v32

latestOpenAPI 3.1.0raw.githubusercontent.com2026-05-151,1412,2144.5 MB

IP Spotlight

Get top attacked domains from a specific IP (account-scoped)

Retrieve top attacked domains for an IP address, scoped to the authenticated account's domains

get/waap/v1/ip-info/top-domains

string ipv4 required

string ipv6 required

The IP address to check

Successful Response

datestring date-time required

First-seen timestamp for the IP+domain within retention period.

domainstring required

Domain name.

attack_typesstring[] required

Distinct rule names seen for this IP+domain, sorted alphabetically.

attacksinteger required

Total detected attacks.

blockedinteger required

Blocked attacks.

requestsinteger required

Total requests.

sessionsinteger required

Distinct sessions.

pathsinteger required

Distinct URL paths excluding query strings.

user_agentsinteger required

Distinct user agents.

durationinteger required

last_seen - first_seen in seconds within retention.