topic Re: Cisco Talos IP Reputation API Integration in Network Security

Cisco Talos IP Reputation API Integration

BalajiNagarajan — Thu, 09 Feb 2023 05:47:24 GMT

Hello,

I need to integrate the cisco talos IP reputation for validating multiple IPs and send mail.

Does Cisco Talos provide API for it?

Re: Cisco Talos IP Reputation API Integration

balaji.bandi — Thu, 09 Feb 2023 19:07:28 GMT

i used before long back as below :

https://docs.ces.cisco.com/docs/api-developer-documentation

Re: Cisco Talos IP Reputation API Integration

Brian Sak — Fri, 17 Feb 2023 16:51:49 GMT

You can use the SecureX APIs to get disposition from the integrated Talos threat intelligence feed. https://ciscosecurity-sx-00-integration-workflows.readthedocs-hosted.com/en/latest/threatresponse/query_tr.html

Re: Cisco Talos IP Reputation API Integration

Nicholas Penning — Fri, 24 Feb 2023 18:41:23 GMT

Does it required a paid account or business account with Cisco needed to use SecureX APIs?

Re: Cisco Talos IP Reputation API Integration

JonathanY — Thu, 22 Jun 2023 18:27:08 GMT

May I know if this is the only solution to get Talos intelligence observable reputation?

If below api doesn't work anymore? As I already get Response [403].

GET

('https://talosintelligence.com/sb_api/query_lookup', data={"query": "/api/v2/details/ip/", "query_entry": ip_addr, "offset": 0, "order": "ip asc"}, headers={'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.31 Safari/537.36', 'referer': 'https://talosintelligence.com/reputation_center/lookup?search=' + ip_addr})

Re: Cisco Talos IP Reputation API Integration

Brian Sak — Fri, 23 Jun 2023 21:43:05 GMT

There isn't a published public API for reputation off of the talosintelligence.com site. You can run a query off of the website (https://talosintelligence.com/reputation_center/lookup?search=4.2.2.1), but not through an API interface. The SecureX APIs mentioned in this thread will allow you do essentially do the same thing through the Talos Intelligence integration.