---
title: "Get attack time series from a specific IP (account-scoped)"
method: GET
path: "/waap/v2/ip-info/attack-time-series"
tags: ["IP Spotlight"]
---

# Get attack time series from a specific IP (account-scoped)

`GET /waap/v2/ip-info/attack-time-series`

Retrieve a time-series of attacks originating from a specified IP address, scoped to the authenticated account's domains

## Query parameters

- `ip` union, required — The IP address to check
  - string, ipv4
  - string, ipv6
- `days` integer — Number of days to look back for attack data

## Response `200`

Successful Response

- TimeSeriesAttack[]
  - `attack_type` string, required — The type of attack
  - `values` TimeSeriesItem[], required — The time series data
    - `timestamp` integer, required — The timestamp of the time series item as a POSIX timestamp
    - `count` integer, required — The number of attacks

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Unauthenticated
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.dev/g-core/apis/gcore-openapi.md) · [All operations](https://skmtc.dev/g-core/apis/gcore-openapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/g-core/gcore-openapi/revisions/09e652815095/schema)