GET /service/api/console/gsm/{gsmKey}/sites/{siteId}/dnsp/blockedtraffic
 ?startDate={startDate}
 &endDate={endDate}
 &pageSize={pageSize}
 &pageNr={pageNr}

Returns information about DNS requests that were blocked by the DNS Protection service.

NOTE: The maximum allowed time difference between 'startDate' and 'endDate' is 30 days.
WARNING: The maximum number of returned traffic records is limited to ensure that requests can complete in reasonable time. The amount of data accumulating over an increasing timespan can become very large, reaching into the millions of records for the maximum allowed time interval of 30 days. When querying blocked traffic for high-use sites, it is advised to query more regularly for shorter periods of time, instead of trying to pull the entire data once per month only.

Request Information

URI Parameters

NameDescriptionTypeAdditional Information
gsmKey

The GSM console keycode.

 string

Required
siteId

The site identifier.

 string

Required
startDate

If specified, returns blocked requests after (or at) the given date. If omitted, defaults to 'endDate' minus 24 hours.

 date

None.
endDate

If specified, returns blocked requests before (or at) the given date. If omitted, defaults to the current date and time.

 date

None.
pageSize

Specifies the maximum number of records to return. Valid values are between 100 and 10000.

 integer

Default value is 1000
pageNr

Specifies the page number. Can be used to retrieve the next batch of records.

 integer

Default value is 1

URI Sample(s)

GET
https://unityapi.webrootcloudav.com/service/api/console/gsm/2FA2-D3E5-ED43-493B-AFCF/sites/e264e2b6-745a-43ff-8c3c-baf2798c1eea/dnsp/blockedtraffic?startDate=2024-11-21T02:47:08.0129850Z&endDate=2024-12-21T02:47:08.0129850Z&pageSize=100&pageNr=36

Body Parameters

None.

Response Information

Resource Description

Information about DNS requests that were blocked by the DNS Protection service.

GetDNSPBlockedTrafficResponseModel
NameDescriptionTypeAdditional Information
MoreAvailable

Value indicating whether more records are available in the queried time window. Increment the page number in the query to obtain additional blocked request records.

 boolean

None.
PageNr

The number of the page that was requested.

 integer

None.
PageSize

The size of the page that was requested.

 integer

None.
StartDate

The start date that was used for the data query.

 date

None.
EndDate

The end date that was used for the data query.

 date

None.
SiteId

The identifier of the GSM site traffic information was queried for.

 string

None.
SiteName

The name of the GSM site traffic information was queried for.

 string

None.
BlockedRequests

The list of blocked request records.

 Collection of GetDNSPBlockedTrafficResponseModel_DNSRequest

None.

Sample Response

{
  "MoreAvailable": false,
  "PageNr": 1,
  "PageSize": 1000,
  "StartDate": "2024-12-20T18:33:18.5343142Z",
  "EndDate": "2024-12-21T18:33:18.5343142Z",
  "SiteId": "6886462d-68f3-4615-a2eb-95bf6c69e87a",
  "SiteName": "Site 1",
  "BlockedRequests": [
    {
      "Timestamp": "2024-12-21T18:32:18.5343142Z",
      "HostName": "MyComputer1",
      "UserName": "User1",
      "AgentVersion": "1.2.1.28",
      "SourceIp": "95.36.191.73",
      "Domain": "www.blocked-domain1.com",
      "DomainIps": [
        "95.102.60.144",
        "95.151.41.39"
      ],
      "CategoryIds": [
        50,
        57
      ],
      "BlockReasonId": 2
    },
    {
      "Timestamp": "2024-12-21T18:31:18.5343142Z",
      "HostName": "MyComputer2",
      "UserName": "User2",
      "AgentVersion": "1.2.1.28",
      "SourceIp": "95.71.143.70",
      "Domain": "www.blocked-domain2.com",
      "DomainIps": [
        "95.27.45.63",
        "95.156.145.123"
      ],
      "CategoryIds": [
        51,
        58
      ],
      "BlockReasonId": 0
    }
  ]
}                    
<GetDNSPBlockedTrafficResponseModel xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/Webroot.UnityAPI.ServiceExtension.Console.Models">
  <BlockedRequests>
    <GetDNSPBlockedTrafficResponseModel_DNSRequest>
      <AgentVersion>1.2.1.28</AgentVersion>
      <BlockReasonId>2</BlockReasonId>
      <CategoryIds xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:int>50</d4p1:int>
        <d4p1:int>57</d4p1:int>
      </CategoryIds>
      <Domain>www.blocked-domain1.com</Domain>
      <DomainIps xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:string>95.102.60.144</d4p1:string>
        <d4p1:string>95.151.41.39</d4p1:string>
      </DomainIps>
      <HostName>MyComputer1</HostName>
      <SourceIp>95.36.191.73</SourceIp>
      <Timestamp>2024-12-21T18:32:18.5343142Z</Timestamp>
      <UserName>User1</UserName>
    </GetDNSPBlockedTrafficResponseModel_DNSRequest>
    <GetDNSPBlockedTrafficResponseModel_DNSRequest>
      <AgentVersion>1.2.1.28</AgentVersion>
      <BlockReasonId>0</BlockReasonId>
      <CategoryIds xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:int>51</d4p1:int>
        <d4p1:int>58</d4p1:int>
      </CategoryIds>
      <Domain>www.blocked-domain2.com</Domain>
      <DomainIps xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
        <d4p1:string>95.27.45.63</d4p1:string>
        <d4p1:string>95.156.145.123</d4p1:string>
      </DomainIps>
      <HostName>MyComputer2</HostName>
      <SourceIp>95.71.143.70</SourceIp>
      <Timestamp>2024-12-21T18:31:18.5343142Z</Timestamp>
      <UserName>User2</UserName>
    </GetDNSPBlockedTrafficResponseModel_DNSRequest>
  </BlockedRequests>
  <EndDate>2024-12-21T18:33:18.5343142Z</EndDate>
  <MoreAvailable>false</MoreAvailable>
  <PageNr>1</PageNr>
  <PageSize>1000</PageSize>
  <SiteId>6886462d-68f3-4615-a2eb-95bf6c69e87a</SiteId>
  <SiteName>Site 1</SiteName>
  <StartDate>2024-12-20T18:33:18.5343142Z</StartDate>
</GetDNSPBlockedTrafficResponseModel>