Actions47
- Raw Request Actions
- Agents Actions
- Browser Extensions Actions
- Custom URL Groups Actions
- Custom URLs Actions
- Customers Actions
- Cyber Resilience Actions
- Deployments Actions
- Groups Actions
- Logs Actions
- Message Templates Actions
- Policies Actions
- Policy Templates Actions
- Products Actions
- Stats Actions
- Get Top 20 blocked categories
- Get Top 20 blocked hostnames or IP address
- Get Top 20 hostnames or IP address that users give their consents and put the credentials
- Get Top 20 hostnames or IP address that users put their credentials
- Get Top 20 hostnames or IP address that users try to put their credentials and blocked by the policy
- Get Top 20 visited categories
- Get Top 20 visited hostname under a specific category
- Get Top 20 visited uncategorized hostnames or IP address
- Status Actions
- Usage Actions
- Users Actions
Stats → Get Top 20 blocked hostnames or IP address
AI-generatedSummary
Fetches the top 20 blocked hostnames or IP addresses for a customer from the DefensX Partner API. Optionally filters the results by source and date range.
Inputs
- Customer ID (required) — Select the customer whose blocked destinations to retrieve.
- source — Optionally choose a log source. By default, the API uses browser URL logs; DNS requests from fat clients are not logged except in clientless deployments.
- Start Date — Beginning of the reporting window, as a JSON datetime or Unix timestamp. Defaults to the beginning of the month.
- End Date — End of the reporting window, as a JSON datetime or Unix timestamp. Defaults to the end of the month.
- Output Mode — Choose one n8n item per response array element (default), or return the full response in one item.
Output shape
One or more n8n items containing the API response.
In One Item Per Element mode, each object in an array becomes an item; primitive elements are wrapped as {"value": ...}. In Single Item (Raw) mode, the full response is returned in one item, with non-object responses wrapped as {"items": ...}. The API operation is described as returning up to 20 blocked hostnames or IP addresses.