Silent Push
The Silent Push connector facilitates access to a wide range of cyber threat intelligence data, enabling users to enrich and analyze security-related information.
Silent Push is a comprehensive threat intelligence platform that provides real-time data on domain and IP reputations, enrichments, and risk scores. By integrating with Swimlane Turbine, security teams can automate the process of analyzing and monitoring network-related threats, enhancing their ability to detect and respond to malicious activities. This connector allows users to effortlessly incorporate Silent Push's extensive telemetry into their security workflows, ensuring a proactive defense posture against cyber threats.
Limitations
None to date.
Supported Versions
This Silent Push Connector uses the v1 version API.
Additional Docs
Configuration
Prerequisites
Before you can utilize the Silent Push connector within the Swimlane Turbine platform, ensure you have the following prerequisites:
- API Key Authentication with the following parameters:
- URL: Endpoint for the Silent Push API
- API Key: Unique identifier to authenticate requests to Silent Push
Authentication Methods
To utilize the Silent Push connector within the Swimlane Turbine platform, ensure you have the following prerequisites:
- API Key Authentication:
- URL: The endpoint URL for the Silent Push API.
- API Key: Your unique identifier to authenticate with the Silent Push API.
Capabilities
This Silent Push Connector provides the following capabilities:
- ASN Takedown Reputation
- Bulk Domain Information
- Bulk Domain Infratags
- Bulk Silent Push Risk Score for a List of Domains
- Bulk Silent Push Risk Score for list IPv4 Address
- Domain Enrichment
- Domain Information
- Domain Infratag
- Domain Search
- Domain Typosquatting Search
- IPv4 Enrichment
- IPv6 Enrichment
- Name Server Changes
- Name Server Changes Summary
- Silent Push Risk Score for Domain ... and so on
ASN Takedown Reputation
- Get a takedown reputation for ASN Click Here.
Bulk Domain Information
- Get domain information for multiple domains Click Here.
Bulk Domain Infratags
- Get infratags for multiple domains with optional clustering Click Here.
- Get Silent Push Risk Score for multiple domains Click Here.
- Get the Silent Push Risk Score for multiple IPv4 addresses Click Here
Domain Enrichment
- Get domain enrichment information Click Here.
Domain Information
- Get domain information Click Here.
Domain Infratag
- Get infratag for domain Click Here.
Domain Search
- Search for domains that match specific criteria, including optional name servers, WHOIS, network, and domain name patterns Click Here
Domain Typosquatting Search
- Find typosquatted variations of the domain - optionally exclude selected infrastructure Click Here.
IPv4 Enrichment
- Get IPv4 enrichment information Click Here.
IPv6 Enrichment
- Get IPv6 enrichment information Click Here.
Name Server Changes
- Get name server changes for domain Click Here.
Name Server Changes Summary
- Get a summary of name server changes for the domain Click Here.
- Get Silent Push Risk Score for domain Click Here.
- Get the Silent Push Risk Score for the IPv4 address Click Here.
WHOIS Information
- Get previously collected WHOIS information for the domain Click Here.
Name Server Reputation
- Get reputation score for a specified name server Click Here.
Name Server Reputation History
- Get reputation history for a specified name server Click Here.
Ranked ASN Reputation
- Get list of ASNs with highest reputation scores Click Here.
ASN Reputation
- Get reputation score for a specified ASN Click Here.
ASN Reputation History
- Get reputation history for a specified ASN Click Here.
Ranked Subnet Reputation
- Get list of subnets with highest reputation scores Click Here.
Subnet Reputation
- Get reputation score for a specified subnet Click Here.
Subnet Reputation History
- Get reputation history for a specified subnet Click Here.
IPv4 Reputation
- Get reputation score for a specified IPv4 address Click Here.
IPv4 Reputation History
- Get reputation history for a specified IPv4 address Click Here.
Configurations
Silent Push API Key Authentication
Authenticates using an API Key
Configuration Parameters
Parameter | Description | Type | Required |
|---|---|---|---|
url | A URL to the target host. | string | Required |
X-API-KEY | API key | string | Required |
verify_ssl | Verify SSL certificate | boolean | Optional |
http_proxy | A proxy to route requests through. | string | Optional |
Actions
ASN Reputation
Retrieve the reputation score for a specified Autonomous System Number (ASN) from Silent Push using path parameter.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/asn/{{asn}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.asn | number | Required | Autonomous System Number to get reputation for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
Input Example
{"parameters":{"explain":1},"path_parameters":{"asn":211298}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
asn_reputation | array | Output field: asn_reputation |
asn_reputation.asn | number | Output field: asn_reputation.asn |
asn_reputation.asn_reputation | number | Output field: asn_reputation.asn_reputation |
asn_reputation.asn_reputation_explain | object | Output field: asn_reputation.asn_reputation_explain |
asn_reputation.asn_reputation_explain.ips_in_asn | number | Output field: asn_reputation.asn_reputation_explain.ips_in_asn |
asn_reputation.asn_reputation_explain.ips_num_active | number | Output field: asn_reputation.asn_reputation_explain.ips_num_active |
asn_reputation.asn_reputation_explain.ips_num_listed | number | Output field: asn_reputation.asn_reputation_explain.ips_num_listed |
asn_reputation.asname | string | Name of the resource |
asn_reputation.date | number | Date value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"asn_reputation":[{}]}}
ASN Reputation History
Retrieve the historical reputation data for a specified Autonomous System Number (ASN) from Silent Push.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/history/asn/{{asn}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.asn | number | Required | Autonomous System Number to get reputation history for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3},"path_parameters":{"asn":211298}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
asn_reputation_history | array | Output field: asn_reputation_history |
asn_reputation_history.asn | number | Output field: asn_reputation_history.asn |
asn_reputation_history.asn_reputation | number | Output field: asn_reputation_history.asn_reputation |
asn_reputation_history.asn_reputation_explain | object | Output field: asn_reputation_history.asn_reputation_explain |
asn_reputation_history.asn_reputation_explain.ips_in_asn | number | Output field: asn_reputation_history.asn_reputation_explain.ips_in_asn |
asn_reputation_history.asn_reputation_explain.ips_num_active | number | Output field: asn_reputation_history.asn_reputation_explain.ips_num_active |
asn_reputation_history.asn_reputation_explain.ips_num_listed | number | Output field: asn_reputation_history.asn_reputation_explain.ips_num_listed |
asn_reputation_history.asname | string | Name of the resource |
asn_reputation_history.date | number | Date value |
Output Example
{"asn_reputation_history":[{"asn":211298,"asn_reputation":100,"asn_reputation_explain":{},"asname":"CYBER-CASA","date":20210916}]}
ASN Takedown Reputation
Retrieve the takedown reputation for a specified Autonomous System Number (ASN) from Silent Push, requiring an ASN path parameter.
Endpoint
- URL: api/v1/merge-api/explore/takedownreputation/asn/{{asn}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | show information used to calculate the reputation score. |
path_parameters.asn | string | Required | ASN to get takedown reputation for. |
Input Example
{"parameters":{"explain":1},"path_parameters":{"asn":"13614"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
takedown_reputation | object | Output field: takedown_reputation |
takedown_reputation.asn | number | Output field: takedown_reputation.asn |
takedown_reputation.asn_allocation_age | number | Output field: takedown_reputation.asn_allocation_age |
takedown_reputation.asn_allocation_date | number | Date value |
takedown_reputation.asn_takedown_reputation | number | Output field: takedown_reputation.asn_takedown_reputation |
takedown_reputation.asn_takedown_reputation_explain | object | Output field: takedown_reputation.asn_takedown_reputation_explain |
takedown_reputation.asn_takedown_reputation_explain.ips_in_asn | number | Output field: takedown_reputation.asn_takedown_reputation_explain.ips_in_asn |
takedown_reputation.asn_takedown_reputation_explain.ips_num_listed | number | Output field: takedown_reputation.asn_takedown_reputation_explain.ips_num_listed |
takedown_reputation.asn_takedown_reputation_explain.items_num_listed | number | Output field: takedown_reputation.asn_takedown_reputation_explain.items_num_listed |
takedown_reputation.asn_takedown_reputation_explain.listings_max_age | number | Output field: takedown_reputation.asn_takedown_reputation_explain.listings_max_age |
takedown_reputation.asname | string | Name of the resource |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"takedown_reputation":{"asn":13335,"asn_allocation_age":4014,"asn_allocation_date":20100714,"asn_takedown_reputation":0,"asn_takedown_reputation_explain":{},"asname":"CLOUDFLARENET, US"}}}
Bulk Domain Information
Retrieve detailed information for multiple domains using the Silent Push connector, requiring a list of domains in the input.
Endpoint
- URL: api/v1/merge-api/explore/bulk/domaininfo
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
domains | array | Optional | List of domains to get information about. |
Input Example
{"json_body":{"domains":["silentpush.com","google.com"]}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
domaininfo | array | Output field: domaininfo |
domaininfo.age | number | Output field: domaininfo.age |
domaininfo.age_score | number | Score value |
domaininfo.domain | string | Output field: domaininfo.domain |
domaininfo.first_seen | number | Output field: domaininfo.first_seen |
domaininfo.is_new | boolean | Output field: domaininfo.is_new |
domaininfo.is_new_score | number | Score value |
domaininfo.last_seen | number | Output field: domaininfo.last_seen |
domaininfo.query | string | Output field: domaininfo.query |
domaininfo.whois_age | string | Output field: domaininfo.whois_age |
domaininfo.whois_created_date | string | Date value |
domaininfo.zone | string | Output field: domaininfo.zone |
domaininfo.info | string | Output field: domaininfo.info |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domaininfo":[{},{}]}}
Bulk Domain Infratags
Retrieves infratags for multiple domains from Silent Push, optionally including clustering data. A list of domains is required.
Endpoint
- URL: api/v1/merge-api/explore/domain/infratags
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.mode | string | Optional | Build infratags from live lookup data or from PADNS data. |
parameters.match | string | Optional | Handling of self-hosted infrastructure. |
parameters.as_of | string | Optional | Build infratags from padns data where the as_of timestamp equivalent is between the first_seen and the last_seen timestamp - automatically sets mode to padns. |
parameters.clusters | number | Optional | Build clusters from infratags. |
domains | array | Optional | List of domains to get infratags for. |
Input Example
{"parameters":{"mode":"live","match":"self","as_of":"date"},"json_body":{"domains":["silawatergim.club","fooldinort.top","elbigiddim.xyz"]}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
infratags | array | Output field: infratags |
infratags.domain | string | Output field: infratags.domain |
infratags.mode | string | Output field: infratags.mode |
infratags.tag | string | Output field: infratags.tag |
tag_clusters | array | Output field: tag_clusters |
tag_clusters.25 | array | Output field: tag_clusters.25 |
tag_clusters.25.domains | array | Output field: tag_clusters.25.domains |
tag_clusters.25.match | string | Output field: tag_clusters.25.match |
tag_clusters.50 | array | Output field: tag_clusters.50 |
tag_clusters.50.file_name | string | Name of the resource |
tag_clusters.50.file | string | Output field: tag_clusters.50.file |
tag_clusters.75 | array | Output field: tag_clusters.75 |
tag_clusters.75.domains | array | Output field: tag_clusters.75.domains |
tag_clusters.75.match | string | Output field: tag_clusters.75.match |
tag_clusters.100 | array | Output field: tag_clusters.100 |
tag_clusters.100.file_name | string | Name of the resource |
tag_clusters.100.file | string | Output field: tag_clusters.100.file |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"infratags":[{},{},{}],"tag_clusters":[{"25":[{"domains":["elbigiddim.xyz","silawatergim.club","fooldinort.top"],"match":"_:cloudflare.com:_:_"}]},{"50":[]},{"75":[{"domains":["elbigiddim.xyz","fooldinort.top"],"match":"_:cloudflare.com:leaseweb:porkbunllc"}]}]}}
Bulk Silent Push Risk Score for a List of Domains
Retrieve bulk risk scores for a list of domains from Silent Push using the specified JSON body input.
Endpoint
- URL: api/v1/merge-api/explore/bulk/domain/riskscore
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
domains | array | Optional | List of domains to get risk scores for. |
Input Example
{"json_body":{"domains":["2021olympicupdates.live","massgames.space","micros0ft0nline.one"]}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"domain":"micros0ft0nline.one","sp_risk_score":100},{"domain":"massgames.space","sp_risk_score":100},{"domain":"2021olympicupdates.live","sp_risk_score":100}]}
Bulk Silent Push Risk Score for list IPv4 Address
Retrieve bulk risk scores for specified IPv4 addresses from Silent Push, requiring a JSON body with the 'ips' field.
Endpoint
- URL: api/v1/merge-api/explore/bulk/ipv4/riskscore
- Method: POST
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
ips | array | Optional | List of IPv4 addresses to get risk scores for. |
Input Example
{"json_body":{"ips":["87.246.7.245","77.247.110.204","45.153.160.139"]}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":[{"ip":"87.246.7.245","sp_risk_score":100},{"ip":"45.153.160.139","sp_risk_score":100},{"ip":"77.247.110.204","sp_risk_score":100}]}
Domain Enrichment
Retrieve detailed enrichment information for a specified domain from Silent Push, utilizing the 'domain' path parameter.
Endpoint
- URL: api/v1/merge-api/explore/enrich/domain/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | Show details of data used to calculate the different scores in the response. |
parameters.scan_data | number | Optional | show details of data collected from host scanning. |
path_parameters.domain | string | Required | Domain Name. |
Input Example
{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"domain":"olex.live"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
domain_string_frequency_probability | object | Output field: domain_string_frequency_probability |
domain_string_frequency_probability.avg_probability | number | Output field: domain_string_frequency_probability.avg_probability |
domain_string_frequency_probability.dga_probability_score | number | Score value |
domain_string_frequency_probability.domain | string | Output field: domain_string_frequency_probability.domain |
domain_string_frequency_probability.domain_string_freq_probabilities | array | Output field: domain_string_frequency_probability.domain_string_freq_probabilities |
domain_string_frequency_probability.query | string | Output field: domain_string_frequency_probability.query |
domain_urls | object | URL endpoint for the request |
domain_urls.results_summary | object | URL endpoint for the request |
domain_urls.results_summary.alexa_rank | object | URL endpoint for the request |
domain_urls.results_summary.alexa_top10k | boolean | URL endpoint for the request |
domain_urls.results_summary.alexa_top10k_score | number | URL endpoint for the request |
domain_urls.results_summary.dynamic_domain_score | number | URL endpoint for the request |
domain_urls.results_summary.is_dynamic_domain | boolean | URL endpoint for the request |
domain_urls.results_summary.is_url_shortener | boolean | URL endpoint for the request |
domain_urls.results_summary.results | number | URL endpoint for the request |
domain_urls.results_summary.url_shortener_score | number | URL endpoint for the request |
domaininfo | object | Output field: domaininfo |
domaininfo.age | number | Output field: domaininfo.age |
domaininfo.age_score | number | Score value |
domaininfo.domain | string | Output field: domaininfo.domain |
domaininfo.first_seen | number | Output field: domaininfo.first_seen |
domaininfo.is_new | boolean | Output field: domaininfo.is_new |
domaininfo.is_new_score | number | Score value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domain_string_frequency_probability":{"avg_probability":9.674,"dga_probability_score":0,"domain":"olex.live","domain_string_freq_probabilities":[],"query":"olex.live"},"domain_urls":{"results_summary":{}},"domaininfo":{"age":69,"age_score":0,"domain":"olex.live","first_seen":20220928,"is_new":false,"is_new_score":0,"last_seen":20221206,"query":"olex.live","registrar":"","whois_age":"","whois_created_date":"","zone":"live"},"ip_...
Domain Information
Retrieve detailed information for a specified domain from Silent Push, including the required path parameter 'domain'.
Endpoint
- URL: api/v1/merge-api/explore/domain/domaininfo/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.domain | string | Required | Domain to get information about. |
Input Example
{"path_parameters":{"domain":"silentpush.com"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
domaininfo | object | Output field: domaininfo |
domaininfo.age | number | Output field: domaininfo.age |
domaininfo.age_score | number | Score value |
domaininfo.domain | string | Output field: domaininfo.domain |
domaininfo.first_seen | number | Output field: domaininfo.first_seen |
domaininfo.is_new | boolean | Output field: domaininfo.is_new |
domaininfo.is_new_score | number | Score value |
domaininfo.last_seen | number | Output field: domaininfo.last_seen |
domaininfo.query | string | Output field: domaininfo.query |
domaininfo.whois_age | number | Output field: domaininfo.whois_age |
domaininfo.whois_created_date | string | Date value |
domaininfo.zone | string | Output field: domaininfo.zone |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domaininfo":{"age":536,"age_score":0,"domain":"silentpush.com","first_seen":20200121,"is_new":false,"is_new_score":0,"last_seen":20210709,"query":"silentpush.com","whois_age":536,"whois_created_date":"2020-01-20 08:14:27","zone":"com"}}}
Domain Infratag
Retrieve the infratag associated with a specified domain in Silent Push, requiring the domain as a path parameter.
Endpoint
- URL: api/v1/merge-api/explore/domain/infratag/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.mode | string | Optional | Build infratags from live lookup data or from PADNS data. |
parameters.match | string | Optional | Handling of self-hosted infrastructure. |
parameters.as_of | string | Optional | Build infratags from padns data where the as_of timestamp equivalent is between the first_seen and the last_seen timestamp - automatically sets mode to padns. |
path_parameters.domain | string | Required | Domain to get infratag for. |
Input Example
{"parameters":{"mode":"live","match":"self","as_of":"date"},"path_parameters":{"domain":"silentpush.com"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
infratag | object | Output field: infratag |
infratag.domain | string | Output field: infratag.domain |
infratag.mode | string | Output field: infratag.mode |
infratag.tag | string | Output field: infratag.tag |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"infratag":{"domain":"silentpush.com","mode":"live","tag":"outlook.com:cloudflare.com:cloudflarenet:enom"}}}
Domain Search
Performs a comprehensive search for domains using criteria like name servers, WHOIS data, and domain patterns.
Endpoint
- URL: api/v1/merge-api/explore/domain/search
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.domain | string | Optional | Name or wildcard pattern of domain names to search for. |
parameters.domain_regex | string | Optional | Re2 regular expression - overrides domain parameter. Pattern must be a valid re2 regular expression. |
parameters.nsname | string | Optional | Name server name or wildcard pattern of name server used by domains. Use nsname=self to find domains hosting their own nameservers. |
parameters.mxname | string | Optional | MX server name or wildcard pattern of mx server used by domains. Use mxname=self to find domains hosting their own mailservers. |
parameters.first_seen_min | string | Optional | Only domains that have A records seen for the first time after the given date. |
parameters.first_seen_max | string | Optional | Only domains that have A records seen for the first time before the given date. |
parameters.first_seen_min_mode | string | Optional | Match mode for first_seen_min parameter. strict (default) - select A records that do not have any timestamps before first_seen_min. any - select A records that have at least one timestamp after first_seen_min. |
parameters.first_seen_max_mode | string | Optional | Match mode for first_seen_max parameter. strict (default) - select A records that do not have any timestamps after first_seen_max. any - select A records that have at least one timestamp before first_seen_max. |
parameters.last_seen_min | string | Optional | Only domains that have A records last seen more recently than the given date. |
parameters.last_seen_max | string | Optional | Only domains that have A records last seen earlier than the given date. |
parameters.last_seen_min_mode | string | Optional | Match mode for last_seen_min parameter. strict - select A records that do not have any timestamps before last_seen_min. any (default) - select A records that have at least one timestamp after first_seen_min. |
parameters.last_seen_max_mode | string | Optional | Match mode for last_seen_max parameter. strict (default) - select A records that do not have any timestamps after last_seen_max. any - select A records that have at least one timestamp before last_seen_max. |
parameters.asnum | number | Optional | AS number to search, may be repeated multiple time for additional AS numbers. |
parameters.asn | number | Optional | Search for IP addresses in or not in the given AS numbers. default = in. |
parameters.asname | string | Optional | Search all AS numbers where the AS Name begins with. |
parameters.asname_starts_with | string | Optional | Search all AS numbers where the AS Name begins with. |
parameters.asname_contains | string | Optional | Search all AS numbers where the AS Name contains. |
parameters.asn_match | string | Optional | How to match AS numbers. any (default) - match on any asnum given or derived from asname. all - asn diversity timeline must contain all asnums given as asnum parameter or derived from asname. limit - apply min and/or max limits as specified by optional asn_match_min and asn_match_max parameters. |
parameters.asn_match_max | number | Optional | Maximum of the asnums given as asnum or derived from asname must appear in asn diversity timeline. |
parameters.asn_match_min | number | Optional | Minimum of the asnums given as asnum or derived from asname must appear in asn diversity timeline. |
parameters.network | string | Optional | Additional network and net mask. Give option as 1.1.1.1/24. Network parameter may be given multiple times and the search will be performed as an 'or' condition. |
parameters.timeline | number | Optional | Include details of IPs, ASNs, first_seen and last_seen for each domain. 0 (default) = do not include. 1 = include timeline. |
parameters.first_seen_after | string | Optional | Only domains that have been seen using the NS server in the "nsname=" parameter for the first time after the given date. |
parameters.first_seen_before | string | Optional | Only domains that have been seen using the NS server in the "nsname=" parameter for the first time before the given date. |
parameters.registrar | string | Optional | Name or partial name of registrar used to register domains - no wildcards, the given string is used in partial match - this is a slow search option and should only be used in combination with the domain match option. |
Input Example
{"parameters":{"domain":"example.com","domain_regex":".*\\.com$","nsname":"ns1.example.com","mxname":"mail.example.com","first_seen_min":"2024-01-01","first_seen_max":"2024-12-31","first_seen_min_mode":"strict","first_seen_max_mode":"strict","last_seen_min":"2024-01-01","last_seen_max":"2024-12-31","last_seen_min_mode":"any","last_seen_max_mode":"strict","asnum":12345,"asn":12345,"asname":"Example AS","asname_starts_with":"Example","asname_contains":"AS","asn_match":"any","asn_match_max":10,"asn_match_min":1,"network":"1.1.1.1/24","timeline":1,"first_seen_after":"2024-01-01","first_seen_before":"2024-12-31","registrar":"Example Registrar","email":"[email protected]","whois_date_after":"2024-01-01","nschange_from_ns":"old-ns.example.com","nschange_to_ns":"new-ns.example.com","nschange_date_after":"2024-01-01","nschange_date_before":"2024-12-31","cert_date_min":"2024-01-01","cert_date_max":"2024-12-31","cert_issuer":"Example CA","infratag":"mx:mail.example.com","asn_diversity":5,"asn_diversity_min":1,"asn_diversity_max":10,"ip_diversity_all":5,"ip_diversity_all_min":1,"ip_diversity_all_max":10,"ip_diversity_groups":3,"ip_diversity_groups_min":1,"ip_diversity_groups_max":10,"limit":100,"skip":0,"prefer":"result","max_wait":25,"with_metadata":1}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
records | array | Output field: records |
records.asn_diversity | number | Output field: records.asn_diversity |
records.host | string | Output field: records.host |
records.ip_diversity_all | number | Output field: records.ip_diversity_all |
records.ip_diversity_groups | number | Output field: records.ip_diversity_groups |
records.timeline | array | Output field: records.timeline |
records.timeline.asn | number | Output field: records.timeline.asn |
records.timeline.first_seen | string | Output field: records.timeline.first_seen |
records.timeline.ip | string | Output field: records.timeline.ip |
records.timeline.last_seen | string | Output field: records.timeline.last_seen |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"records":[{},{},{}]}}
Domain Typosquatting Search
Identify potential typosquatted domain variations and filter results by excluding specified infrastructures using Silent Push.
Endpoint
- URL: api/v1/merge-api/explore/padns/search/typosquat
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.autospoof | string | Optional | Domain name for which to find spoofed variations. Automatically generates a regex used in search. Is overridden by the regex parameter, if given. |
parameters.regex | string | Optional | Re2 regular expression. Pattern must be a valid re2 regular expression. Regex overrides any autospoof domain given. |
parameters.nsname | string | Optional | Parameters for the Domain Typosquatting Search action |
parameters.match | string | Optional | Finds domains not on (neq) or on (eq) name servers given as nsname parameters. eq - domains on name servers. neq (default) - domains not on name servers. |
parameters.net | string | Optional | Find records where ip not in (default) or in subnet defined by netmask and additional network parameters. in - find records in subnet. notin (default) - find records not in subnet. |
parameters.network | string | Optional | Additional network and net mask. Give option as 1.1.1.1/24. Up to 5 additional networks may be given. |
parameters.asnum | number | Optional | AS number to search, may be repeated multiple time for additional AS numbers. Parameter may be used with qtype=a or qtype=ptr4. Use to find records in the same AS number. |
parameters.asn | string | Optional | Find ptr4 or a records where ipv4 in or not in ASN defined by asnum. in - find records in ASN. notin (default) - find records not in ASN. |
parameters.asname | string | Optional | Search all AS numbers where the AS Name begins with. |
parameters.asname_starts_with | string | Optional | Search all AS numbers where the AS Name begins with. |
parameters.asname_contains | string | Optional | Search all AS numbers where the AS Name contains. |
parameters.reduce | string | Optional | Aggregate timestamps for qname only (host) or for each qname=>qanswer observation (full). full (default) - show timestamps for qname=>qanswer observations. host - show timestamps for distinct qname only. |
parameters.first_seen_after | string | Optional | first_seen timestamp must be on or after this time. default=-2592000 - look back 30 days. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. |
parameters.first_seen_before | string | Optional | first_seen timestamp must be on or before this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. |
parameters.last_seen_after | string | Optional | last_seen timestamp must be on or after this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. |
parameters.last_seen_before | string | Optional | last_seen timestamp must be on or before this time. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. |
parameters.as_of | string | Optional | Only return records where the as_of timestamp equivalent is between the first_seen and the last_seen timestamp. date: yyyy-mm-dd (2021-07-09) - fixed date. epoch: number (1625834953) - fixed time in epoch format. sec: negative number (-172800) - relative time seconds ago. time period: negative number with time period (-36h / -5d / -3w / -6m) - relative time ago. h - hours, d - days, w - weeks, m - months. |
parameters.sort | string | Optional | Order results in specified order - parameter may be repeated with different column names to produce a nested sorting effect. sort: last_seen/last/time_last - synonyms for last_seen column. first_seen/first/time_first - synonyms for first_seen column. query/rrname - synonyms for query column. answer/rdata - synonyms for answer_seen column. order: asc/+/up - synonyms for ascending order. desc/-/down - synonyms for descending order. |
parameters.output_format | string | Optional | padns (default) - Silent Push padns output format. cof - common output format. |
parameters.limit | number | Optional | Number of results to return. default = 100. |
parameters.skip | number | Optional | Number of results to skip. |
parameters.prefer | string | Optional | result (default) - return results if available before max_wait timeout, otherwise return job_id. job_id - return job_id immediately. |
parameters.max_wait | number | Optional | Number of seconds to wait for results before returning job_id. default = 25. value in the range from 0 to 25. |
parameters.with_metadata | number | Optional | Include metadata object in response - returned results, total results, job_id. 0 (default) = do not include. 1 = include metadata. |
Input Example
{"parameters":{"autospoof":"example.com","regex":".*\\.com$","nsname":"ns1.example.com","match":"neq","net":"notin","network":"1.1.1.1/24","asnum":12345,"asn":"notin","asname":"Example AS","asname_starts_with":"Example","asname_contains":"AS","reduce":"full","first_seen_after":"-2592000","first_seen_before":"2024-12-31","last_seen_after":"-2592000","last_seen_before":"2024-12-31","as_of":"2024-01-01","sort":"last_seen desc","output_format":"padns","limit":100,"skip":0,"prefer":"result","max_wait":25,"with_metadata":0}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
records | array | Output field: records |
records.answer | string | Output field: records.answer |
records.asn | number | Output field: records.asn |
records.asname | string | Name of the resource |
records.count | number | Count value |
records.domain | string | Output field: records.domain |
records.first_seen | string | Output field: records.first_seen |
records.last_seen | string | Output field: records.last_seen |
records.query | string | Output field: records.query |
records.type | string | Type of the resource |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"records":[{},{}]}}
IPv4 Enrichment
Retrieve detailed enrichment information for a specified IPv4 address from Silent Push, with 'ipv4' as a required path parameter.
Endpoint
- URL: api/v1/merge-api/explore/enrich/ipv4/{{ipv4}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | Show details of data used to calculate the different scores in the response. |
parameters.scan_data | number | Optional | Show details of data collected from IPv4 scanning. |
path_parameters.ipv4 | string | Required | An IPv4 address. |
Input Example
{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"ipv4":"96.43.250.251"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ip2asn | array | Output field: ip2asn |
ip2asn.asn | number | Output field: ip2asn.asn |
ip2asn.asn_allocation_age | number | Output field: ip2asn.asn_allocation_age |
ip2asn.asn_allocation_date | number | Date value |
ip2asn.asn_rank | number | Output field: ip2asn.asn_rank |
ip2asn.asn_rank_score | number | Score value |
ip2asn.asn_reputation | number | Output field: ip2asn.asn_reputation |
ip2asn.asn_reputation_explain | object | Output field: ip2asn.asn_reputation_explain |
ip2asn.asn_reputation_explain.ips_in_asn | number | Output field: ip2asn.asn_reputation_explain.ips_in_asn |
ip2asn.asn_reputation_explain.ips_num_active | number | Output field: ip2asn.asn_reputation_explain.ips_num_active |
ip2asn.asn_reputation_explain.ips_num_listed | number | Output field: ip2asn.asn_reputation_explain.ips_num_listed |
ip2asn.asn_reputation_score | number | Score value |
ip2asn.asn_takedown_reputation | number | Output field: ip2asn.asn_takedown_reputation |
ip2asn.asn_takedown_reputation_explain | object | Output field: ip2asn.asn_takedown_reputation_explain |
ip2asn.asn_takedown_reputation_score | number | Score value |
ip2asn.asname | string | Name of the resource |
ip2asn.benign_info | object | Output field: ip2asn.benign_info |
ip2asn.benign_info.actor | string | Output field: ip2asn.benign_info.actor |
ip2asn.benign_info.known_benign | boolean | Output field: ip2asn.benign_info.known_benign |
ip2asn.benign_info.tags | array | Output field: ip2asn.benign_info.tags |
ip2asn.benign_info.tags.file_name | string | Name of the resource |
ip2asn.benign_info.tags.file | string | Output field: ip2asn.benign_info.tags.file |
ip2asn.date | number | Date value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}
IPv4 Reputation
Retrieve the reputation score for a specified IPv4 address from Silent Push using path parameters.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/ipv4/{{ipv4}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.ipv4 | string | Required | IPv4 address to get reputation for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
Input Example
{"parameters":{"explain":1},"path_parameters":{"ipv4":"192.168.1.1"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ipv4_reputation | array | Output field: ipv4_reputation |
ipv4_reputation.ipv4 | string | Output field: ipv4_reputation.ipv4 |
ipv4_reputation.ipv4_reputation | number | Output field: ipv4_reputation.ipv4_reputation |
ipv4_reputation.ipv4_reputation_explain | object | Output field: ipv4_reputation.ipv4_reputation_explain |
ipv4_reputation.ipv4_reputation_explain.listing_score | number | Score value |
ipv4_reputation.ipv4_reputation_explain.asn_reputation | number | Output field: ipv4_reputation.ipv4_reputation_explain.asn_reputation |
ipv4_reputation.ipv4_reputation_explain.subnet_reputation | number | Output field: ipv4_reputation.ipv4_reputation_explain.subnet_reputation |
ipv4_reputation.date | number | Date value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ipv4_reputation":[{}]}}
IPv4 Reputation History
Retrieve the historical reputation data for a specified IPv4 address using Silent Push, requiring the ipv4 path parameter.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/history/ipv4/{{ipv4}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.ipv4 | string | Required | IPv4 address to get reputation history for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3},"path_parameters":{"ipv4":"192.168.1.1"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ipv4_reputation_history | array | Output field: ipv4_reputation_history |
ipv4_reputation_history.ipv4 | string | Output field: ipv4_reputation_history.ipv4 |
ipv4_reputation_history.ipv4_reputation | number | Output field: ipv4_reputation_history.ipv4_reputation |
ipv4_reputation_history.ipv4_reputation_explain | object | Output field: ipv4_reputation_history.ipv4_reputation_explain |
ipv4_reputation_history.ipv4_reputation_explain.listing_score | number | Score value |
ipv4_reputation_history.ipv4_reputation_explain.asn_reputation | number | Output field: ipv4_reputation_history.ipv4_reputation_explain.asn_reputation |
ipv4_reputation_history.ipv4_reputation_explain.subnet_reputation | number | Output field: ipv4_reputation_history.ipv4_reputation_explain.subnet_reputation |
ipv4_reputation_history.date | number | Date value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ipv4_reputation_history":[{}]}}
IPv6 Enrichment
Retrieve detailed enrichment information for a specified IPv6 address from Silent Push, requiring an 'ipv6' path parameter.
Endpoint
- URL: api/v1/merge-api/explore/enrich/ipv6/{{ipv6}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | Show details of data used to calculate the different scores in the response. |
parameters.scan_data | number | Optional | Show details of data collected from host scanning. |
path_parameters.ipv6 | string | Required | IPv6 address to enrich. |
Input Example
{"parameters":{"explain":1,"scan_data":1},"path_parameters":{"ipv6":"2606:4700:4700::1111"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ip2asn | array | Output field: ip2asn |
ip2asn.asn | number | Output field: ip2asn.asn |
ip2asn.asn_allocation_age | number | Output field: ip2asn.asn_allocation_age |
ip2asn.asn_allocation_date | number | Date value |
ip2asn.asn_rank | number | Output field: ip2asn.asn_rank |
ip2asn.asn_rank_score | number | Score value |
ip2asn.asn_reputation | number | Output field: ip2asn.asn_reputation |
ip2asn.asn_reputation_explain | object | Output field: ip2asn.asn_reputation_explain |
ip2asn.asn_reputation_score | number | Score value |
ip2asn.asn_takedown_reputation | number | Output field: ip2asn.asn_takedown_reputation |
ip2asn.asn_takedown_reputation_explain | object | Output field: ip2asn.asn_takedown_reputation_explain |
ip2asn.asn_takedown_reputation_score | number | Score value |
ip2asn.asname | string | Name of the resource |
ip2asn.date | number | Date value |
ip2asn.density | number | Output field: ip2asn.density |
ip2asn.ip | string | Output field: ip2asn.ip |
ip2asn.sp_risk_score | number | Score value |
ip2asn.sp_risk_score_explain | object | Output field: ip2asn.sp_risk_score_explain |
ip2asn.sp_risk_score_explain.sp_risk_score_decider | string | Unique identifier |
ip2asn.subnet | string | Output field: ip2asn.subnet |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}
Name Server Changes
Retrieve the history of name server changes for a specified domain via Silent Push, requiring the 'domain' as a path parameter.
Endpoint
- URL: api/v1/merge-api/explore/domain/nschanges/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.summary | number | Optional | Return results summary only. |
path_parameters.domain | string | Required | Domain to get name server changes for. |
Input Example
{"parameters":{"summary":1},"path_parameters":{"domain":"silentpush.com"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
nschanges | object | Output field: nschanges |
nschanges.nschanges | array | Output field: nschanges.nschanges |
nschanges.nschanges.circular_change_to | boolean | Output field: nschanges.nschanges.circular_change_to |
nschanges.nschanges.date | number | Date value |
nschanges.nschanges.days_ago | number | Output field: nschanges.nschanges.days_ago |
nschanges.nschanges.domain | string | Output field: nschanges.nschanges.domain |
nschanges.nschanges.from_expire | boolean | Output field: nschanges.nschanges.from_expire |
nschanges.nschanges.from_nameservers | array | Name of the resource |
nschanges.nschanges.from_ns_in_domain | boolean | Output field: nschanges.nschanges.from_ns_in_domain |
nschanges.nschanges.from_ns_srv_domain_density | object | Output field: nschanges.nschanges.from_ns_srv_domain_density |
nschanges.nschanges.from_ns_srv_domain_density.ns1.myhostns.com | number | Output field: nschanges.nschanges.from_ns_srv_domain_density.ns1.myhostns.com |
nschanges.nschanges.from_ns_srv_domain_density.ns2.myhostns.com | number | Output field: nschanges.nschanges.from_ns_srv_domain_density.ns2.myhostns.com |
nschanges.nschanges.from_ns_srv_domain_density.ns3.myhostns.com | number | Output field: nschanges.nschanges.from_ns_srv_domain_density.ns3.myhostns.com |
nschanges.nschanges.from_ns_srv_domain_density_low | boolean | Output field: nschanges.nschanges.from_ns_srv_domain_density_low |
nschanges.nschanges.from_parked | boolean | Output field: nschanges.nschanges.from_parked |
nschanges.nschanges.from_sinkhole | boolean | Output field: nschanges.nschanges.from_sinkhole |
nschanges.nschanges.query | string | Output field: nschanges.nschanges.query |
nschanges.nschanges.to_expire | boolean | Output field: nschanges.nschanges.to_expire |
nschanges.nschanges.to_nameservers | array | Name of the resource |
nschanges.nschanges.to_ns_in_domain | boolean | Output field: nschanges.nschanges.to_ns_in_domain |
nschanges.nschanges.to_ns_srv_domain_density | object | Output field: nschanges.nschanges.to_ns_srv_domain_density |
nschanges.nschanges.to_ns_srv_domain_density.henry.ns.cloudflare.com | number | Output field: nschanges.nschanges.to_ns_srv_domain_density.henry.ns.cloudflare.com |
nschanges.nschanges.to_ns_srv_domain_density.vida.ns.cloudflare.com | number | Unique identifier |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"nschanges":{"nschanges":[],"results_summary":{}}}}
Name Server Changes Summary
Retrieve a summary of name server changes for a specified domain, requiring the 'domain' as a path parameter.
Endpoint
- URL: api/v1/merge-api/explore/domain/nschangessummary/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.domain | string | Required | Domain to get name server changes summary for. |
Input Example
{"path_parameters":{"domain":"silentpush.com"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
nschanges | object | Output field: nschanges |
nschanges.results_summary | object | Result of the operation |
nschanges.results_summary.changes_0_7_days | number | Result of the operation |
nschanges.results_summary.changes_30_90_days | number | Result of the operation |
nschanges.results_summary.changes_7_30_days | number | Result of the operation |
nschanges.results_summary.changes_last_30_days | number | Result of the operation |
nschanges.results_summary.changes_last_7_days | number | Result of the operation |
nschanges.results_summary.changes_last_90_days | number | Result of the operation |
nschanges.results_summary.domain | string | Result of the operation |
nschanges.results_summary.has_change_circular | boolean | Result of the operation |
nschanges.results_summary.has_change_expire_from | boolean | Result of the operation |
nschanges.results_summary.has_change_expire_to | boolean | Result of the operation |
nschanges.results_summary.has_change_ns_in_domain_from | boolean | Result of the operation |
nschanges.results_summary.has_change_ns_in_domain_to | boolean | Result of the operation |
nschanges.results_summary.has_change_ns_srv_domain_density_low_from | boolean | Result of the operation |
nschanges.results_summary.has_change_ns_srv_domain_density_low_to | boolean | Result of the operation |
nschanges.results_summary.has_change_parked_from | boolean | Result of the operation |
nschanges.results_summary.has_change_parked_to | boolean | Result of the operation |
nschanges.results_summary.has_change_sinkhole_from | boolean | Result of the operation |
nschanges.results_summary.has_change_sinkhole_to | boolean | Result of the operation |
nschanges.results_summary.last_change | number | Result of the operation |
nschanges.results_summary.last_change_circular_to | boolean | Result of the operation |
nschanges.results_summary.last_change_days_ago | number | Result of the operation |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"nschanges":{"results_summary":{}}}}
Name Server Reputation
Retrieve the reputation score for a specified name server from Silent Push, using the 'nameserver' path parameter.
Endpoint
- URL: api/v1/merge-api/explore/nsreputation/nameserver/{{nameserver}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.nameserver | string | Required | Name server to get reputation for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
Input Example
{"parameters":{"explain":1},"path_parameters":{"nameserver":"a.dns-servers.net.ru"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ns_server_reputation | array | Output field: ns_server_reputation |
ns_server_reputation.date | number | Date value |
ns_server_reputation.ns_server | string | Output field: ns_server_reputation.ns_server |
ns_server_reputation.ns_server_reputation | number | Output field: ns_server_reputation.ns_server_reputation |
ns_server_reputation.ns_server_reputation_explain | object | Output field: ns_server_reputation.ns_server_reputation_explain |
ns_server_reputation.ns_server_reputation_explain.ns_server_domain_density | number | Output field: ns_server_reputation.ns_server_reputation_explain.ns_server_domain_density |
ns_server_reputation.ns_server_reputation_explain.ns_server_domains_listed | number | Output field: ns_server_reputation.ns_server_reputation_explain.ns_server_domains_listed |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ns_server_reputation":[{}]}}
Name Server Reputation History
Retrieve the reputation history of a specified name server from Silent Push, requiring the 'nameserver' path parameter.
Endpoint
- URL: api/v1/merge-api/explore/nsreputation/history/nameserver/{{nameserver}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.nameserver | string | Required | Name server to get reputation history for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3},"path_parameters":{"nameserver":"a.dns-servers.net.ru"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ns_server_reputation_history | array | Output field: ns_server_reputation_history |
ns_server_reputation_history.date | number | Date value |
ns_server_reputation_history.ns_server | string | Output field: ns_server_reputation_history.ns_server |
ns_server_reputation_history.ns_server_reputation | number | Output field: ns_server_reputation_history.ns_server_reputation |
ns_server_reputation_history.ns_server_reputation_explain | object | Output field: ns_server_reputation_history.ns_server_reputation_explain |
ns_server_reputation_history.ns_server_reputation_explain.ns_server_domain_density | number | Output field: ns_server_reputation_history.ns_server_reputation_explain.ns_server_domain_density |
ns_server_reputation_history.ns_server_reputation_explain.ns_server_domains_listed | number | Output field: ns_server_reputation_history.ns_server_reputation_explain.ns_server_domains_listed |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ns_server_reputation_history":[{}]}}
Ranked ASN Reputation
Retrieve a list of Autonomous System Numbers (ASNs) with the highest reputation scores from Silent Push.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/rank/asn
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
asn_reputation_rank | array | Output field: asn_reputation_rank |
asn_reputation_rank.asn | number | Output field: asn_reputation_rank.asn |
asn_reputation_rank.asn_allocation_age | number | Output field: asn_reputation_rank.asn_allocation_age |
asn_reputation_rank.asn_allocation_date | number | Date value |
asn_reputation_rank.asn_reputation | number | Output field: asn_reputation_rank.asn_reputation |
asn_reputation_rank.asn_reputation_explain | object | Output field: asn_reputation_rank.asn_reputation_explain |
asn_reputation_rank.asn_reputation_explain.ips_in_asn | number | Output field: asn_reputation_rank.asn_reputation_explain.ips_in_asn |
asn_reputation_rank.asn_reputation_explain.ips_num_active | number | Output field: asn_reputation_rank.asn_reputation_explain.ips_num_active |
asn_reputation_rank.asn_reputation_explain.ips_num_listed | number | Output field: asn_reputation_rank.asn_reputation_explain.ips_num_listed |
asn_reputation_rank.asname | string | Name of the resource |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"asn_reputation_rank":[{}]}}
Ranked Subnet Reputation
Retrieve a list of subnets with the highest reputation scores from Silent Push, ranked by their security reliability.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/rank/subnet
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
subnet_reputation_rank | array | Output field: subnet_reputation_rank |
subnet_reputation_rank.subnet | string | Output field: subnet_reputation_rank.subnet |
subnet_reputation_rank.subnet_reputation | number | Output field: subnet_reputation_rank.subnet_reputation |
subnet_reputation_rank.subnet_reputation_explain | object | Output field: subnet_reputation_rank.subnet_reputation_explain |
subnet_reputation_rank.subnet_reputation_explain.ips_in_subnet | number | Output field: subnet_reputation_rank.subnet_reputation_explain.ips_in_subnet |
subnet_reputation_rank.subnet_reputation_explain.ips_num_active | number | Output field: subnet_reputation_rank.subnet_reputation_explain.ips_num_active |
subnet_reputation_rank.subnet_reputation_explain.ips_num_listed | number | Output field: subnet_reputation_rank.subnet_reputation_explain.ips_num_listed |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation_rank":[{}]}}
Silent Push Risk Score for Domain
Retrieve the risk score for a specified domain from Silent Push, using the domain as a path parameter.
Endpoint
- URL: api/v1/merge-api/explore/domain/riskscore/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.domain | string | Required | Domain to get risk score for. |
Input Example
{"path_parameters":{"domain":"regardlessnotice.top"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
domain | string | Output field: domain |
sp_risk_score | number | Score value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"domain":"regardlessnotice.top","sp_risk_score":95}}
Silent Push Risk Score for IPv4
Retrieve the risk score for a specified IPv4 address from Silent Push using the provided path parameter.
Endpoint
- URL: api/v1/merge-api/explore/ipv4/riskscore/{{ipv4}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.ipv4 | string | Required | Parameters for the Silent Push Risk Score for IPv4 action |
Input Example
{"path_parameters":{"ipv4":"1.1.1.1"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
ip2asn | array | Output field: ip2asn |
ip2asn.ip | string | Output field: ip2asn.ip |
ip2asn.sp_risk_score | number | Score value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"ip2asn":[{}]}}
Subnet Reputation
Retrieve the reputation score for a specified subnet from Silent Push using the provided path parameter.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/subnet/{{subnet}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.subnet | string | Required | Subnet in CIDR notation to get reputation for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
Input Example
{"parameters":{"explain":1},"path_parameters":{"subnet":"192.168.1.0/24"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
subnet_reputation | array | Output field: subnet_reputation |
subnet_reputation.subnet | string | Output field: subnet_reputation.subnet |
subnet_reputation.subnet_reputation | number | Output field: subnet_reputation.subnet_reputation |
subnet_reputation.subnet_reputation_explain | object | Output field: subnet_reputation.subnet_reputation_explain |
subnet_reputation.subnet_reputation_explain.ips_in_subnet | number | Output field: subnet_reputation.subnet_reputation_explain.ips_in_subnet |
subnet_reputation.subnet_reputation_explain.ips_num_active | number | Output field: subnet_reputation.subnet_reputation_explain.ips_num_active |
subnet_reputation.subnet_reputation_explain.ips_num_listed | number | Output field: subnet_reputation.subnet_reputation_explain.ips_num_listed |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation":[{}]}}
Subnet Reputation History
Retrieve the historical reputation data for a specified subnet from Silent Push, requiring the 'subnet' path parameter.
Endpoint
- URL: api/v1/merge-api/explore/ipreputation/history/subnet/{{subnet}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.subnet | string | Required | Subnet in CIDR notation to get reputation history for. |
parameters.explain | number | Optional | Show details of data used to calculate the reputation score. |
parameters.limit | number | Optional | Number of results to return. |
Input Example
{"parameters":{"explain":1,"limit":3},"path_parameters":{"subnet":"192.168.1.0/24"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
subnet_reputation_history | array | Output field: subnet_reputation_history |
subnet_reputation_history.subnet | string | Output field: subnet_reputation_history.subnet |
subnet_reputation_history.subnet_reputation | number | Output field: subnet_reputation_history.subnet_reputation |
subnet_reputation_history.subnet_reputation_explain | object | Output field: subnet_reputation_history.subnet_reputation_explain |
subnet_reputation_history.subnet_reputation_explain.ips_in_subnet | number | Output field: subnet_reputation_history.subnet_reputation_explain.ips_in_subnet |
subnet_reputation_history.subnet_reputation_explain.ips_num_active | number | Output field: subnet_reputation_history.subnet_reputation_explain.ips_num_active |
subnet_reputation_history.subnet_reputation_explain.ips_num_listed | number | Output field: subnet_reputation_history.subnet_reputation_explain.ips_num_listed |
subnet_reputation_history.date | number | Date value |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"subnet_reputation_history":[{}]}}
WHOIS Information
Retrieve WHOIS data for a domain from Silent Push, requiring the domain as a path parameter.
Endpoint
- URL: api/v1/merge-api/explore/domain/whois/{{domain}}
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
path_parameters.domain | string | Required | Domain to get WHOIS information about. |
Input Example
{"path_parameters":{"domain":"silentpush.com"}}
Output
Parameter | Type | Description |
|---|---|---|
status_code | number | HTTP status code of the response |
reason | string | Response reason phrase |
whois | array | Output field: whois |
whois.address | string | Output field: whois.address |
whois.city | string | Output field: whois.city |
whois.country | string | Output field: whois.country |
whois.created | string | Output field: whois.created |
whois.date | number | Date value |
whois.domain | string | Output field: whois.domain |
whois.emails | array | Output field: whois.emails |
whois.expires | string | Output field: whois.expires |
whois.name | string | Name of the resource |
whois.nameservers | array | Name of the resource |
whois.org | string | Output field: whois.org |
whois.query | string | Output field: whois.query |
whois.registrar | string | Output field: whois.registrar |
whois.state | string | Output field: whois.state |
whois.updated | string | Output field: whois.updated |
whois.whois_server | string | Output field: whois.whois_server |
whois.zipcode | string | Output field: whois.zipcode |
Output Example
{"status_code":200,"response_headers":{},"reason":"OK","json_body":{"whois":[{}]}}
Response Headers
Header | Description | Example |
|---|---|---|
Content-Type | The media type of the resource | application/json |
Date | The date and time at which the message was originated | Thu, 01 Jan 2024 00:00:00 GMT |