List every IP under an active decision
Returns each IP that holds an Ip decision from any origin, once, with the strongest decision type on it. ban beats captcha, which beats the rest. /banned-ranges lists the Range decisions.
session<token>Session cookie authentication.
Request fulfilled, document follows
application/json- response
[index: integer]?An IP under an active decision.
curl -X GET 'https://geometrikks.example.com/api/v1/crowdsec/banned-ips'[ { "ip": "string", "type": "string" }]Ban Spamhaus DROP networks through CrowdSec POST
Bans the DROP networks you name, or with `allUnbannedDays` every DROP network that sent traffic in that many days and has no active decision, busiest first and at most 1000. A network with an active decision of any type, a captcha included, keeps it and gets no ban, and a named one comes back ok with `alreadyBanned`, so a retry is safe. After 3 unreachable LAPI answers in a row or 120 seconds, the rest come back with an error that starts with `not attempted`. Answers 403 when the server has no CrowdSec machine credentials, CROWDSEC_MACHINE_ID and CROWDSEC_MACHINE_PASSWORD. Needs a Read/write API key or a browser session.
Map the IPs under an active decision as GeoJSON GET
Returns one GeoJSON point per place, listing the IPs that hold an active `Ip` decision of any origin and type and sent geo events from there in the window. The map shows current decisions, not ban history, and leaves out Range decisions and IPs without events in the window. Each IP shows at one place. Windows up to 24 hours, and any window with `serverIn`, read the raw rows and use the place of the IP's newest event. Longer windows read the per-IP aggregates and use its place in the newest bucket, the busiest one on a tie.