RErecordedfuture
IP

Lookup a IP Address entity by id by querying an Intelligence Card extension

Get third-party enrichment for an IP from extensions like Shodan, GreyNoise, Censys, or VirusTotal.

get/ip/{id}/extension/{extension}

Request

  • Base URL
    https://api.recordedfuture.com/v2
  • URL
    https://api.recordedfuture.com/v2/ip/{id}/extension/{extension}
  • Auth
    API key in header X-RFToken

Path parameters

idstring required

IP entity id

extension'CarbonBlack' | 'Censys' | 'GreyNoiseIntelligence' | 'Kaspersky_Threat_Intelligence_Portal' | 'SentinelOne' | 'ThreatConnect' | 'active_ip_geo' | 'active_ip_history' | 'alienvault' | 'cisco_umbrella' | 'domaintools_iris' | 'dragos' | 'dt' | 'facebookte' | 'farsight' | 'inquest' | 'mandiant' | 'multirbl' | 'nucleon' | 'nucleon' | 'phishme' | 'reversinglabs' | 'riskig' | 'scanner_ip' | 'servicenow' | 'shodan' | 'virustotal' | 'virustotal_widget' | 'xforce' required

Which extension to call

Query parameters

metadataunknown

Annotates the response with additional metadata explaining the response data elements.

Response

Result of operation

dataobject

Extension-specific data. Structure depends on the extension requested.

metadataobject

Request metadata (included when metadata=true).

Changes

No recorded changes to this operation across all 1 revision of this API.