activity_dashboard_events_by_actionactivity_dashboard_events_by_actoractivity_dashboard_events_by_orgactivity_dashboard_events_by_repositoryactivity_dashboard_events_by_source_ipactivity_dashboard_secret_scanning_alertsactivity_dashboard_total_eventsbranch_protection_disabledbranch_protection_policy_overriddenorganization_application_installedorganization_application_uninstalledorganization_ip_allow_list_entry_updatedorganization_moderator_addedorganization_moderator_removedorganization_ownership_transferredorganization_two_factor_authentication_disabledorganization_user_addedorganization_user_granted_owner_roleorganization_user_removedpersonal_access_token_grantedrepository_archivedrepository_member_updatedrepository_visibility_set_publicrepository_vulnerability_alert_dismissed
Query: Top 10 Source IPs
Description
List the top 10 source IPs by frequency, excluding internal GitHub IPs.
Usage
powerpipe query github_audit_log_detections.query.activity_dashboard_events_by_source_ip
Tailpipe Tables
SQL
select tp_source_ip as "Source IP", count(*) as "Events"from github_audit_logwhere tp_source_ip is not null and tp_source_ip not like '%github.com'group by tp_source_iporder by count(*) desclimit 10;
Dashboards
The query is used in the dashboards: