Overview
API Concepts Manage API Key
Internet Data
DNSIQ® WHOISIQ™ SSL Certificates Blacklist Lookup Host Attributes
Attack Analytics
Newly Observed Domains Newly Observed Hosts Malware Phishing Scam Content
Digital Footprint
Global Inventory API Global Inventory Schema
Coming Soon
Enrich
PassiveTotal
Actions Artifact Enrichment Exposed Services Monitor Project SSL Certificates Tag Artifact Trackers Host Attributes Passive DNS Whois Bulk Enrichment
Additional Resources
Workspace Management API
RiskIQ.com

Exposed services

The Exposed Services endpoints allow you to see recently exposed services on open ports for an IP Address.

 

What It Looks Like

Curl Example

$ curl -u $USERNAME:$KEY 'https://api.riskiq.net/pt/v2/services?query=5.53.124.235'

Sample Response


{
    "totalRecords": 1,
    "success": true,
    "results": [
		{
			"portNumber": 443,
			"firstSeen": "2018-08-29 22:04:12",
			"lastSeen": "2020-06-02 20:52:44",
			"count": 197,
			"status": "open",
			"protocol": "TCP",
			"banners": [
				{
					"banner": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
					"scanType": "http",
					"firstSeen": "2020-06-02 20:52:44",
					"lastSeen": "2020-06-02 20:52:44",
					"count": 1
				},
				{
					"banner": "220 mailking.irinaogneva.ru ESMTP Postfix (Ubuntu)",
					"scanType": "http",
					"firstSeen": "2020-05-11 05:52:09",
					"lastSeen": "2020-06-01 19:50:09",
					"count": 8
				}
			],
			"currentServices": [
				{
					"firstSeen": "2020-05-08 20:53:11",
					"lastSeen": "2020-06-02 20:52:44",
					"version": "1.18.0",
					"category": "Server",
					"label": "nginx"
				}
			],
			"recentServices": [
			    {
                    "firstSeen": "2020-04-18 05:17:13",
                    "lastSeen": "2020-05-26 16:00:06",
                    "version": null,
                    "category": "Email Server",
                    "label": "SMTP Server"
                },
                {
                    "firstSeen": "2020-04-11 23:35:29",
                    "lastSeen": "2020-05-26 16:00:06",
                    "version": "4.92.3",
                    "category": "Server",
                    "label": "Exim Internet Mailer"
                }
			],
			"mostRecentSslCert": {
				"firstSeen": 1459148400000,
				"lastSeen": 1591082058400,
				"fingerprint": "e6:a3:b4:5b:06:2d:50:9b:33:82:28:2d:19:6e:fe:97:d5:95:6c:cb",
				"sslVersion": "3",
				"expirationDate": 1615999246000,
				"issueDate": 1458232846000,
				"sha1": "e6a3b45b062d509b3382282d196efe97d5956ccb",
				"serialNumber": "13298795840390663119752826058995181320",
				"subjectCountry": null,
				"issuerCommonName": null,
				"issuerProvince": null,
				"subjectStateOrProvinceName": null,
				"subjectStreetAddress": null,
				"issuerStateOrProvinceName": null,
				"subjectSurname": null,
				"issuerCountry": null,
				"subjectLocalityName": null,
				"subjectAlternativeNames": null,
				"issuerOrganizationUnitName": null,
				"issuerOrganizationName": null,
				"subjectEmailAddress": null,
				"subjectOrganizationName": null,
				"issuerLocalityName": null,
				"subjectCommonName": null,
				"subjectProvince": null,
				"issuerGivenName": null,
				"subjectOrganizationUnitName": null,
				"issuerEmailAddress": null,
				"subjectGivenName": null,
				"subjectSerialNumber": null,
				"issuerStreetAddress": null,
				"issuerSerialNumber": null,
				"issuerSurname": null
			}
		} 
	]
}