Skip to Content
ReferenceAPI referenceDrop

List the Spamhaus DROP networks and ASNs

GET
/api/v1/drop/lists

Returns every network and ASN on the Spamhaus DROP lists, with the download state of each feed. The scheduler downloads the lists every DROP_REFRESH_HOURS hours, 24 by default. With DROP_ENABLED=false the lists are empty and enabled is false. The answer carries Cache-Control: private, max-age=300.

Authorization

cookiesession<token>

Session cookie authentication.

Response Body

Request fulfilled, document follows

application/json
  1. response

The Spamhaus DROP lists and the state of each feed.

asns*array<>

Sorted by ASN.

copyright*|

The copyright line Spamhaus ships with the feeds.

enabled*boolean

False with DROP_ENABLED=false.

feeds*array<>

In the order v4, v6, asn, and only the feeds GeoMetrikks has tried.

loaded*boolean

True once GeoMetrikks has downloaded at least one feed.

networks*array<>

Sorted by CIDR.

stale*boolean

True when updatedAt is more than 7 days ago.

updatedAt*|

When the most recent feed fetch succeeded.

Example Request
curl -X GET 'https://geometrikks.example.com/api/v1/drop/lists'
Example Response200
{  "asns": [    {      "asn": 0,      "name": "string"    }  ],  "copyright": "string",  "enabled": true,  "feeds": [    {      "checkedAt": "2019-08-24T14:15:22Z",      "feed": "string",      "fetchedAt": "2019-08-24T14:15:22Z",      "lastError": "string",      "recordCount": 0,      "upstreamTimestamp": "2019-08-24T14:15:22Z"    }  ],  "loaded": true,  "networks": [    {      "cidr": "string",      "sblId": "string"    }  ],  "stale": true,  "updatedAt": "2019-08-24T14:15:22Z"}

Unban an IP or range through CrowdSec POST

Deletes every active decision on exactly that IP or range, from any origin, and returns how many it deleted. An IP keeps a Range decision that covers it, so unban the range for that. Answers 403 when the server has no CrowdSec machine credentials, CROWDSEC_MACHINE_ID and CROWDSEC_MACHINE_PASSWORD. Needs a Read/write API key or a browser session.

List geo events GET

Returns one event per logged request whose client IP has a GeoIP location, newest first, with the location embedded. Page with `currentPage` and `pageSize`, and sort with `orderBy` and `sortOrder`. `fromTimestamp` and `toTimestamp` are optional here, and both ends of the range are inclusive.