---
title: "query threat_intel service by ip or host_name using the query params"
method: GET
path: "/v0/cpe/query_threat_intel"
tags: ["CPE"]
---

# query threat_intel service by ip or host_name using the query params

`GET /v0/cpe/query_threat_intel`

## Request

- Base URL: `https://api.riskrecon.com`
- URL: `https://api.riskrecon.com/v0/cpe/query_threat_intel`
- Auth: HTTP bearer

query threat_intel service by ip or host_name using the query params. Each is optional but one is required.

## Query parameters

- `ip` string
- `host_name` string

## Response `200`

OK

- ThreatIntellResult[]: Array of Threat intell results
  - `type` string
  - `source` string
  - `notes` string
  - `ip` string
  - `intell_date` string
  - `host_name` string
  - `family` string
  - `category` string
  - `asn` string

## Other responses

- `401`: Unauthorized
- `404`: Not found

---

[API](https://skmtc.dev/recordedfuture/apis/common-platform-enumeration-apis-v0.md) - [All operations](https://skmtc.dev/recordedfuture/apis/common-platform-enumeration-apis-v0/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/common-platform-enumeration-apis-v0/revisions/7771107d2eff?raw)