demo_1_4.ipynb

{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": 16,
   "metadata": {},
   "outputs": [],
   "source": [
    "import requests\n",
    "import json\n",
    "from OTXv2 import OTXv2\n",
    "from OTXv2 import IndicatorTypes\n",
    "from pandas.io.json import json_normalize\n",
    "import re"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 17,
   "metadata": {},
   "outputs": [],
   "source": [
    "otx_api_endpoint = 'https://otx.alienvault.com/api/v1/indicators/IPv4/'\n",
    "otx_api_key = 'a0709959938ef8b855136a06f118a716df327ae1109c4a6c35685c42e38be4ca'\n",
    "otx = OTXv2(otx_api_key)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 18,
   "metadata": {},
   "outputs": [],
   "source": [
    "def parse_log_entry(log_entry):\n",
    "    ip_pattern = r'\\d+\\.\\d+\\.\\d+\\.\\d+'\n",
    "    ip_match = re.search(ip_pattern, log_entry)\n",
    "    if ip_match:\n",
    "        return ip_match.group()\n",
    "    else:\n",
    "        return None\n",
    "    \n"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": 19,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "['192.155.88.231']\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/2191348520.py:12: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  json_normalize(pulses[\"results\"])\n",
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/2191348520.py:15: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  json_normalize(pulse_details)\n"
     ]
    },
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>id</th>\n",
       "      <th>name</th>\n",
       "      <th>description</th>\n",
       "      <th>author_name</th>\n",
       "      <th>modified</th>\n",
       "      <th>created</th>\n",
       "      <th>tags</th>\n",
       "      <th>references</th>\n",
       "      <th>public</th>\n",
       "      <th>adversary</th>\n",
       "      <th>...</th>\n",
       "      <th>indicators</th>\n",
       "      <th>revision</th>\n",
       "      <th>groups</th>\n",
       "      <th>in_group</th>\n",
       "      <th>is_subscribing</th>\n",
       "      <th>author.username</th>\n",
       "      <th>author.id</th>\n",
       "      <th>author.avatar_url</th>\n",
       "      <th>author.is_subscribed</th>\n",
       "      <th>author.is_following</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>606d75c11c08ff94089a9430</td>\n",
       "      <td>Georgs Honeypot</td>\n",
       "      <td>Honeypot</td>\n",
       "      <td>georgengelmann</td>\n",
       "      <td>2024-04-01T05:00:05.572000</td>\n",
       "      <td>2021-04-07T09:05:05.353000</td>\n",
       "      <td>[honeypot, kfsensor, rdp, ssh]</td>\n",
       "      <td>[]</td>\n",
       "      <td>1</td>\n",
       "      <td></td>\n",
       "      <td>...</td>\n",
       "      <td>[{'id': 3579600234, 'indicator': '77.83.36.25'...</td>\n",
       "      <td>3</td>\n",
       "      <td>[{'name': 'aavega', 'id': 1344}, {'name': 'fee...</td>\n",
       "      <td>True</td>\n",
       "      <td>None</td>\n",
       "      <td>georgengelmann</td>\n",
       "      <td>144450</td>\n",
       "      <td>https://otx.alienvault.com/assets/images/defau...</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1 rows × 25 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "                         id             name description     author_name  \\\n",
       "0  606d75c11c08ff94089a9430  Georgs Honeypot    Honeypot  georgengelmann   \n",
       "\n",
       "                     modified                     created  \\\n",
       "0  2024-04-01T05:00:05.572000  2021-04-07T09:05:05.353000   \n",
       "\n",
       "                             tags references  public adversary  ...  \\\n",
       "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
       "\n",
       "                                          indicators revision  \\\n",
       "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        3   \n",
       "\n",
       "                                              groups in_group is_subscribing  \\\n",
       "0  [{'name': 'aavega', 'id': 1344}, {'name': 'fee...     True           None   \n",
       "\n",
       "  author.username  author.id  \\\n",
       "0  georgengelmann     144450   \n",
       "\n",
       "                                   author.avatar_url  author.is_subscribed  \\\n",
       "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
       "\n",
       "  author.is_following  \n",
       "0               False  \n",
       "\n",
       "[1 rows x 25 columns]"
      ]
     },
     "execution_count": 19,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "\n",
    "# ip_addresses = ['192.155.88.231']\n",
    "ip_addresses = []\n",
    "\n",
    "log_entry = '192.155.88.231 - - [15/Mar/2024:10:12:35 +0000] \"GET /index.html HTTP/1.1\" 200 1234'\n",
    "ip_address = parse_log_entry(log_entry)\n",
    "ip_addresses.append(ip_address)\n",
    "print(ip_addresses)\n",
    "\n",
    "for ip in ip_addresses:\n",
    "    pulses = otx.search_pulses('192.155.88.231')\n",
    "    \n",
    "json_normalize(pulses[\"results\"])\n",
    "pulse_id = pulses[\"results\"][1][\"id\"]\n",
    "pulse_details = otx.get_pulse_details(pulse_id)\n",
    "json_normalize(pulse_details)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 20,
   "metadata": {},
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:3: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulses[\"results\"]))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                          id  \\\n",
      "0   5a64f74f0e543738c12bc973   \n",
      "1   606d75c11c08ff94089a9430   \n",
      "2   6421c1a0fd8452595dc148fa   \n",
      "3   6436dcf392fc98e8f9a409cb   \n",
      "4   643b8125732adb6886a0f84e   \n",
      "5   643cd285eb542ec6a514c4b3   \n",
      "6   643ddd8d64afb0606ab1adf4   \n",
      "7   643e23deb07096c6a0c80523   \n",
      "8   64475e5d210f5f96b7cffce7   \n",
      "9   64475fdc8ee7be5d4d98d42f   \n",
      "10  64478d339060d09d787cb457   \n",
      "11  645ade889f790ef243637b5a   \n",
      "12  645eb6e2b739fb43e61cac18   \n",
      "13  64630dff1b11ca82b17d6fdd   \n",
      "14  64e795dbed0f4d5bbf9eb826   \n",
      "15  64e795e10b852794373b9d6a   \n",
      "16  6507dfa8a4c0427f993c6827   \n",
      "17  65137059e9ad94f8c370425a   \n",
      "18  6513705dbbd7a65cba78cf09   \n",
      "19  6513705e8f578c7749294326   \n",
      "20  65137068f60f7b136e3af78f   \n",
      "21  6513706a908d4e398e7630eb   \n",
      "22  6513707765ad11faccd2763c   \n",
      "23  651636970aed4509269da584   \n",
      "24  654a06cbf41963689209d6e3   \n",
      "\n",
      "                                                 name  \\\n",
      "0   Webscanners with Bad Requests - HTTP Status 40...   \n",
      "1                                     Georgs Honeypot   \n",
      "2         IP Addresses Logged by the Rosethorn PotNet   \n",
      "3              20230412 Most Active Threat Indicators   \n",
      "4           Honeypot Visitors (TCP/3306) - 2023-04-15   \n",
      "5             Honeypot Visitors (TCP/80) - 2023-04-16   \n",
      "6   Lion Team_Honeypots_Bruteforce_Source_IP 2023/...   \n",
      "7             Honeypot Visitors (TCP/23) - 2023-04-17   \n",
      "8             Honeypot Visitors (TCP/23) - 2023-04-24   \n",
      "9             Honeypot Visitors (TCP/80) - 2023-04-24   \n",
      "10                 nmap Scanning Hosts for 2023-04-24   \n",
      "11  Lion Team_Honeypots_Bruteforce_Source_IP 2023/...   \n",
      "12                         Honeypot Hits (2023-05-12)   \n",
      "13          Honeypot Visitors (TCP/5900) - 2023-05-15   \n",
      "14  IP Addresses Logged by the Rosethorn PotNet (b...   \n",
      "15  IP Addresses Logged by the Rosethorn PotNet (b...   \n",
      "16  Georgs Honeypot                    (Pulse cura...   \n",
      "17                                    Georgs Honeypot   \n",
      "18                                    Georgs Honeypot   \n",
      "19                                    Georgs Honeypot   \n",
      "20                                   Georgs Honeypot    \n",
      "21                                   Georgs Honeypot    \n",
      "22                                   Georgs Honeypot    \n",
      "23        IP Addresses Logged by the Rosethorn PotNet   \n",
      "24                                                  s   \n",
      "\n",
      "                                          description             author_name  \\\n",
      "0   Webscanners who&amp;amp;amp;#39;s requests res...                  david3   \n",
      "1                                            Honeypot          georgengelmann   \n",
      "2   Malicious activity detections from a small net...            WhiteFireOCN   \n",
      "3   12 Apr 2023 : Most Active Threat Indicators\\n#...  chinpang.yeo.starlight   \n",
      "4   All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "5   All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "6                SSH honeypot authentication attempts              tjwang0324   \n",
      "7   All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "8   All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "9   All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "10  IPV4 Addresses of attackers port scanning priv...              jamesbrine   \n",
      "11               SSH honeypot authentication attempts              tjwang0324   \n",
      "12                                                                   Ozark046   \n",
      "13  All IP addresses that hit our honeypot network...            WhiteFireOCN   \n",
      "14                                                                   OctoSeek   \n",
      "15                                                                   OctoSeek   \n",
      "16                                                                   OctoSeek   \n",
      "17                                                                  scoreblue   \n",
      "18                                                                  scoreblue   \n",
      "19                                                                  scoreblue   \n",
      "20                                                                  scoreblue   \n",
      "21                                                                  scoreblue   \n",
      "22                                                                  scoreblue   \n",
      "23                                                               richardsonrj   \n",
      "24                                                                   ragewire   \n",
      "\n",
      "                      modified                     created tags references  \\\n",
      "0   2024-04-01T04:55:10.309000  2018-01-21T20:25:51.668000   []         []   \n",
      "1   2024-04-01T05:00:05.572000  2021-04-07T09:05:05.353000   []         []   \n",
      "2   2024-04-01T04:57:14.578000  2023-03-27T16:17:36.094000   []         []   \n",
      "3          2023-04-12T16:31:47         2023-04-12T16:31:47   []         []   \n",
      "4   2023-04-16T05:01:28.278000  2023-04-16T05:01:25.517000   []         []   \n",
      "5   2023-04-17T05:00:57.390000  2023-04-17T05:00:53.497000   []         []   \n",
      "6   2023-04-18T00:00:13.218000  2023-04-18T00:00:13.218000   []         []   \n",
      "7   2023-04-18T05:00:48.289000  2023-04-18T05:00:12.089000   []         []   \n",
      "8   2023-04-25T05:06:31.140000  2023-04-25T05:00:13.144000   []         []   \n",
      "9   2023-05-03T13:57:56.698000  2023-04-25T05:06:36.625000   []         []   \n",
      "10  2023-04-25T08:20:03.149000  2023-04-25T08:20:03.149000   []         []   \n",
      "11  2023-05-10T00:00:08.056000  2023-05-10T00:00:08.056000   []         []   \n",
      "12  2023-05-12T22:00:01.607000  2023-05-12T22:00:01.607000   []         []   \n",
      "13  2023-05-16T05:00:47.139000  2023-05-16T05:00:47.139000   []         []   \n",
      "14  2023-09-23T00:03:13.532000  2023-08-24T17:39:39.076000   []         []   \n",
      "15  2023-09-23T00:03:13.532000  2023-08-24T17:39:45.778000   []         []   \n",
      "16  2023-10-18T05:00:18.068000  2023-09-18T05:27:04.060000   []         []   \n",
      "17  2023-10-26T23:03:16.623000  2023-09-26T23:59:21.556000   []         []   \n",
      "18  2023-10-26T23:03:16.623000  2023-09-26T23:59:25.506000   []         []   \n",
      "19  2023-10-26T23:03:16.623000  2023-09-26T23:59:26.406000   []         []   \n",
      "20  2023-10-26T23:03:16.623000  2023-09-26T23:59:36.702000   []         []   \n",
      "21  2023-10-26T23:03:16.623000  2023-09-26T23:59:38.077000   []         []   \n",
      "22  2023-10-26T23:03:16.623000  2023-09-26T23:59:51.529000   []         []   \n",
      "23  2023-10-29T00:01:02.615000  2023-09-29T02:29:43.125000   []         []   \n",
      "24  2023-12-07T09:00:15.879000  2023-11-07T09:43:39.447000   []         []   \n",
      "\n",
      "    public adversary  ...    TLP revision groups in_group is_subscribing  \\\n",
      "0        1            ...  white        4     []    False           None   \n",
      "1        1            ...  white        3     []    False           None   \n",
      "2        1            ...  green        4     []    False           None   \n",
      "3        1            ...  green        1     []    False           None   \n",
      "4        1            ...  green        1     []    False           None   \n",
      "5        1            ...  green        1     []    False           None   \n",
      "6        1            ...  green        1     []    False           None   \n",
      "7        1            ...  green        1     []    False           None   \n",
      "8        1            ...  green        1     []    False           None   \n",
      "9        1            ...  green        1     []    False           None   \n",
      "10       1            ...  green        1     []    False           None   \n",
      "11       1            ...  green        1     []    False           None   \n",
      "12       1            ...  white        1     []    False           None   \n",
      "13       1            ...  green        1     []    False           None   \n",
      "14       1            ...  green        1     []    False           None   \n",
      "15       1            ...  green        1     []    False           None   \n",
      "16       1            ...  white        1     []    False           None   \n",
      "17       1            ...  white        1     []    False           None   \n",
      "18       1            ...  white        1     []    False           None   \n",
      "19       1            ...  white        1     []    False           None   \n",
      "20       1            ...  white        1     []    False           None   \n",
      "21       1            ...  white        1     []    False           None   \n",
      "22       1            ...  white        1     []    False           None   \n",
      "23       1            ...  green        1     []    False           None   \n",
      "24       1            ...  white        1     []    False           None   \n",
      "\n",
      "           author.username author.id  \\\n",
      "0                   david3      2807   \n",
      "1           georgengelmann    144450   \n",
      "2             WhiteFireOCN    217809   \n",
      "3   chinpang.yeo.starlight    190047   \n",
      "4             WhiteFireOCN    217809   \n",
      "5             WhiteFireOCN    217809   \n",
      "6               tjwang0324     57145   \n",
      "7             WhiteFireOCN    217809   \n",
      "8             WhiteFireOCN    217809   \n",
      "9             WhiteFireOCN    217809   \n",
      "10              jamesbrine     83487   \n",
      "11              tjwang0324     57145   \n",
      "12                Ozark046     45974   \n",
      "13            WhiteFireOCN    217809   \n",
      "14                OctoSeek    243548   \n",
      "15                OctoSeek    243548   \n",
      "16                OctoSeek    243548   \n",
      "17               scoreblue    254100   \n",
      "18               scoreblue    254100   \n",
      "19               scoreblue    254100   \n",
      "20               scoreblue    254100   \n",
      "21               scoreblue    254100   \n",
      "22               scoreblue    254100   \n",
      "23            richardsonrj    205529   \n",
      "24                ragewire    259984   \n",
      "\n",
      "                                    author.avatar_url author.is_subscribed  \\\n",
      "0   /otxapi/users/avatar_image/media/avatars/david...                False   \n",
      "1   https://otx.alienvault.com/assets/images/defau...                False   \n",
      "2   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "3   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "4   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "5   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "6   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "7   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "8   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "9   /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "10  /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "11  /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "12  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "13  /otxapi/users/avatar_image/media/avatars/user_...                False   \n",
      "14  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "15  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "16  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "17  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "18  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "19  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "20  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "21  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "22  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "23  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "24  https://otx.alienvault.com/assets/images/defau...                False   \n",
      "\n",
      "   author.is_following  \n",
      "0                False  \n",
      "1                False  \n",
      "2                False  \n",
      "3                False  \n",
      "4                False  \n",
      "5                False  \n",
      "6                False  \n",
      "7                False  \n",
      "8                False  \n",
      "9                False  \n",
      "10               False  \n",
      "11               False  \n",
      "12               False  \n",
      "13               False  \n",
      "14               False  \n",
      "15               False  \n",
      "16               False  \n",
      "17               False  \n",
      "18               False  \n",
      "19               False  \n",
      "20               False  \n",
      "21               False  \n",
      "22               False  \n",
      "23               False  \n",
      "24               False  \n",
      "\n",
      "[25 rows x 24 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  5a64f74f0e543738c12bc973   \n",
      "\n",
      "                                                name  \\\n",
      "0  Webscanners with Bad Requests - HTTP Status 40...   \n",
      "\n",
      "                                         description author_name  \\\n",
      "0  Webscanners who&amp;amp;amp;#39;s requests res...      david3   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2024-04-01T04:55:10.309000  2018-01-21T20:25:51.668000   \n",
      "\n",
      "                                                tags references  public  \\\n",
      "0  [webscanner, bruteforce, badrequest, probing, ...         []       1   \n",
      "\n",
      "  adversary  ...                                         indicators revision  \\\n",
      "0            ...  [{'id': 3631657412, 'indicator': '5.161.117.81...        4   \n",
      "\n",
      "                                              groups in_group is_subscribing  \\\n",
      "0  [{'name': 'Bad Bots', 'id': 965}, {'name': 'Bl...     True           None   \n",
      "\n",
      "  author.username  author.id  \\\n",
      "0          david3       2807   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/david...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id             name description     author_name  \\\n",
      "0  606d75c11c08ff94089a9430  Georgs Honeypot    Honeypot  georgengelmann   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2024-04-01T05:01:03.727000  2021-04-07T09:05:05.353000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        3   \n",
      "\n",
      "                                              groups in_group is_subscribing  \\\n",
      "0  [{'name': 'aavega', 'id': 1344}, {'name': 'fee...     True           None   \n",
      "\n",
      "  author.username  author.id  \\\n",
      "0  georgengelmann     144450   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                         name  \\\n",
      "0  6421c1a0fd8452595dc148fa  IP Addresses Logged by the Rosethorn PotNet   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  Malicious activity detections from a small net...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created tags references  \\\n",
      "0  2024-04-01T04:57:14.578000  2023-03-27T16:17:36.094000   []         []   \n",
      "\n",
      "   public adversary  ...                                         indicators  \\\n",
      "0       1            ...  [{'id': 3652733727, 'indicator': '114.33.179.4...   \n",
      "\n",
      "  revision                                             groups in_group  \\\n",
      "0        4  [{'name': 'APT1', 'id': 2025}, {'name': 'mango...     True   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                    name  \\\n",
      "0  6436dcf392fc98e8f9a409cb  20230412 Most Active Threat Indicators   \n",
      "\n",
      "                                         description             author_name  \\\n",
      "0  12 Apr 2023 : Most Active Threat Indicators\\n#...  chinpang.yeo.starlight   \n",
      "\n",
      "              modified              created  \\\n",
      "0  2023-04-12T16:31:47  2023-04-12T16:31:47   \n",
      "\n",
      "                                                tags  \\\n",
      "0  [united, china, india, united kingdom, japan, ...   \n",
      "\n",
      "                                          references  public adversary  ...  \\\n",
      "0  [https://www.linkedin.com/posts/starlightintel...       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3527796095, 'indicator': '111.22.74.14...        1     []    False   \n",
      "\n",
      "  is_subscribing         author.username  author.id  \\\n",
      "0           None  chinpang.yeo.starlight     190047   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                       name  \\\n",
      "0  643b8125732adb6886a0f84e  Honeypot Visitors (TCP/3306) - 2023-04-15   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-16T05:01:28.278000  2023-04-16T05:01:25.517000   \n",
      "\n",
      "                                   tags references  public adversary  ...  \\\n",
      "0  [mysql, tcp/3306, botnet, port 3306]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3603230379, 'indicator': '198.199.97.1...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                     name  \\\n",
      "0  643cd285eb542ec6a514c4b3  Honeypot Visitors (TCP/80) - 2023-04-16   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-17T05:00:57.390000  2023-04-17T05:00:53.497000   \n",
      "\n",
      "                              tags references  public adversary  ...  \\\n",
      "0  [http, tcp/80, botnet, port 80]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3664649892, 'indicator': '34.94.1.251'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  643ddd8d64afb0606ab1adf4   \n",
      "\n",
      "                                                name  \\\n",
      "0  Lion Team_Honeypots_Bruteforce_Source_IP 2023/...   \n",
      "\n",
      "                            description author_name  \\\n",
      "0  SSH honeypot authentication attempts  tjwang0324   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-18T00:00:13.218000  2023-04-18T00:00:13.218000   \n",
      "\n",
      "                     tags references  public adversary  ...  \\\n",
      "0  [Bruteforce, Honeypot]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3651466389, 'indicator': '14.225.255.7...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None      tjwang0324      57145   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                     name  \\\n",
      "0  643e23deb07096c6a0c80523  Honeypot Visitors (TCP/23) - 2023-04-17   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-18T05:00:48.289000  2023-04-18T05:00:12.089000   \n",
      "\n",
      "                                tags references  public adversary  ...  \\\n",
      "0  [telnet, tcp/23, botnet, port 23]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3576434615, 'indicator': '211.229.68.2...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                     name  \\\n",
      "0  64475e5d210f5f96b7cffce7  Honeypot Visitors (TCP/23) - 2023-04-24   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-25T05:06:31.140000  2023-04-25T05:00:13.144000   \n",
      "\n",
      "                                tags references  public adversary  ...  \\\n",
      "0  [telnet, tcp/23, botnet, port 23]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3669166000, 'indicator': '156.195.228....        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                     name  \\\n",
      "0  64475fdc8ee7be5d4d98d42f  Honeypot Visitors (TCP/80) - 2023-04-24   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-05-03T13:57:56.698000  2023-04-25T05:06:36.625000   \n",
      "\n",
      "                              tags references  public adversary  ...  \\\n",
      "0  [http, tcp/80, botnet, port 80]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 1011951688, 'indicator': '93.116.219.1...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                name  \\\n",
      "0  64478d339060d09d787cb457  nmap Scanning Hosts for 2023-04-24   \n",
      "\n",
      "                                         description author_name  \\\n",
      "0  IPV4 Addresses of attackers port scanning priv...  jamesbrine   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-04-25T08:20:03.149000  2023-04-25T08:20:03.149000   \n",
      "\n",
      "                          tags  \\\n",
      "0  [nmap, port-scan, honeypot]   \n",
      "\n",
      "                                          references  public adversary  ...  \\\n",
      "0  [https://jamesbrine.com.au/nmap-scanning-list-...       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3634920555, 'indicator': '150.158.34.2...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None      jamesbrine      83487   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  645ade889f790ef243637b5a   \n",
      "\n",
      "                                                name  \\\n",
      "0  Lion Team_Honeypots_Bruteforce_Source_IP 2023/...   \n",
      "\n",
      "                            description author_name  \\\n",
      "0  SSH honeypot authentication attempts  tjwang0324   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-05-10T00:00:08.056000  2023-05-10T00:00:08.056000   \n",
      "\n",
      "                     tags references  public adversary  ...  \\\n",
      "0  [Bruteforce, Honeypot]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3613689350, 'indicator': '183.105.164....        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None      tjwang0324      57145   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                        name description  \\\n",
      "0  645eb6e2b739fb43e61cac18  Honeypot Hits (2023-05-12)               \n",
      "\n",
      "  author_name                    modified                     created tags  \\\n",
      "0    Ozark046  2023-05-12T22:00:01.607000  2023-05-12T22:00:01.607000   []   \n",
      "\n",
      "  references  public adversary  ...  \\\n",
      "0         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3676379951, 'indicator': '218.92.0.15'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None        Ozark046      45974   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                       name  \\\n",
      "0  64630dff1b11ca82b17d6fdd  Honeypot Visitors (TCP/5900) - 2023-05-15   \n",
      "\n",
      "                                         description   author_name  \\\n",
      "0  All IP addresses that hit our honeypot network...  WhiteFireOCN   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-05-16T05:00:47.139000  2023-05-16T05:00:47.139000   \n",
      "\n",
      "                                 tags references  public adversary  ...  \\\n",
      "0  [vnc, tcp/5900, botnet, port 5900]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3675931677, 'indicator': '31.41.244.10...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    WhiteFireOCN     217809   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  /otxapi/users/avatar_image/media/avatars/user_...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  64e795dbed0f4d5bbf9eb826   \n",
      "\n",
      "                                                name description author_name  \\\n",
      "0  IP Addresses Logged by the Rosethorn PotNet (b...                OctoSeek   \n",
      "\n",
      "                     modified                     created tags references  \\\n",
      "0  2023-09-23T00:03:13.532000  2023-08-24T17:39:39.076000   []         []   \n",
      "\n",
      "   public adversary  ...                                         indicators  \\\n",
      "0       1            ...  [{'id': 3652733727, 'indicator': '114.33.179.4...   \n",
      "\n",
      "  revision groups in_group is_subscribing author.username  author.id  \\\n",
      "0        1     []    False           None        OctoSeek     243548   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  64e795e10b852794373b9d6a   \n",
      "\n",
      "                                                name description author_name  \\\n",
      "0  IP Addresses Logged by the Rosethorn PotNet (b...                OctoSeek   \n",
      "\n",
      "                     modified                     created tags references  \\\n",
      "0  2023-09-23T00:03:13.532000  2023-08-24T17:39:45.778000   []         []   \n",
      "\n",
      "   public adversary  ...                                         indicators  \\\n",
      "0       1            ...  [{'id': 3652733727, 'indicator': '114.33.179.4...   \n",
      "\n",
      "  revision                             groups in_group is_subscribing  \\\n",
      "0        1  [{'name': 'mangovo', 'id': 2067}]     True           None   \n",
      "\n",
      "  author.username  author.id  \\\n",
      "0        OctoSeek     243548   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id  \\\n",
      "0  6507dfa8a4c0427f993c6827   \n",
      "\n",
      "                                                name description author_name  \\\n",
      "0  Georgs Honeypot                    (Pulse cura...                OctoSeek   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-18T05:00:18.068000  2023-09-18T05:27:04.060000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None        OctoSeek     243548   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id             name description author_name  \\\n",
      "0  65137059e9ad94f8c370425a  Georgs Honeypot               scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:21.556000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id             name description author_name  \\\n",
      "0  6513705dbbd7a65cba78cf09  Georgs Honeypot               scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:25.506000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id             name description author_name  \\\n",
      "0  6513705e8f578c7749294326  Georgs Honeypot               scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:26.406000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id              name description author_name  \\\n",
      "0  65137068f60f7b136e3af78f  Georgs Honeypot                scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:36.702000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id              name description author_name  \\\n",
      "0  6513706a908d4e398e7630eb  Georgs Honeypot                scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:38.077000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id              name description author_name  \\\n",
      "0  6513707765ad11faccd2763c  Georgs Honeypot                scoreblue   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-10-26T23:03:16.623000  2023-09-26T23:59:51.529000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None       scoreblue     254100   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "                         id                                         name  \\\n",
      "0  651636970aed4509269da584  IP Addresses Logged by the Rosethorn PotNet   \n",
      "\n",
      "  description   author_name                    modified  \\\n",
      "0              richardsonrj  2023-10-29T00:01:02.615000   \n",
      "\n",
      "                      created tags references  public adversary  ...  \\\n",
      "0  2023-09-29T02:29:43.125000   []         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3652733727, 'indicator': '114.33.179.4...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None    richardsonrj     205529   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n",
      "                         id name description author_name  \\\n",
      "0  654a06cbf41963689209d6e3    s                ragewire   \n",
      "\n",
      "                     modified                     created  \\\n",
      "0  2023-12-07T09:00:15.879000  2023-11-07T09:43:39.447000   \n",
      "\n",
      "                             tags references  public adversary  ...  \\\n",
      "0  [honeypot, kfsensor, rdp, ssh]         []       1            ...   \n",
      "\n",
      "                                          indicators revision groups in_group  \\\n",
      "0  [{'id': 3579600234, 'indicator': '77.83.36.25'...        1     []    False   \n",
      "\n",
      "  is_subscribing author.username  author.id  \\\n",
      "0           None        ragewire     259984   \n",
      "\n",
      "                                   author.avatar_url  author.is_subscribed  \\\n",
      "0  https://otx.alienvault.com/assets/images/defau...                 False   \n",
      "\n",
      "  author.is_following  \n",
      "0               False  \n",
      "\n",
      "[1 rows x 25 columns]\n"
     ]
    },
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/var/folders/fn/f809r2_97k9cv7vfz0vgt_w00000gn/T/ipykernel_4913/140068978.py:7: FutureWarning: pandas.io.json.json_normalize is deprecated, use pandas.json_normalize instead.\n",
      "  print(json_normalize(pulse_details))\n"
     ]
    }
   ],
   "source": [
    "\n",
    "for ip in ip_addresses:\n",
    "    pulses = otx.search_pulses(ip)\n",
    "    print(json_normalize(pulses[\"results\"]))\n",
    "    for i in range(0,len(pulses[\"results\"])):\n",
    "        pulse_id = pulses[\"results\"][i][\"id\"]\n",
    "        pulse_details = otx.get_pulse_details(pulse_id)\n",
    "        print(json_normalize(pulse_details))"
   ]
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.10.8"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}