- initial attack add api (invalid ip case)