This API enables operations teams, analysts, and security professionals to quickly gather intelligence to identify the ownership and provenance of IP addresses, prefixes, and ASNs.

It provides actionable intelligence to attribute the ownership and routing posture (origination, closest covering prefix) of network assets.

NOTE: API is case sensitive. Make all parameter entries lower case. All parameters in red are required.

NOTE: In each cURL example, username:password represents the API-DynID and API-Key. In a cURL command line, wrap the pair in single quotes as follows: ‘{API-DynID}:{API-Key}’. See DynID – II Attribution API Keys for more information on creating an API-DynID and API-Key.

GET /network/ips/{ip}

Example Request

cURL example retrieving information about an IP address:
$ curl -u username:password 'https://discovery.dynapis.com/network/ips/129.170.10.1?label=best&expand=routing'

Parameters

• string label — The type of label to get. Defaults to short if the short label exists, otherwise long.
  Valid values:
  short – The short label.
  long – The long label.
  best – The short label, if it exists. Otherwise, the long label (Default).
• string expand — Controls what information appears in the response. Multiple values can be specified. Default is ‘no expansion’.
  labels – All available labels.
  routing – Routing information, including origin ASNs and routed covering prefix.
  geolocation – Geolocation information, including geolocated covering prefix.
  lineage – The allocation, assignment, and registration history of the IP address or prefix.

Example Response (HTTP)

{
  "_self": "https://discovery.dynapis.com/network/ips/129.170.10.1",
  "label": "Dartmouth College",
  "routing": {
    "origin_asns": [
      10755
    ],
    "covering_prefix": "129.170.0.0/16"
  }
}

GET /network/prefixes/{prefix}

Example Request
cURL example retrieving information about an IP prefix:
$ curl -u username:password 'https://discovery.dynapis.com/network/prefixes/129.170.10.0%2F24?expand=lineage'

Parameters

• string label — The type of label to get. Defaults to short if the short label exists, otherwise long.
  Valid values:
  short – The short label.
  long – The long label.
  best – The short label, if it exists. Otherwise, the long label (Default).
• string expand — Controls what information appears in the response. Multiple values can be specified. Default is ‘no expansion’.
  labels – All available labels.
  routing – Routing information, including origin ASNs and routed covering prefix.
  geolocation – Geolocation information, including geolocated covering prefix.
  lineage – The allocation, assignment, and registration history of the IP address or prefix.

Example Response (HTTP)

{ 
 "_self": "https://discovery.dynapis.com/network/prefixes/129.170.10.0%2F24?expand=lineage",
  "label": "Dartmouth College",
  "lineage": {
    "assignment": {
      "date": "2012-04-02",
      "prefix": "129.170.0.0/16",
      "to": "Dartmouth College",
      "from": "ARIN"
    },
    "allocation": {
      "date": "1993-05-01",
      "prefix": "129.0.0.0/8",
      "to": "ARIN",
      "from": "IANA"
    },
    "registration": [
      {
        "date": "2007-12-20",
        "prefix": "129.170.0.0/16",
        "source": "LEVEL3",
        "by": "AS1784-CUST"
      }
    ]
  }
}

GET /network/asns/{asn}

Example Request

cURL example retrieving information about an ASN:
$ curl -u username:password 'https://discovery.dynapis.com/network/asns/47868?expand=observed_peers&expand=providers'

Parameters

• string label — The type of label to get. Defaults to short if the short label exists, otherwise long.
  Valid values:
  short – The short label.
  long – The long label.
  best – The short label, if it exists. Otherwise, the long label (Default).
• string expand — Controls what information appears in the response. Multiple values can be specified. Default is ‘no expansion’.
  labels – All available labels.
  routing – Routing information, including originated prefixes.
  geolocation – Geolocation information.
  lineage – The allocation, assignment, and registration history of the ASN.
  customers – The list of ASNs that are downstream of the ASN.
  providers – The list of ASNs that are upstream of the ASN.
  observed_peers – The observed peers of the ASN.
  relationships – A convenience value that expands customers, providers, and observed peers.

Example Response (HTTP)

{
  "_self": "https://discovery.dynapis.com/network/asns/47868",
  "label": "SUPRO, spol",
  "observed_peers": [
    6881,
    6939,
    8218
  ],
  "providers": [
    5588,
    39392,
    25512
  ]
}

GET /network/search

Example Request

cURL example retrieving information about network assets:
$ curl -u username:password 'https://discovery.dynapis.com/network/search?query=dyn&_limit=2'

Parameters

• string query — Required. A name for the search.
• integer _limit — Maximum number of results to return.
• integer _offset — The page position. Default is 0.
• string expand — Controls what information appears in the response. Multiple values can be specified. By default both prefixes and ASNs are expanded.
  Valid values:
  prefixes – The prefixes associated with the search result entity.
  asns – The ASNs associated with the search result entity.

Example Response (HTTP)

{
  "_self": "https://discovery.dynapis.com/network/search?query=dyn&_limit=2",
  "_count": 80,
  "_links": {
    "self": [
      {
        "_self": "https://discovery.dynapis.com/network/search?query=dyn&_limit=2"
      }
    ],
    "next": [
      {
        "_self": "https://discovery.dynapis.com/network/search?query=dyn&_limit=2&_offset=2&timestamp=1474934400"
      }
    ]
  },
  "_items": [
    {
      "name": "DYN",
      "asns": [],
      "prefixes": [
        "125.19.204.88/29",
        "125.19.211.68/30"
      ]
    },
    {
      "name": "Dyn Inc",
      "asns": [],
      "prefixes": [
        "119.81.38.160/28",
        "119.81.130.104/29",
        "159.8.67.208/28",
        "159.8.134.176/28",
        "169.57.10.48/28"
      ]
    }
  ]
}

<< Discovery & Attribution Getting Started Guide