---
title: "Fetch IP Address risk list demo events"
method: GET
path: "/ip/demoevents"
tags: ["IP"]
---

# Fetch IP Address risk list demo events

`GET /ip/demoevents`

## Request

- Base URL: `https://api.recordedfuture.com/v2`
- URL: `https://api.recordedfuture.com/v2/ip/demoevents`
- Auth: API key in header `X-RFToken`

Get simulated Juniper NetScreen syslogs with risky IPs for testing SIEM integrations, refreshed every four hours.

## Query parameters

- `limit` integer

## Response `200`

Result of operation

---

[API](https://skmtc.dev/recordedfuture/apis/connect-api.md) - [All operations](https://skmtc.dev/recordedfuture/apis/connect-api/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/connect-api/revisions/ca0276d265f0?raw)