Look up the abuse contact for an IP or an ASN
Asks the RDAP registry that holds the IP or AS number for its network or AS record and the abuse contact on it. Only the queried address or number leaves the server, and GeoMetrikks caches each answer for up to 24 hours. A private or reserved address gets a 400.
session<token>Session cookie authentication.
ipAddress?|The IP, IPv4 or IPv6. Pass this or asn, not both. A value that is not an IP gets a 400.
asn?|The AS number, from 0 to 4294967295, such as 13335. Pass this or ipAddress, not both.
value <= 4294967295Request fulfilled, document follows
application/json- response
The network or AS record that holds an IP or AS number, with its abuse contact, from RDAP.
abuseEmails*array<string>Addresses of the abuse contact. Empty when the registry lists none.
abuseName*|The abuse contact's name.
cidrs*array<string>The prefixes that make up the network, when the registry lists them.
country*|The country code the registry gives.
endAddress*|The last address of the network.
handle*|The registry's handle for the record.
kind*string"ip""asn"name*|The record's name, such as the network name.
query*stringThe IP as looked up, or the AS number as AS13335.
rdapUrl*stringThe RDAP URL that gave the record.
registry*stringThe host name of the registry that answered.
startAddress*|The first address of the network.
curl -X GET 'https://geometrikks.example.com/api/v1/reports/abuse-contact'{ "abuseEmails": [ "string" ], "abuseName": "string", "cidrs": [ "string" ], "country": "string", "endAddress": "string", "handle": "string", "kind": "ip", "name": "string", "query": "string", "rdapUrl": "string", "registry": "string", "startAddress": "string"}Build an abuse report for an IP or an ASN GET
Returns what an abuse desk needs about one IP, or about the busiest IPs of one ASN, in the range: request counts, the busiest hour or day, the top paths and user agents, the newest log lines and CrowdSec data. Times are in UTC, and the raw access logs it reads go back ANALYTICS_RAW_RETENTION_DAYS days, 180 by default. The report leaves out the Host header, server name, referrer and remote user of each line, and the machine name and message of each alert. Your host names and public addresses become `[redacted]` in URLs and user agents. In a query string, the whole value of a parameter that names one of your hosts or carries a credential, such as `token` or `api_key`, also becomes `[redacted]`.
Get the settings the web app needs GET
Returns the app name and version, the retention days, the access log paths and the map setup. Use `/api/v1/system/settings` for every setting with its environment variable.