G-g-core
IP Spotlight

Get top attacked domains from a specific IP (account-scoped)

Retrieve top attacked domains for an IP address, scoped to the authenticated account's domains

get/waap/v1/ip-info/top-domains

Request

  • Base URL
    https://api.gcore.com
  • URL
    https://api.gcore.com/waap/v1/ip-info/top-domains
  • Auth
    HTTP apikey

Query parameters

string ipv4 required
OR
string ipv6 required

Response

Successful Response

datestring date-time required

First-seen timestamp for the IP+domain within retention period.

domainstring required

Domain name.

attack_typesstring[] required

Distinct rule names seen for this IP+domain, sorted alphabetically.

attacksinteger required

Total detected attacks.

blockedinteger required

Blocked attacks.

requestsinteger required

Total requests.

sessionsinteger required

Distinct sessions.

pathsinteger required

Distinct URL paths excluding query strings.

user_agentsinteger required

Distinct user agents.

durationinteger required

last_seen - first_seen in seconds within retention.

Changes

No recorded changes to this operation across all 76 revisions of this API.