---
title: "GET /providers/Microsoft.ADHybridHealthService/services/{serviceName}/ipAddressAggregates"
method: GET
path: "/providers/Microsoft.ADHybridHealthService/services/{serviceName}/ipAddressAggregates"
tags: ["Reports"]
---

# GET /providers/Microsoft.ADHybridHealthService/services/{serviceName}/ipAddressAggregates

`GET /providers/Microsoft.ADHybridHealthService/services/{serviceName}/ipAddressAggregates`

Gets the IP address aggregates for a given service.

## Path parameters

- `serviceName` string, required

## Query parameters

- `skiptoken` string
- `api-version` string, required

## Response `200`

The list of IP addresses.

- IPAddressAggregates — IP address aggregates.
  - `value` IPAddressAggregate[] — The value returned by the operation.
    - `id` string — Unique ID for the entree
    - `tenantId` string — The tenant ID
    - `serviceId` string — The service ID
    - `ipAddress` string — The IP address from where the attempted login originated from.
    - `timestamp` string — When the event occurred
    - `firstAuditTimestamp` string — The first audit timestamp
    - `lastAuditTimestamp` string — The last audit timestamp
    - `extranetLockoutErrorCount` integer — The extranet lockout error count
    - `badPasswordErrorCount` integer — The bad password error count
    - `uniqueUsernamesAttemptedCount` integer — The unique usernames attempted
    - `attemptCountThresholdIsExceeded` boolean — A value indicating whether the attempt count threshold been exceeded
    - `timeSpan` string — The duration of the event
    - `isWhitelistedIpAddress` boolean — A value indicating whether the IP address has been listed as allowed.
    - `networkLocation` string — The network location
    - `attemptCountThresholdOnTrigger` integer — The attempted count threshold on trigger.
    - `attemptThresholdTypeOnTrigger` string — The attempted threshold type on trigger.
    - `geographicLocation` string — The geographic location.
  - `nextLink` string — URL to get the next set of IP Aggregate list results if there are any.
  - `totalCount` integer — The number of results.
  - `continuationToken` string — The continuation token for paginated calls.

---

[API](https://skmtc.net/azure/apis/adhybridhealthservice.md) · [All operations](https://skmtc.net/azure/apis/adhybridhealthservice/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/adhybridhealthservice/revisions/35cb734a789a/schema)