v1

latestOpenAPI 3.0.0Proprietary2026-07-244990150.4 KB
Callback

List Callback IPs

Retrieve a paginated list of callback IPs with filtering by attack stage, date ranges, file attributes, and scanner associations.

post/v1/callback/ips

Request body

is_stage_1boolean

Filter by stage 1 status. true = file downloaded from this IP.

is_stage_2boolean

Filter by stage 2 status. true = suspected C2 based on VT/sandbox analysis.

first_seen_afterstring date

Only include IPs first seen after this date (YYYY-MM-DD).

first_seen_beforestring date

Only include IPs first seen before this date (YYYY-MM-DD).

last_seen_afterstring date

Only include IPs last seen after this date (YYYY-MM-DD).

last_seen_beforestring date

Only include IPs last seen before this date (YYYY-MM-DD).

has_filesboolean

If true, only include IPs with associated malware files. If false, only IPs without files.

file_typestring

Filter by file MIME type (e.g. "application/x-executable").

file_namestring

Filter by file name substring match.

file_hashstring

Filter by file SHA256 hash.

scanner_ipsstring[]

Filter to IPs associated with these scanner IPs.

ipsstring[]

Filter to this specific set of callback IPs.

pageinteger

Zero-indexed page number.

page_sizeinteger

Number of results per page (1-100).

Response

OK - paginated list of callback IPs returned.

totalinteger

Total number of matching callback IPs.

pageinteger

Current page number (zero-indexed).

page_sizeinteger

Number of results per page.

Example response

{
  "items": [
    {
      "ip": "198.51.100.42",
      "source_workspaces": [
        "GreyNoise"
      ],
      "enrichment": {
        "asn": "AS4837",
        "org": "CHINA UNICOM China169 Backbone",
        "city": "Qingdao",
        "region": "Shandong",
        "country": "China",
        "country_code": "CN",
        "latitude": 36.0649,
        "longitude": 120.3804,
        "route": "119.176.0.0/12",
        "type": "isp",
        "domain": "chinaunicom.cn"
      }
    }
  ],
  "total": 142,
  "page_size": 20
}