List the traffic from DROP networks, with their bans
Returns each Spamhaus DROP network that sent requests in the window, busiest first, with the Range decision on it. The totals cover every network with traffic, not only the page. A client inside nested networks counts under the narrowest one. When the LAPI does not answer, you still get the traffic, with every decision null and decisionsAvailable false.
session<token>Session cookie authentication.
days?integerThe window in days, ending now. 7, 30 or 90. Defaults to 30.
3073090page?integerThe page to return, counted from 1. Defaults to 1.
1 <= value1pageSize?integerNetworks per page, from 1 to 100. Defaults to 25.
1 <= value <= 10025Request fulfilled, document follows
application/json- response
One page of DROP networks with traffic, with totals over every network.
bannedNetworks*integerNetworks with traffic that hold an active decision. 0 when the LAPI did not answer.
days*integerThe window in days, as requested.
decisionsAvailable*booleanFalse when the LAPI did not answer. Every decision is null then.
items*array<>The most requests first.
loaded*booleanFalse until GeoMetrikks downloads a DROP network list, and always with DROP_ENABLED=false. Every count is 0 and items is empty then.
totalHits*integerRequests from those networks.
totalIps*integerDistinct client IPs in those networks.
totalNetworks*integerDROP networks with traffic in the window.
curl -X GET 'https://geometrikks.example.com/api/v1/crowdsec/drop-networks'{ "bannedNetworks": 0, "days": 0, "decisionsAvailable": true, "items": [ { "asOrg": "string", "asn": 0, "cidr": "string", "decision": { "expiresAt": "2019-08-24T14:15:22Z", "type": "string", "value": "string" }, "hits": 0, "ips": 0, "lastSeen": "2019-08-24T14:15:22Z", "sblId": "string" } ], "loaded": true, "totalHits": 0, "totalIps": 0, "totalNetworks": 0}Get the CrowdSec alert behind a decision GET
Returns the alert that made the decision, in the same shape as `/alerts/{alert_id}`. The LAPI finds alerts by IP only, so pass the decision's IP too. This endpoint does not search the community blocklist alerts, so a blocklist decision gets a 404. Answers 403 when the server has no CrowdSec machine credentials, CROWDSEC_MACHINE_ID and CROWDSEC_MACHINE_PASSWORD.
Count the active CrowdSec decisions by origin and scenario GET
Returns how many decisions are active across every origin, blocklists included, with the count per origin and the ten scenarios with the most decisions.