DefensX icon

DefensX

Call DefensX Partner API endpoints.

Actions47

Stats → Get Top 20 hostnames or IP address that users put their credentials

AI-generated

Summary

Retrieves the top 20 hostnames or IP addresses where users have entered credentials.

Inputs

  • Customer ID (required) — ID of the customer.
  • Start Date — Log window start date, can be in datetime or unix timestamp format (default: beginning of the month).
  • End Date — Log window end date, can be in datetime or unix timestamp format (default: end of the month).

Output shape

a list of items (default) or a single item containing the raw response

By default, URL logs from browsers are used to provide better visibility and eliminate false positives. DNS requests from fat clients are not logged, except for clientless deployments.

Examples

Example 1: Fetch credential entries for a specific customer for the current month.

Customer ID: '12345', Start Date: '2023-01-01T00:00:00.000Z', End Date: '2023-01-31T23:59:59.999Z', Output Mode: 'One Item Per Element'

Example 2: Retrieve the raw API response for a specific date range.

Customer ID: '12345', Start Date: '1715404800000', End Date: '1715491199999', Output Mode: 'Single Item (Raw)'

Links

Discussion