IP Context Timeline
A 2-step recipe with GreyNoise Intelligence. We can help you get access.
Recipe · 2 steps
IP Context Timeline
with GreyNoise Intelligence · Threat Detection & Response Management
Context an IP, then chart its activity timeline when it has been seen.
- Retrieve the full IP context and determine whether the IP has been observed by the GreyNoise sensor network.
- Retrieve the IP's summary of noise activity for the chosen field over the requested window of days at the requested granularity.
What you'll need to have ready
- apiKey: GreyNoise API key passed via the 'key' HTTP header.
- ip: The IPv4 address to investigate (e.g. 36.32.2.102).
- field: The field to break activity down by in the timeline.
- days: Number of days of timeline data to show.
- granularity: Granularity of activity date ranges (e.g. 8h or 1d).
For your developer
Arazzo workflow greynoise:ip-context-timeline, 2 operations: V3IP → getIPTimelineFieldSummary. Specs on APIs.io.