Get SSH public keys

get https://{sandfly-api-host}/v4/sshhunter/summary

Get list of SSH public keys from SSH Hunter.

Responses

Response body

object

data

array of objects

required

List of SSH Keys

data*

object

num_hosts_with_alerts

integer

required

Number of hosts with this key that have alerts.

num_hosts_current

integer

required

Number of hosts that currently have this key.

num_users_current

integer

required

Number of distinct usernames that currently have this key.

num_hosts_total

integer

required

Total number of hosts that have ever had this key.

num_users_total

integer

required

Total number of distinct usernames that have ever had this key.

hosts_deleted

boolean

required

The hosts that had this key are no longer in the Sandfly database.

has_duplicate_keys

boolean

required

One or more authorized_keys files with this key have duplicate entries for this key.

host_tags_all

array of strings

required

All tags that appear on any host this key is associated with.

host_tags_all*

zone_violation_hosts

integer

required

Number of hosts with this key that currently have an SSH Security Zone violation.

permitted_zones_count

integer

required

Number of SSH Security Zones that permit this key to appear on hosts.

integer

required

Database-assigned SSH key ID.

friendly_name

string

required

Generated (but globally consistent for this key) friendly name for key.

key_type

string

required

OpenSSH key type identifiers

ssh-ed25519 ssh-dss ssh-rsa ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521 sk-ecdsa-sha2-nistp256@openssh.com sk-ssh-ed25519@openssh.com unknown

hash

object

required

key_value

string

required

The public key.

first_seen

date-time | null

required

Time when this key was first seen on a host during a scan. If a user directly added the key to Sandfly and it hasn't yet been found on any scanned host, the value will be null.

last_seen

date-time | null

required

Time when this key was most recently seen on a host during a scan. If a user directly added the key to Sandfly and it hasn't yet been found on any scanned host, the value will be null.

key_tags

array

required

SSH key tags.

key_tags*

key_bits

integer

required

Number of bits in the key.

key_parse_error

boolean

required

Flag indicating that the key data was unable to be parsed as a valid SSH public key.

more_results

boolean

required

Indicates if there are more results to be returned.

total

int32

required

Total number of records in this page.

402

Product license does not allow SSH Hunter features.

200SSH key summary retrieved.

defaultUnexpected error