API Reference

Get endpoint observation history for a host

get
https://api.platform.censys.io/v3/threat-hunting/host//observations/endpoints

Retrieve historical endpoint-level hash observations for a host. This action returns time frames during which Censys observed host service endpoint body, favicon, and banner hash values. You must provide an observation_type and can optionally filter by a specific value using the observation_value parameter. You may also filter by port number.

To use this endpoint, your organization must have access to the Adversary Investigation module.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required

The IP address of a host.

Query Params
uuid
required

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information.

string

Start of date range (RFC3339 format, e.g., 2024-01-01T00:00:00Z). If not specified, defaults to the maximum query window back from the end time.

string

End of date range (RFC3339 format, e.g., 2024-01-31T23:59:59Z). If not specified, defaults to now. Cannot be in the future.

int32
1 to 100
Defaults to 100

Number of results per page (max 100)

string

Pagination token from previous response

int32

Filter by port number

string

Filter by observation value for the selected observation_type

string
enum
required

Endpoint observation type to query.

Allowed:
order_by
array of strings | null

Order observations by these fields. Multiple values can be provided (e.g., ['port DESC', 'observation_value ASC']).

order_by
Headers
uuid

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Updated 19 days ago

Language
Credentials
Bearer
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json

Updated 19 days ago