Analyze Tags Activity
analyze-tags-activityRead-only
Aggregate GreyNoise tag activity into a summary of total active IPs by classification, top tags, and per-tag details. Filter tags by query, category, or intention.
Instructions
Filter GreyNoise tags then aggregate their v3/tags/{id}/activity into a summary (total active IPs by classification, most active tags, per-tag detail). query substring-matches name/description/slug/label; category and intention are exact (case-insensitive) matches. days must be 1, 10, or 30 (default 30).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | Days of activity: 1, 10, or 30 | 30 |
| query | No | Substring to match in name, description, slug, or label | |
| category | No | Exact category match, e.g. 'activity' | |
| intention | No | Exact intention match, e.g. 'malicious', 'benign' |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| message | No | ||
| tags_detail | No | ||
| time_period | No | ||
| analyzed_tags | Yes | ||
| most_active_tags | No | ||
| total_active_ips_by_classification | No |