HUhuntress
External Recon

List External Ports

Shows external port records from External Recon scans associated with your account.

get/v1/external_ports

Request

  • Base URL
    https://api.huntress.io
  • URL
    https://api.huntress.io/v1/external_ports
  • Auth
    basic (a scheme the document does not define)

Query parameters

limitinteger

Max number of resources returned in a paged collection. Defaults to 10, with a minimum of 1 and maximum 500.

page_tokenstring

Token used to request the next page in paginated results. Defaults to 'null'

sort_field'id' | 'port' | 'protocol' | 'created_at' | 'updated_at'

Field to sort by. Defaults to 'id'.

sort_direction'asc' | 'desc'

Sort direction. Defaults to 'desc'.

organization_idinteger

Filter by organization ID within Huntress account

protocol'TCP' | 'UDP'

Filter by protocol.

portinteger

Filter by port number.

risky_serviceboolean

Filter by whether the detected service is considered risky.

servicestring

Filter by the detected service name (lowercase Shodan module name, e.g. 'ssh', 'http', 'rdp').

Response

List External Ports

Example response

{
  "external_ports": [
    {
      "id": 42,
      "ip_address": "203.0.113.5",
      "port": 22,
      "protocol": "TCP",
      "service": "ssh",
      "risky_service": true,
      "last_scan_at": "2026-03-15T12:00:00Z",
      "last_external_scan_at": "2026-03-14T08:00:00Z",
      "organization_ids": [
        1,
        5
      ]
    }
  ]
}

Changes

No recorded changes to this operation across all 8 revisions of this API.