API Reference

Get fingerprint observation history for a host

get
https://api.platform.censys.io/v3/threat-hunting/host//observations/fingerprints

Retrieve fingerprint observations for a host. You may optionally include a time range by using start_time and end_time. If you do not specify a time frame, this endpoint will search the historical dataset that is available to your account.

.You must provide an observation_type and can optionally filter by port and observation_value.

To use this endpoint, your organization must have access to the Adversary Investigation module.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required

The IP address of a host.

Query Params
uuid
required

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information.

string

Start of date range (RFC3339 format, e.g., 2024-01-01T00:00:00Z). If not specified, defaults to the maximum query window back from the end time.

string

End of date range (RFC3339 format, e.g., 2024-01-31T23:59:59Z). If not specified, defaults to now. Cannot be in the future.

int32
1 to 100
Defaults to 100

Number of results per page (max 100)

string

Pagination token from previous response

int32

Filter by port number

string
enum

Filter by transport protocol when supported by the selected observation_type

Allowed:
string

Filter by observation value for the selected observation_type

string
enum
required

Fingerprint observation type to query.

Allowed:
order_by
array of strings | null

Order observations by these fields. Multiple values can be provided (e.g., ['port DESC', 'observation_value ASC']). transport_protocol ordering is only supported for observation types whose timelines expose that field; see the endpoint description for details.

order_by
Allowed:
Headers
uuid

The ID of a Censys organization to associate the request with. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Updated about 2 hours ago

Did this page help you?
Language
Credentials
Bearer
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json

Updated about 2 hours ago

Did this page help you?