-
Notifications
You must be signed in to change notification settings - Fork 628
MHN REST APIs
Jason Trost edited this page Feb 12, 2015
·
3 revisions
Here are some example endpoints that can be queried in MHN. More documentation to follow.
Show the top attacker IPs from the past 4 hours
/api/top_attackers/?hours_ago=4
Return normalized sessions/connection data. Most of the fields returned in the records can be used as parameters for search.
/api/session/?limit=10
/api/session/?limit=10&honeypot=conpot
/api/session/?limit=100&hours_ago=1&honeypot=conpot
Return the raw hpfeeds data collected over the shockpot.events channel.
/api/feed/?channel=shockpot.events&hours_ago=1
Return the metadata associated with the IP (mainly from p0f today).
/api/metadata/?ip=8.8.8.8