Consolidated Endpoints

• v2: Multiple endpoints for IP Lookups (/context, /quick, /multi, /riot, etc.)
• v3: One unified /v3/ip endpoint with query parameter variations

Combined Internet Scanner + Business Services Datasets

• v2: Separate calls needed for Internet Scanner Intelligence (formerly Noise) and Business Service Intelligence (formerly RIOT) data
• v3: A single response includes both Internet Scanner and Business Service Intelligence; no need for multiple lookups for each IP

New Data Fields

• ~25 new fields added to IP Lookup and GNQL Responses, including:
  • ja4, carrier, rdns_parent, destination_port, http_paths, city, domain, and more
  • Data is limited based on Intel Module - Comparison Found Here

Performance & UX Enhancements

• Faster IP Lookup - Quick responses with richer context: The quick response format now includes slightly more information to support common lightweight workflows.
• We’ve released a new GNQL endpoint called v3/GNQL/metadata. It is faster than v3/GNQL but does not include raw context.