Data Intelligence APIs

FullHunt Data Intelligence APIs offer critical information for data intelligence and security tools. These APIs are used to query the FullHunt database, the largest asset inventory database on the Internet, for various use-cases.

Rate limiting: Requests are limited to 60 requests per minute.

note

The results are limited to 100 results per query for community accounts. Enterprise accounts have full access to Data Intelligence API.

Get Host Details

Get details about a given host.

HTTP Request

GET https://fullhunt.io/api/v1/intel/host

URL Parameters

Parameter	Description
host	The searched host

Example Request

curl "https://fullhunt.io/api/v1/intel/host?host=loja.center.kaspersky.com" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "host": "loja.center.kaspersky.com"
  },
  "results": [
    {
      "asn": 15169,
      "dns_ptr": ["154.208.186.35.bc.googleusercontent.com."],
      "domain": "kaspersky.com",
      "host": "loja.center.kaspersky.com",
      "ip_address": "35.186.208.154",
      "organization": "GOOGLE"
    }
  ],
  "total_pages": 1,
  "total_query_results": 1
}

Get Hosts With a Specific Tag

Get hosts that match a given tag.

HTTP Request

GET https://fullhunt.io/api/v1/intel/tag

URL Parameters

Parameter	Description
tag	The searched tag

Example Request

curl "https://fullhunt.io/api/v1/intel/tag?tag=ssh" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "tag": "ssh"
  },
  "results": [
    {
      "asn": 3737,
      "dns_ptr": null,
      "domain": "",
      "host": "24.229.106.49",
      "ip_address": "24.229.106.49",
      "organization": "PenTeleData"
    }
  ],
  "total_pages": 10000,
  "total_query_results": 10000
}

Get Hosts Running a Web Technology

Get hosts that are running a specific web technology.

HTTP Request

GET https://fullhunt.io/api/v1/intel/web-tech

URL Parameters

Parameter	Description
tech	The searched web technology

Example Request

curl "https://fullhunt.io/api/v1/intel/web-tech?tech=HTTP/3" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "tech": "HTTP/3"
  },
  "results": [
    {
      "asn": 0,
      "dns_ptr": null,
      "domain": "fullhunt.blue",
      "host": "fullhunt.blue",
      "ip_address": "2a06:98c1:3120::3",
      "organization": ""
    }
  ],
  "total_pages": 10000,
  "total_query_results": 10000
}

Get Hosts Running a Specific Product

Get hosts that are running a specific product.

HTTP Request

GET https://fullhunt.io/api/v1/intel/product

URL Parameters

Parameter	Description
product	The searched product

Example Request

curl "https://fullhunt.io/api/v1/intel/product?product=Citrix-NetScaler" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "product": "Citrix-NetScaler"
  },
  "results": [
    {
      "asn": 7741,
      "dns_ptr": ["199-198-251-31.cibc.com."],
      "domain": "cibc.com",
      "host": "199-198-251-31.cibc.com",
      "ip_address": "199.198.251.31",
      "organization": "CIBC World Markets"
    }
  ],
  "total_pages": 4551,
  "total_query_results": 4551
}

Get Subdomains of a Domain

Get all subdomains associated with the given domain.

HTTP Request

GET https://fullhunt.io/api/v1/intel/domain

URL Parameters

Parameter	Description
domain	The searched domain

Example Request

curl "https://fullhunt.io/api/v1/intel/domain?domain=kaspersky.com" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "domain": "kaspersky.com"
  },
  "results": [
    {
      "asn": 0,
      "dns_ptr": null,
      "domain": "kaspersky.com",
      "host": "08.kaspersky.com",
      "ip_address": "",
      "organization": ""
    }
  ],
  "total_pages": 10000,
  "total_query_results": 10000
}

Get Hosts Pointing to a Given IP Address

Get hosts pointing to a given IP address.

HTTP Request

GET https://fullhunt.io/api/v1/intel/ip-to-hosts

URL Parameters

Parameter	Description
ip	The searched IP Address

Example Request

curl "https://fullhunt.io/api/v1/intel/ip-to-hosts?ip=8.8.8.8" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "ip": "8.8.8.8"
  },
  "results": [
    {
      "asn": 15169,
      "dns_ptr": ["dns.google."],
      "domain": "dns.google",
      "host": "dns.google",
      "ip_address": "8.8.8.8",
      "organization": "Google"
    }
  ],
  "total_pages": 202,
  "total_query_results": 202
}

Get Hosts Within a Given ASN

Get hosts within a given ASN (Autonomous System Number).

HTTP Request

GET https://fullhunt.io/api/v1/intel/asn-to-hosts

URL Parameters

Parameter	Description
asn	The searched ASN

Example Request

curl "https://fullhunt.io/api/v1/intel/asn-to-hosts?asn=200107" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "asn": 200107
  },
  "results": [
    {
      "asn": 200107,
      "dns_ptr": null,
      "domain": "kaspersky-labs.com",
      "host": "42.ucp-ntfy.kaspersky-labs.com",
      "ip_address": "82.202.185.202",
      "organization": "Kaspersky Lab Switzerland GmbH"
    }
  ],
  "total_pages": 1206,
  "total_query_results": 1206
}

Get Virtual Hosts Pointing to ASN

Get virtual hosts pointing to the same ASN.

HTTP Request

GET https://fullhunt.io/api/v1/intel/asn-to-virtual-hosts

URL Parameters

Parameter	Description
asn	The searched ASN

Example Request

curl "https://fullhunt.io/api/v1/intel/asn-to-virtual-hosts?asn=200107" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "asn": 200107
  },
  "results": [
    {
      "asn": 200107,
      "dns_ptr": null,
      "domain": "kaspersky-labs.com",
      "host": "42.ucp-ntfy.kaspersky-labs.com",
      "ip_address": "82.202.185.202",
      "organization": "Kaspersky Lab Switzerland GmbH"
    }
  ],
  "total_pages": 1206,
  "total_query_results": 1206
}

Get Hosts in IP Range

Get hosts pointing to a given IP range.

HTTP Request

GET https://fullhunt.io/api/v1/intel/ip-range-to-hosts

URL Parameters

Parameter	Description
ip_start	The range start IP
ip_end	The range end IP

Example Request

curl "https://fullhunt.io/api/v1/intel/ip-range-to-hosts?ip_start=1.1.1.1&ip_end=1.1.1.255" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "ip_start": "1.1.1.1",
    "ip_end": "1.1.1.255"
  },
  "results": [
    {
      "asn": 0,
      "dns_ptr": ["one.one.one.one."],
      "domain": "cwu.edu.cn",
      "host": "1.cwu.edu.cn",
      "ip_address": "1.1.1.1",
      "organization": "CLOUDFLARENET"
    }
  ],
  "total_pages": 10000,
  "total_query_results": 10000
}

Get Hosts With Same DNS MX

Get hosts that point to the same DNS MX record.

HTTP Request

GET https://fullhunt.io/api/v1/intel/dns-mx-to-hosts

URL Parameters

Parameter	Description
dns_mx	The searched DNS MX record

Example Request

curl "https://fullhunt.io/api/v1/intel/dns-mx-to-hosts?dns_mx=mx14.kaspersky-labs.com." \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "dns_mx": "mx14.kaspersky-labs.com."
  },
  "results": [
    {
      "asn": 200350,
      "dns_ptr": null,
      "domain": "kaspersky.com",
      "host": "brand.kaspersky.com",
      "ip_address": "51.250.27.190",
      "organization": "Yandex.Cloud LLC"
    }
  ],
  "total_pages": 15,
  "total_query_results": 15
}

Get Hosts Pointing to Same DNS NS

Get hosts pointing to the same DNS NS record.

HTTP Request

GET https://fullhunt.io/api/v1/intel/dns-ns-to-hosts

URL Parameters

Parameter	Description
dns_ns	The searched DNS NS record

Example Request

curl "https://fullhunt.io/api/v1/intel/dns-ns-to-hosts?dns_ns=ns1.kasperskylabs.net." \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "query": {
    "dns_ns": "ns1.kasperskylabs.net."
  },
  "results": [
    {
      "asn": 8075,
      "dns_ptr": null,
      "domain": "kaspersky.com",
      "host": "cloud.kaspersky.com",
      "ip_address": "40.85.136.63",
      "organization": "MICROSOFT-CORP-MSN-AS-BLOCK"
    }
  ],
  "total_pages": 26,
  "total_query_results": 26
}

Common Response Fields

All Data Intelligence API responses include these common fields:

Field	Description
`query`	The search parameters used
`results`	Array of matching results
`total_pages`	Total number of pages available
`total_query_results`	Total number of results matching the query

Result Object Fields

Each result object typically contains:

Field	Description
`asn`	Autonomous System Number
`dns_ptr`	PTR DNS record
`domain`	Associated domain
`host`	Hostname
`ip_address`	IP address
`organization`	Organization name

Use Cases

Security Research

Find all hosts using specific vulnerable software
Identify hosts with specific configurations
Track technology adoption across organizations

Threat Intelligence

Discover infrastructure patterns
Identify potential attack surfaces
Monitor technology stacks

Compliance and Auditing

Inventory organizational assets
Verify security configurations
Monitor exposure across networks

Get Host Details​

Get Hosts With a Specific Tag​

Get Hosts Running a Web Technology​

Get Hosts Running a Specific Product​

Get Subdomains of a Domain​

Get Hosts Pointing to a Given IP Address​

Get Hosts Within a Given ASN​

Get Virtual Hosts Pointing to ASN​

Get Hosts in IP Range​

Get Hosts With Same DNS MX​

Get Hosts Pointing to Same DNS NS​

Common Response Fields​

Result Object Fields​

Use Cases​

Security Research​

Threat Intelligence​

Compliance and Auditing​

Get Host Details

Get Hosts With a Specific Tag

Get Hosts Running a Web Technology

Get Hosts Running a Specific Product

Get Subdomains of a Domain

Get Hosts Pointing to a Given IP Address

Get Hosts Within a Given ASN

Get Virtual Hosts Pointing to ASN

Get Hosts in IP Range

Get Hosts With Same DNS MX

Get Hosts Pointing to Same DNS NS

Common Response Fields

Result Object Fields

Use Cases

Security Research

Threat Intelligence

Compliance and Auditing