Greynoise Time Series Intelligence Example is an example object payload from GreyNoise Intelligence, with 14 top-level fields. It illustrates the shape of data this provider's APIs accept or return.
{
"first_seen": "2018-01-28",
"last_seen": "2018-02-28",
"found": true,
"tags": [
"Mirai",
"Telnet Worm"
],
"actor": "Shodan.io",
"spoofable": true,
"classification": "benign",
"cves": [
"CVE-2020-1234",
"CVE-2021-2345"
],
"vpn": true,
"vpn_service": "IPVANISH_VPN",
"tor": false,
"last_seen_timestamp": "2025-01-15T12:30:45Z",
"metadata": {
"mobile": false,
"source_country": "United States",
"source_country_code": "US",
"source_city": "Seattle",
"region": "Seattle",
"organization": "DigitalOcean, LLC",
"rdns": "crawl-66-249-79-17.googlebot.com",
"asn": "AS521",
"category": "education",
"os": "Windows 7/8",
"destination_countries": [
"string"
],
"destination_country_codes": [
"US"
],
"destination_cities": [
"string"
],
"destination_asns": [
"string"
],
"single_destination": true,
"carrier": "AIS",
"datacenter": "us-west-1",
"domain": "example.com",
"rdns_parent": "example.com",
"rdns_validated": true,
"latitude": 37.7749,
"longitude": -122.4194,
"sensor_count": 10,
"sensor_hits": 10
},
"raw_data": {
"scan": [],
"ja3": [],
"hassh": [],
"http": {
"md5": [
"9764955b67107eeb9edfae76f429e783"
],
"cookie_keys": [
"expremotekey"
],
"request_authorization": [
"Bearer exampletoken",
"Basic username:password"
],
"request_cookies": [
"session_id=1234567890"
],
"request_header": [
"Content-Type: application/json",
"Accept: application/json"
],
"method": [
"GET",
"POST",
"PUT",
"DELETE"
],
"path": [
"/robots.txt"
],
"request_origin": [
"111.111.1.1"
],
"useragent": [
"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\n"
],
"ja4h": [
"ge11cn060000_4e59edc1297a_4da5efaf0cbd"
]
},
"source": {
"bytes": 1024
},
"tls": {
"cipher": [
"TLS_AES_128_GCM_SHA256",
"TLS_AES_256_GCM_SHA384"
],
"ja4": [
"t13d1516h2_8daaf6152771_02713d6af862"
]
},
"ssh": {
"key": [
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1234567890"
],
"ja4ssh": [
"c76s76_c71s59_c0s0"
]
},
"tcp": {
"ja4t": [
"64240_2-1-3-1-1-4_1460_8"
],
"ja4l": "1460_64"
}
}
}