capabilities.work

IP Context Timeline

A 2-step recipe with GreyNoise Intelligence. We can help you get access.

Recipe · 2 steps

IP Context Timeline

with GreyNoise Intelligence · Threat Detection & Response Management

Context an IP, then chart its activity timeline when it has been seen.

  1. Retrieve the full IP context and determine whether the IP has been observed by the GreyNoise sensor network.
  2. Retrieve the IP's summary of noise activity for the chosen field over the requested window of days at the requested granularity.
What you'll need to have ready
  • apiKey: GreyNoise API key passed via the 'key' HTTP header.
  • ip: The IPv4 address to investigate (e.g. 36.32.2.102).
  • field: The field to break activity down by in the timeline.
  • days: Number of days of timeline data to show.
  • granularity: Granularity of activity date ranges (e.g. 8h or 1d).
For your developer

Arazzo workflow greynoise:ip-context-timeline, 2 operations: V3IP → getIPTimelineFieldSummary. Specs on APIs.io.