[GET] Get Threat Traffic by IP - Vecurity

Prerequisite: Please ensure you have read the VISE Overview before proceeding as the API endpoint is based on your VISE url which is dynamic.Where vise-url is mentioned, we are referring to your actual VISE domain, not ‘vise-url’. Explained in the VISE overview.

All requests to the Vecurity VISE API requires Session creation in tandem with your Vecurity API token in order to make use of the API Endpoints. More details can be found the VISE Authentication page.If you require support here, please get in touch with our Live chat or support@vecurity.net

HTTP Endpoint `GET`

https://{VISE-URL}/api/insight/threat_traffic.json

Headers

Authorization: Bearer {your_api_token}

Query Parameters

Authorization: Bearer {your_api_token}
- domain_id - String (required) - A unique GUID identifier for a domain.
- from_date - Date (required) - Start date of reporting period. [YYYY-MM-DD].
- to_date - Date (required) - End date of reporting period. [YYYY-MM-DD].

Endpoint Description

This API interface is part of the VISE Analytics module. It fetches data relating to Threat Traffic type data broken down by IP. The data retrieved from this endpoint specifically is a breakdown of malicious web traffic by IP.

Response Example

{
    "data": [
        {
            "name": "ip1",
            "value": 22
        },
        {
            "name": "ip2",
            "value": 2
        }
    ],
    "message": "Successfully retrieved data",
    "status_code": 200,
    "timestamp": "YYYY-MM-DDTHH:MM:SS UTC"
}