Skip to Content
ReferenceAPI referenceGeo Events

List the cities with the most geo events

GET
/api/v1/geo-events/top-cities

Returns cities ordered by event count, with the distinct IPs from each. Events without a city are left out, and cities with the same name in different countries count as one. A server filter reads the raw rows, which go back only ANALYTICS_RAW_RETENTION_DAYS days, 180 by default.

Authorization

cookiesession<token>

Session cookie authentication.

Query Parameters

countryCodeIn?array<string>|

Keep only these countries, as uppercase two-letter ISO 3166-1 codes such as NO. Repeat the parameter to pass more than one.

cityIn?array<string>|

Keep only these cities, by the exact name GeoIP gives, such as Oslo. Repeat the parameter to pass more than one.

ipAddressIn?array<string>|

Keep only these client IPs. Repeat the parameter to pass more than one. A value that is not an IP gets a 400.

ipAddressNotIn?array<string>|

Leave out these client IPs. Repeat the parameter to pass more than one. A value that is not an IP gets a 400.

serverIn?array<string>|

Keep only rows recorded under these server names. Repeat the parameter to pass more than one.

asnIn?array<integer>|

Keep only these autonomous system numbers, such as 13335. Repeat the parameter to pass more than one. Rows without ASN data are left out.

asnNotIn?array<integer>|

Leave out these autonomous system numbers. Repeat the parameter to pass more than one. Rows without ASN data stay in.

fromTimestamp*string

Start of the range, inclusive, as ISO 8601 with a timezone, such as 2026-11-01T00:00:00Z.

Formatdate-time
toTimestamp*string

End of the range, exclusive, as ISO 8601 with a timezone, such as 2026-11-02T00:00:00Z.

Formatdate-time
limit?integer

How many cities to return, from 1 to 50. Defaults to 10.

Range1 <= value <= 50
Default10

Response Body

Request fulfilled, document follows

application/json
  1. response

Cities ordered by geo event count, most first.

items*array<>
Example Request
curl -X GET 'https://geometrikks.example.com/api/v1/geo-events/top-cities?fromTimestamp=2026-11-01T00%3A00%3A00Z&toTimestamp=2026-11-02T00%3A00%3A00Z'
Example Response
{  "items": [    {      "city": "string",      "countryCode": "string",      "eventCount": 0,      "uniqueIps": 0    }  ]}

List the networks with the most geo events GET

Returns autonomous systems ordered by event count, with the distinct IPs and the category of each. Events without ASN data are left out. A server filter reads the raw rows, which go back only ANALYTICS_RAW_RETENTION_DAYS days, 180 by default.

List the countries with the most geo events GET

Returns countries ordered by event count, with the distinct IPs from each. A server filter reads the raw rows, which go back only ANALYTICS_RAW_RETENTION_DAYS days, 180 by default.