GreyNoise Intelligence · JSON Structure

Greynoise Ip Response V3 Tags Structure

Type: object Properties: 11
SecurityThreat IntelligenceCybersecurityIP ReputationVulnerability ManagementNetwork TelemetrySOC AutomationPublic APIs

IPResponseV3Tags is a JSON Structure definition published by GreyNoise Intelligence, describing 11 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

id slug name category intention description references recommend_block cves created_at updated_at

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://api-evangelist.github.io/greynoise/json-structure/greynoise-ip-response-v3-tags-structure.json",
  "name": "IPResponseV3Tags",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "example": "ef0cc90d-d80c-436f-92c5-3d8f8665c9ac",
      "description": "The unique identifier for the tag.\n"
    },
    "slug": {
      "type": "string",
      "example": "mirai",
      "description": "The slugified version of the tag name.\n"
    },
    "name": {
      "type": "string",
      "example": "Mirai",
      "description": "The human-readable name for the tag.\n"
    },
    "category": {
      "type": "string",
      "example": "worm",
      "description": "Category of the IP address such as hosting or ISP.\n"
    },
    "intention": {
      "type": "string",
      "example": "malicious",
      "description": "The intent of the tag, either suspicious, malicious, benign, or unknown.\n"
    },
    "description": {
      "type": "string",
      "example": "This IP address exhibits behavior that indicates it is infected with Mirai or a Mirai-like variant of malware.",
      "description": "A detailed description of the tag, including the observed activity\nand any relevant context or details.\n"
    },
    "references": {
      "type": "array",
      "items": {
        "type": "string",
        "example": "https://en.wikipedia.org/wiki/Mirai_(malware)",
        "description": "A list of URLs or references that provide additional information\nabout the tag and its associated activity.\n"
      },
      "example": [
        "string"
      ]
    },
    "recommend_block": {
      "type": "boolean",
      "example": false,
      "description": "A boolean value indicating whether the tag should be recommended\nfor blocking or filtering purposes.\n"
    },
    "cves": {
      "type": "array",
      "items": {
        "type": "string",
        "example": "CVE-2020-1234",
        "description": "A list of CVEs associated with the tag.\n"
      },
      "example": [
        "CVE-2021-44228"
      ]
    },
    "created_at": {
      "type": "string",
      "example": "2020-04-07",
      "description": "The date and time when the tag was created.\n"
    },
    "updated_at": {
      "type": "string",
      "example": "2020-04-07",
      "description": "The date and time when the tag was last updated.\n"
    }
  }
}

Work with this as data

Every JSON Structure here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for json structure

4 MCP tools reach this
  • find_json_structuresBrowse and filter every JSON Structure in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Structure
curl "https://apis.io/api/v1/json-structures/greynoise-ip-response-v3-tags-structure"
All json structure
curl "https://apis.io/api/v1/json-structures?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.