v1

latestOpenAPI 3.0.0Proprietary2026-07-244990150.4 KB

Callback

Export Callback IPs

Export callback IPs matching the given filters as a newline-delimited plain text list. Supports the same filter parameters as the List Callback IPs endpoint.

post/v1/callback/export-ips

Request body

is_stage_1boolean

Filter by stage 1 status. true = file downloaded from this IP.

is_stage_2boolean

Filter by stage 2 status. true = suspected C2 based on VT/sandbox analysis.

first_seen_afterstring date

Only include IPs first seen after this date (YYYY-MM-DD).

first_seen_beforestring date

Only include IPs first seen before this date (YYYY-MM-DD).

last_seen_afterstring date

Only include IPs last seen after this date (YYYY-MM-DD).

last_seen_beforestring date

Only include IPs last seen before this date (YYYY-MM-DD).

has_filesboolean

If true, only include IPs with associated malware files. If false, only IPs without files.

file_typestring

Filter by file MIME type (e.g. "application/x-executable").

file_namestring

Filter by file name substring match.

file_hashstring

Filter by file SHA256 hash.

scanner_ipsstring[]

Filter to IPs associated with these scanner IPs.

ipsstring[]

Filter to this specific set of callback IPs.

Response

OK - newline-delimited list of callback IPs.