---
title: "Get top user agents for an IP (account-scoped)"
method: GET
path: "/waap/v2/ip-info/top-user-agents"
tags: ["IP Spotlight"]
---

# Get top user agents for an IP (account-scoped)

`GET /waap/v2/ip-info/top-user-agents`

Retrieve up to 10 top user agents associated with an IP across all account domains.

## Query parameters

- `ip` union, required — The IP address to check
  - string, ipv4
  - string, ipv6

## Response `200`

Successful Response

- TopUserAgentDetail[]
  - `user_agent` string — The user agent string; missing values are represented as "".
  - `attacks` integer — Total number of detected attacks.
  - `blocked` integer — Number of blocked attacks.
  - `requests` integer — Total number of requests.
  - `sessions` integer — Number of distinct sessions.
  - `domains` integer — Number of distinct domains.
  - `paths` integer — Number of distinct URL paths excluding query strings.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Unauthenticated
- `404` — Not Found
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.dev/g-core/apis/gcore-openapi.md) · [All operations](https://skmtc.dev/g-core/apis/gcore-openapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/g-core/gcore-openapi/revisions/09e652815095/schema)