---
title: "query threat_intel service by ip or host_name using the query params"
method: GET
path: "/v0/cpe/query_threat_intel"
tags: ["CPE"]
---

# query threat_intel service by ip or host_name using the query params

`GET /v0/cpe/query_threat_intel`

query threat_intel service by ip or host_name using the query params. Each is optional but one is required.

## Query parameters

- `ip` string
- `host_name` string

## Response `200`

OK

- ThreatIntellResult[] — Array of Threat intell results
  - `type` string
  - `source` string
  - `notes` string
  - `ip` string
  - `intell_date` string
  - `host_name` string
  - `family` string
  - `category` string
  - `asn` string

## Other responses

- `401` — Unauthorized
- `404` — Not found

---

[API](https://skmtc.dev/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.dev/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)