GreyNoise Intelligence · Example Payload

Greynoise Gnql Stats Example

SecurityThreat IntelligenceCybersecurityIP ReputationVulnerability ManagementNetwork TelemetrySOC AutomationPublic APIs

Greynoise Gnql Stats Example is an example object payload from GreyNoise Intelligence, with 4 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

querycountadjusted_querystats

Example Payload

{
  "query": "last_seen:2019-07-28 classification:malicious",
  "count": 50000,
  "adjusted_query": "last_seen:2019-07-28 classification:malicious last_seen:7d",
  "stats": {
    "classifications": [
      {
        "classification": "malicious",
        "count": 5000
      }
    ],
    "spoofable": [
      {
        "spoofable": false,
        "count": 5000
      }
    ],
    "organizations": [
      {
        "organization": "DigitalOcean, LLC",
        "count": 5000
      }
    ],
    "actors": [
      {
        "actor": "Shodan.io",
        "count": 5000
      }
    ],
    "countries": [
      {
        "country": "United States",
        "count": 5000
      }
    ],
    "source_countries": [
      {
        "country": "United States",
        "count": 5000
      }
    ],
    "destination_countries": [
      {
        "country": "United States",
        "count": 5000
      }
    ],
    "tags": [
      {
        "tag": "SSH Bruteforcer",
        "id": "4c076d9c-be48-4bd1-bec4-6005e06c0f89",
        "count": 5000
      }
    ],
    "operating_systems": [
      {
        "operating_system": "Windows 7/8",
        "count": 5000
      }
    ],
    "categories": [
      {
        "category": "education",
        "count": 5000
      }
    ],
    "asns": [
      {
        "asn": "AS4134",
        "count": 5000
      }
    ]
  }
}