Track malicious campaign clicks in API

I am trying to list returning visitors from CPC campaigns in order to trace malicious ad clicks.

I have made an example API that reports in summary the returning visitors of last 3 days coming from campaign, like this:

Is there a way to brake down the report and add the IP and the total number of visits (all time) of each visitor?

Thank you in advance!