days
default = 180
result_mode <file|full> (string) (optional) –
format of results to return
file (default) - only return information about matching file if found on multiple IPv4 addresses
full - include full file listing for all IPv4 addresses where matching file is found
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/scandata/ipv4/opendir?ipv4=1.13.13.94
Example Response
{
"status_code": 200,
"error": null,
"response": {
"opendir": [
{
"1.13.13.94": {
"2022-04-22": [
{
"filename": "1.txt",
"filesize": 6,
"modified": "2022-02-10 09:22:00"
},
{
"filename": "formal/",
"filesize": null,
"modified": "2022-04-20 05:11:00"
},
{
"filename": "formalys/",
"filesize": null,
"modified": "2022-04-19 16:34:00"
}
]
}
}
]
}
}
bulk Silent Push Risk Score for a list of IPv4 addresses¶
- POST /explore/bulk/ipv4/riskscore
Get Silent Push Risk Score for multiple IPv4 addresses
a maximum of 100 IPv4 adresses may be submitted in a single request
- JSON Parameters
body (json) (required) –
a json object containing a list of IPv4 addresses
{"ips": ["<ip1>","<ip2>",...,"<ipN>"]}
- Request Headers
X-API-KEY – api-key
Content-Type – application/json
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/bulk/ipv4/riskscore \
-d '{"ips": ["87.246.7.245","77.247.110.204","45.153.160.139"]}'
Example Response
{
"status_code": 200,
"error": null,
"response": [
{
"ip": "87.246.7.245",
"sp_risk_score": 100
},
{
"ip": "45.153.160.139",
"sp_risk_score": 100
},
{
"ip": "77.247.110.204",
"sp_risk_score": 100
}
]
}
bulk IPv4 information¶
- POST /explore/bulk/ip2asn/ipv4
Get information for multiple IPv4 addresses
- JSON Parameters
body (json) (required) –
a json object containing a list of IPv4 ips
{"ips": ["<ip1>","<ip2>",...,"<ipN>"]}
- Request Headers
X-API-KEY – api-key
Content-Type – application/json
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/bulk/ip2asn/ipv4 \
-d '{"ips": ["1.1.1.1", "9.9.9.9"]}'
Example Response
{
"status_code": 200,
"error": null,
"response": {
"ip2asn": [
{
"asn": 13335,
"asn_allocation_age": 4014,
"asn_allocation_date": 20100714,
"asn_rank": 0,
"asn_rank_score": 0,
"asn_reputation": 16,
"asn_reputation_score": 16,
"asn_takedown_reputation": 0,
"asn_takedown_reputation_score": 0,
"asname": "CLOUDFLARENET, US",
"benign_info": {
"actor": "",
"known_benign": false,
"tags": []
},
"date": 20210710,
"density": 37852,
"ip": "1.1.1.1",
"ip_is_dsl_dynamic": false,
"ip_is_dsl_dynamic_score": 0,
"ip_is_tor_exit_node": false,
"ip_location": {
"continent_code": "OC",
"continent_name": "Oceania",
"country_code": "AU",
"country_is_in_european_union": false,
"country_name": "Australia"
},
"ip_ptr": "one.one.one.one",
"malscore": 0,
"sinkhole_info": {
"known_sinkhole_ip": false,
"tags": []
},
"subnet": "1.1.1.0/24",
"subnet_allocation_age": 3621,
"subnet_allocation_date": 20110811,
"subnet_reputation": 0,
"subnet_reputation_score": 0
},
{
"asn": 19281,
"asn_allocation_age": 1396,
"asn_allocation_date": 20170913,
"asn_rank": 0,
"asn_rank_score": 0,
"asn_reputation": 0,
"asn_reputation_score": 0,
"asn_takedown_reputation": 0,
"asn_takedown_reputation_score": 0,
"asname": "QUAD9-AS-1, US",
"benign_info": {
"actor": "",
"known_benign": false,
"tags": []
},
"date": 20210710,
"density": 161,
"ip": "9.9.9.9",
"ip_is_dsl_dynamic": false,
"ip_is_dsl_dynamic_score": 0,
"ip_is_tor_exit_node": false,
"ip_location": {
"continent_code": "NA",
"continent_name": "North America",
"country_code": "US",
"country_is_in_european_union": false,
"country_name": "United States"
},
"ip_ptr": "dns9.quad9.net",
"malscore": 0,
"sinkhole_info": {
"known_sinkhole_ip": false,
"tags": []
},
"subnet": "9.9.9.0/24",
"subnet_allocation_age": 1396,
"subnet_allocation_date": 20170913,
"subnet_reputation": 0,
"subnet_reputation_score": 0
}
]
}
}
bulk IPv4 history information¶
- POST /explore/bulk/history/ip2asn/ipv4
Get information for multiple IPv4 addresses for multiple dates
- JSON Parameters
body (json) (required) –
a json object containing a list of IPv4 ips and a list of dates
{"ips": ["<ip1>", "<ip2>", ..., "<ipN>"],"dates": [yyyymmdd, yyyymmdd, ...]}
- Request Headers
X-API-KEY – api-key
Content-Type – application/json
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/bulk/history/ip2asn/ipv4 \
-d '{"ips": ["1.1.1.1", "9.9.9.9"], "dates": [20210509, 20201123]}'
Example Response
{
"status_code": 200,
"error": null,
"response": {
"ip2asn": [
[
{
"asn": 13335,
"asname": "CLOUDFLARENET, US",
"date": 20210509,
"ip": "1.1.1.1",
"subnet": "1.1.1.0/24"
},
{
"asn": 19281,
"asname": "QUAD9-AS-1, US",
"date": 20210509,
"ip": "9.9.9.9",
"subnet": "9.9.9.0/24"
}
],
[
{
"asn": 13335,
"asname": "CLOUDFLARENET, US",
"date": 20201123,
"ip": "1.1.1.1",
"subnet": "1.1.1.0/24"
},
{
"asn": 19281,
"asname": "QUAD9-AS-1, US",
"date": 20201123,
"ip": "9.9.9.9",
"subnet": "9.9.9.0/24"
}
]
]
}
}
bulk ASN subnet information¶
- POST /explore/bulk/asn2subnet
Get list of subnets for list of AS numbers
- JSON Parameters
body (json) (required) –
a json object containing a list of AS numbers
{"asns": ["<asn1>","<asn2>",...,"<asnN>"]}
- Request Headers
X-API-KEY – api-key
Content-Type – application/json
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/bulk/asn2subnet \
-d '{"asns": [12734, 5]}'
Example Response
{
"status_code": 200,
"error": null,
"response": {
"asn2subnet": [
{
"asn": 12734,
"asn_allocation_age": 7935,
"asn_allocation_date": 19991019,
"asn_rank": 0,
"asn_reputation": 0,
"asn_takedown_reputation": 0,
"asname": "FIAT-AS1 Via Plava, 86 - 10135 Torino, IT",
"date": 20210710,
"malscore": 0,
"subnets": [
"151.91.32.0/20",
"151.91.34.0/24",
"151.91.35.0/24",
"151.91.36.0/22"
]
},
{
"asn": 9,
"asn_allocation_age": 13598,
"asn_allocation_date": 19840417,
"asn_rank": 0,
"asn_reputation": 0,
"asn_takedown_reputation": 0,
"asname": "CMU-ROUTER, US",
"date": 20210710,
"malscore": 0,
"subnets": [
"128.2.0.0/16",
"128.237.0.0/16",
"192.12.32.0/24",
"192.5.146.0/24",
"192.58.107.0/24",
"192.80.210.0/24",
"204.194.28.0/22",
"209.129.244.0/23"
]
}
]
}
}
bulk ASN history information¶
- POST /explore/bulk/history/asn2subnet
Get information for multiple IPv4 addresses for multiple dates
- JSON Parameters
body (json) (required) –
a json object containing a list of AS numbers and a list of dates
{"asns": ["<asn1>","<asn2>",...,"<asnN>"]"dates": [yyyymmdd, yyyymmdd, ...]}
- Request Headers
X-API-KEY – api-key
Content-Type – application/json
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/bulk/history/asn2subnet \
-d '{"asns": [12734, 5], "dates": [20210509, 20201123]}'
Example Response
{
"status_code": 200,
"error": null,
"response": {
"asn2subnet": [
[
{
"asn": 12734,
"asname": "FIAT-AS1 Via Plava, 86 - 10135 Torino, IT",
"date": 20210509,
"subnets": [
"151.91.32.0/20",
"151.91.34.0/24",
"151.91.35.0/24",
"151.91.36.0/22"
]
},
{
"asn": 9,
"asname": "CMU-ROUTER, US",
"date": 20210509,
"subnets": [
"103.157.101.0/24",
"128.2.0.0/16",
"128.237.0.0/16",
"192.12.32.0/24",
"192.5.146.0/24",
"192.58.107.0/24",
"192.80.210.0/24",
"204.194.28.0/22",
"209.129.244.0/23"
]
}
],
[
{
"asn": 12734,
"asname": "FIAT-AS1 Via Plava, 86 - 10135 Torino, IT",
"date": 20201123,
"subnets": [
"151.91.32.0/20",
"151.91.34.0/24",
"151.91.35.0/24",
"151.91.36.0/22"
]
},
{
"asn": 9,
"asname": "CMU-ROUTER, US",
"date": 20201123,
"subnets": [
"128.2.0.0/16",
"128.237.0.0/16",
"147.72.252.0/22",
"192.12.32.0/24",
"192.5.146.0/24",
"192.58.107.0/24",
"192.80.210.0/24",
"204.194.28.0/22",
"209.129.244.0/23"
]
}
]
]
}
}
ASN history of IPv4 address¶
- GET /explore/ip2asn/history/ipv4/{ipv4}
Show historic ASN and subnet allocation information for IPv4 address
- Query Parameters
window =<n> (int) (optional) –
look back <n> days into the past and show all ASNs this IPv4 address has been assigned to
default = 90
date =<yyyy-mm-dd> (string) (optional) –
if given, overrides window and gives ASN and subnet information for the specified date
- Request Headers
X-API-KEY – api-key
Example Request
https://api.silentpush.com/api/v1/merge-api/explore/ip2asn/history/ipv4/91.199.74.9?window=180
Example Response
{
"status_code": 200,
"error": null,
"response": {
"records": [
{
"asn": 35470,
"asname": "XL-AS, NL",
"first": "2021-05-27",
"last": "2021-09-08",
"subnet": "91.199.74.0/24"
},
{
"asn": 61317,
"asname": "ASDETUK www.heficed.com, GB",
"first": "2021-04-22",
"last": "2021-05-20",
"subnet": "91.199.74.0/24"
},
{
"asn": 1273,
"asname": "CW Vodafone Group PLC, EU",
"first": "2021-03-12",
"last": "2021-04-21",
"subnet": "91.199.74.0/24"
}
]
}
}