post https://api.spyse.com/v4/data/ip/search
Returns a list of IP hosts that matched the search query. Allows getting only the first 10,000 results. To get all results please use scroll or download API endpoints. By default, search operations, which return a list of found items, return only the first 25 items. To get a different set of items, you can use the offset and limit parameters in the request body.
Options for search params:
| Search parameter | Operator | Value |
|---|---|---|
| cidr |
|
Find IPs by CIDR.
|
| security_score |
,
|
Spyse security score.
|
| geo_country |
,
,
|
Find IPs by the country they are located in.
|
| geo_country_iso_code |
,
,
|
Find IPs by the country ISO code.
|
| geo_city |
,
,
|
Find IPs by the city they are located in.
|
| as_org |
,
,
,
|
Find IPs by the autonomous system organization name.
|
| as_num |
,
,
|
Find IPs by the autonomous system number.
|
| isp |
,
,
,
|
Find IPs by the internet service provider name.
|
| open_port |
,
,
|
The open port number to search for. For ex. by setting the value "22" and operator "eq" you will search for all IP hosts that have port 22 opened.
|
| port_banner |
,
,
|
Find IPs by its port banner content.
|
| port_cve_id |
|
Find IPs affected by a specific CVE. Example: CVE-2019-12407.
|
| technology_cpe |
,
|
Search IPs by technology CPE. Example: "cpe:2.3:a:apache:http_server".
|
| port_service |
,
,
|
Find IPs by services detected on ports. Examples: "ssh”, “http”, “ftp” etc.
|
| port_technology_name |
,
|
Find IPs hosting the specified technology. Examples: “Pure-FTPd”, “Dovecot pop3d”, "Postfix smtpd".
|
| port_technology_version |
,
,
|
Find IPs hosting the specified technology version. Examples: “2.4.18” (Apache version), “7.4” (OpenSSH version), "1.3.5rc3" (ProFTPD version).
|
| ptr |
,
,
,
|
Find IPs by PTR record value.
|
| http_extract_tracker_adsense_id |
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified Google AdSense identifier.
|
| http_extract_title |
,
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified title.
|
| http_extract_description |
,
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified description.
|
| http_extract_robots |
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified robots.txt content.
|
| http_extract_status_code |
,
,
,
,
|
Search IPs that host websites (on any port) returning the specified status code.
|
| http_extract_favicon_sha256 |
,
,
|
Search IPs that host websites (on any port) with the homepage containing favicon with the specified SHA256 hash value.
|
| http_extract_email |
,
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified email address.
|
| http_extract_headers_name |
,
|
Search IPs that host websites (on any port) returning the specified HTTP header name.
|
| http_extract_headers_value |
,
|
Search IPs that host websites (on any port) returning the specified HTTP header value.
|
| http_extract_meta_name |
,
|
Search IPs that host websites (on any port) with the homepage containing the specified HTML meta tag name.
|
| http_extract_meta_value |
,
|
Search IPs that host websites (on any port) with the homepage containing the specified HTML meta tag value.
|
| http_extract_scripts |
,
,
|
Search IPs that host websites (on any port) with the homepage containing <script> tags with specified "src" attribute substring.
|
| http_extract_styles |
,
,
|
Search IPs that host websites (on any port) with the homepage containing <link> tags with specified "href" attribute substring.
|
| http_extract_link_url |
,
,
|
Search IPs that host websites (on any port) with the homepage containing links with the specified substrings in their URL.
|
| http_extract_link_host |
,
,
|
Search IPs that host websites (on any port) with the homepage containing links with the specified substrings in their URL host.
|
| http_extract_final_redirect_url |
,
,
,
|
Find IPs that host websites redirecting to the specified URL.
|
| http_extract_tracker_google_analytics_key |
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified Google Analytics key.
|
| http_extract_tracker_google_play_app |
,
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified Google Play app identifier.
|
| http_extract_tracker_apple_itunes_app |
,
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified Apple iTunes app identifier.
|
| http_extract_tracker_google_site_verification |
,
,
|
Search IPs that host websites (on any port) with the homepage containing the specified Google Site verification identifier.
|
| abuses_confidence_score |
,
|
Find IPs by abuse confidence score.
|
| abuses_category_name |
,
|
Find IPs by abuse category name.
|
| abuses_reported_at |
,
,
|
Find IPs by abuse reported at date. Example: 2020-12-21.
|
| abuses_is_whitelist_strong |
|
Find IPs, which contains benign crawlers verified by reverse-forward DNS resolution checks.
|
| abuses_is_whitelist_weak |
|
Find IPs, that are within our CIDR whitelist, which contain netblocks from organizations we believe to be benign or often mistaken for malcious.
|
| abuses_reports_num |
,
|
Find IPs by the number of abuses received.
|
| abuses_reports_comment |
,
,
,
|
Find IPs by the abuses comment.
|