Skip to content
Cloudflare API
Start here
API Reference

Intel

IntelASN

Get ASN Overview.
client.Intel.ASN.Get(ctx, asn, query) (*ASN, error)
GET/accounts/{account_id}/intel/asn/{asn}

IntelASNSubnets

Get ASN Subnets
client.Intel.ASN.Subnets.Get(ctx, asn, query) (*ASNSubnetGetResponse, error)
GET/accounts/{account_id}/intel/asn/{asn}/subnets

IntelDNS

Get Passive DNS by IP
client.Intel.DNS.List(ctx, params) (*V4PagePagination[DNS], error)
GET/accounts/{account_id}/intel/dns
ModelsExpand Collapse
type DNS struct{…}
Count float64optional

Total results returned based on your search parameters.

Page float64optional

Current page within paginated list of results.

PerPage float64optional

Number of results per page of results.

ReverseRecords []DNSReverseRecordoptional

Reverse DNS look-ups observed during the time period.

FirstSeen Timeoptional

First seen date of the DNS record during the time period.

formatdate
Hostname stringoptional

Hostname that the IP was observed resolving to.

LastSeen Timeoptional

Last seen date of the DNS record during the time period.

formatdate

IntelDomains

Get Domain Details
client.Intel.Domains.Get(ctx, params) (*Domain, error)
GET/accounts/{account_id}/intel/domain
ModelsExpand Collapse
type Domain struct{…}
AdditionalInformation DomainAdditionalInformationoptional

Additional information related to the host name.

SuspectedMalwareFamily stringoptional

Suspected DGA malware family.

Application DomainApplicationoptional

Application that the hostname belongs to.

ID int64optional
Name stringoptional
ContentCategories []DomainContentCategoryoptional
ID int64optional
Name stringoptional
SuperCategoryID int64optional
Domain stringoptional
InheritedContentCategories []DomainInheritedContentCategoryoptional
ID int64optional
Name stringoptional
SuperCategoryID int64optional
InheritedFrom stringoptional

Domain from which inherited_content_categories and inherited_risk_types are inherited, if applicable.

InheritedRiskTypes []DomainInheritedRiskTypeoptional
ID int64optional
Name stringoptional
SuperCategoryID int64optional
PopularityRank int64optional

Global Cloudflare 100k ranking for the last 30 days, if available for the hostname. The top ranked domain is 1, the lowest ranked domain is 100,000.

ResolvesToRefs []DomainResolvesToRefoptional

Specifies a list of references to one or more IP addresses or domain names that the domain name currently resolves to.

Value stringoptional

IP address or domain name.

RiskScore float64optional

Hostname risk score, which is a value between 0 (lowest risk) to 1 (highest risk).

RiskTypes []DomainRiskTypeoptional
ID int64optional
Name stringoptional
SuperCategoryID int64optional

IntelDomainsBulks

Get Multiple Domain Details
client.Intel.Domains.Bulks.Get(ctx, params) (*[]DomainBulkGetResponse, error)
GET/accounts/{account_id}/intel/domain/bulk

IntelDomain History

Get Domain History
client.Intel.DomainHistory.Get(ctx, params) (*[]DomainHistory, error)
GET/accounts/{account_id}/intel/domain-history
ModelsExpand Collapse
type DomainHistory struct{…}
Categorizations []DomainHistoryCategorizationoptional
Categories []DomainHistoryCategorizationsCategoryoptional
ID int64optional
Name stringoptional
End Timeoptional
formatdate
Start Timeoptional
formatdate
Domain stringoptional

IntelIPs

Get IP Overview
client.Intel.IPs.Get(ctx, params) (*[]IP, error)
GET/accounts/{account_id}/intel/ip
ModelsExpand Collapse
type IP struct{…}
BelongsToRef IPBelongsToRefoptional

Specifies a reference to the autonomous systems (AS) that the IP address belongs to.

ID stringoptional
Country stringoptional
Description stringoptional
Type IPBelongsToRefTypeoptional

Infrastructure type of this ASN.

One of the following:
const IPBelongsToRefTypeHostingProvider IPBelongsToRefType = "hosting_provider"
const IPBelongsToRefTypeISP IPBelongsToRefType = "isp"
const IPBelongsToRefTypeOrganization IPBelongsToRefType = "organization"
Value stringoptional
IP stringoptional
formatipv4
RiskTypes []IPRiskTypeoptional
ID float64optional
Name stringoptional
SuperCategoryID float64optional

IntelIP Lists

ModelsExpand Collapse
type IPList struct{…}
ID int64optional
Description stringoptional
Name stringoptional

IntelMiscategorizations

Create Miscategorization
client.Intel.Miscategorizations.New(ctx, params) (*MiscategorizationNewResponse, error)
POST/accounts/{account_id}/intel/miscategorization

IntelWhois

Get WHOIS Record
client.Intel.Whois.Get(ctx, params) (*WhoisGetResponse, error)
GET/accounts/{account_id}/intel/whois
ModelsExpand Collapse
type Whois struct{…}
CreatedDate Timeoptional
formatdate
Domain stringoptional
Nameservers []stringoptional
Registrant stringoptional
RegistrantCountry stringoptional
RegistrantEmail stringoptional
RegistrantOrg stringoptional
Registrar stringoptional
UpdatedDate Timeoptional
formatdate

IntelIndicator Feeds

Get indicator feeds owned by this account
client.Intel.IndicatorFeeds.List(ctx, query) (*SinglePage[IndicatorFeedListResponse], error)
GET/accounts/{account_id}/intel/indicator-feeds
Get indicator feed metadata
client.Intel.IndicatorFeeds.Get(ctx, feedID, query) (*IndicatorFeedGetResponse, error)
GET/accounts/{account_id}/intel/indicator-feeds/{feed_id}
Create new indicator feed
client.Intel.IndicatorFeeds.New(ctx, params) (*IndicatorFeedNewResponse, error)
POST/accounts/{account_id}/intel/indicator-feeds
Update indicator feed metadata
client.Intel.IndicatorFeeds.Update(ctx, feedID, params) (*IndicatorFeedUpdateResponse, error)
PUT/accounts/{account_id}/intel/indicator-feeds/{feed_id}
Get indicator feed data
client.Intel.IndicatorFeeds.Data(ctx, feedID, query) (*string, error)
GET/accounts/{account_id}/intel/indicator-feeds/{feed_id}/data

IntelIndicator FeedsSnapshots

Update indicator feed data
client.Intel.IndicatorFeeds.Snapshots.Update(ctx, feedID, params) (*IndicatorFeedSnapshotUpdateResponse, error)
PUT/accounts/{account_id}/intel/indicator-feeds/{feed_id}/snapshot

IntelIndicator FeedsPermissions

List indicator feed permissions
client.Intel.IndicatorFeeds.Permissions.List(ctx, query) (*[]IndicatorFeedPermissionListResponse, error)
GET/accounts/{account_id}/intel/indicator-feeds/permissions/view
Grant permission to indicator feed
client.Intel.IndicatorFeeds.Permissions.New(ctx, params) (*IndicatorFeedPermissionNewResponse, error)
PUT/accounts/{account_id}/intel/indicator-feeds/permissions/add
Revoke permission to indicator feed
client.Intel.IndicatorFeeds.Permissions.Delete(ctx, params) (*IndicatorFeedPermissionDeleteResponse, error)
PUT/accounts/{account_id}/intel/indicator-feeds/permissions/remove

IntelIndicator FeedsDownloads

IntelSinkholes

List sinkholes owned by this account
client.Intel.Sinkholes.List(ctx, query) (*SinglePage[Sinkhole], error)
GET/accounts/{account_id}/intel/sinkholes
ModelsExpand Collapse
type Sinkhole struct{…}
ID int64optional

The unique identifier for the sinkhole

AccountTag stringoptional

The account tag that owns this sinkhole

CreatedOn Timeoptional

The date and time when the sinkhole was created

formatdate-time
ModifiedOn Timeoptional

The date and time when the sinkhole was last modified

formatdate-time
Name stringoptional

The name of the sinkhole

R2Bucket stringoptional

The name of the R2 bucket to store results

R2ID stringoptional

The id of the R2 instance

IntelAttack Surface Report

IntelAttack Surface ReportIssue Types

Retrieves Security Center Issues Types
client.Intel.AttackSurfaceReport.IssueTypes.Get(ctx, query) (*SinglePage[string], error)
GET/accounts/{account_id}/intel/attack-surface-report/issue-types

IntelAttack Surface ReportIssues

Retrieves Security Center Issues
Deprecated
client.Intel.AttackSurfaceReport.Issues.List(ctx, params) (*V4PagePagination[AttackSurfaceReportIssueListResponse], error)
GET/accounts/{account_id}/intel/attack-surface-report/issues
Retrieves Security Center Issue Counts by Class
Deprecated
client.Intel.AttackSurfaceReport.Issues.Class(ctx, params) (*[]AttackSurfaceReportIssueClassResponse, error)
GET/accounts/{account_id}/intel/attack-surface-report/issues/class
Retrieves Security Center Issue Counts by Severity
Deprecated
client.Intel.AttackSurfaceReport.Issues.Severity(ctx, params) (*[]AttackSurfaceReportIssueSeverityResponse, error)
GET/accounts/{account_id}/intel/attack-surface-report/issues/severity
Retrieves Security Center Issue Counts by Type
Deprecated
client.Intel.AttackSurfaceReport.Issues.Type(ctx, params) (*[]AttackSurfaceReportIssueTypeResponse, error)
GET/accounts/{account_id}/intel/attack-surface-report/issues/type
Archives Security Center Insight
Deprecated
client.Intel.AttackSurfaceReport.Issues.Dismiss(ctx, issueID, params) (*AttackSurfaceReportIssueDismissResponse, error)
PUT/accounts/{account_id}/intel/attack-surface-report/{issue_id}/dismiss
ModelsExpand Collapse
type IssueType string
One of the following:
const IssueTypeComplianceViolation IssueType = "compliance_violation"
const IssueTypeEmailSecurity IssueType = "email_security"
const IssueTypeExposedInfrastructure IssueType = "exposed_infrastructure"
const IssueTypeInsecureConfiguration IssueType = "insecure_configuration"
const IssueTypeWeakAuthentication IssueType = "weak_authentication"
const IssueTypeConfigurationSuggestion IssueType = "configuration_suggestion"
type SeverityQueryParam string
One of the following:
const SeverityQueryParamLow SeverityQueryParam = "low"
const SeverityQueryParamModerate SeverityQueryParam = "moderate"
const SeverityQueryParamCritical SeverityQueryParam = "critical"