---
title: "GET /query/{item}"
method: GET
path: "/query/{item}"
tags: ["query"]
---

# GET /query/{item}

`GET /query/{item}`

## Path parameters

- `item` string, required — IP to look up

## Response `200`

Query result

- object
  - `status` 'success', required
  - `statusCode` number, required
  - `result` union, required
    - IpQueryResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'IP', required
      - `bogon` false, required
      - `tags` string[], required
      - `firstSeen` string, date-time, nullable, required
      - `lastSeen` string, date-time, nullable, required
      - `intent` 'malicious' | 'suspicious' | 'unknown' | 'none', nullable, required
      - `reverseDns` object, required
        - `current` object[], nullable, required
          - `entry` string, required
      - `abuseContact` object, required
        - `email` string, email, nullable, required — May be null, if status is "UNKNOWN".
        - `status` 'UNKNOWN' | 'INVALID' | 'RESOLVE_FAILED' | 'CONNECT_FAILED' | 'RECIPIENT_FAILED' | 'WORKING', required
        - `lastVerification` string, date-time, nullable, required
      - `asn` object, required
        - `countryCode` string, nullable, required — Two letter country code (ISO 3166-1 alpha-2)
        - `asn` string, nullable, required
        - `name` string, nullable, required
      - `observedActivity` object, required
        - `honeypotInteractions` object, required
          - `firstSeen` string, date-time, nullable, required
          - `lastSeen` string, date-time, nullable, required
          - `observations` object[], required
            - `firstSeen` string, date-time, required
            - `lastSeen` string, date-time, required
            - `service` string, required
            - `type` string, required
        - `spamtrapInteractions` object, required
          - `firstSeen` string, date-time, nullable, required
          - `lastSeen` string, date-time, nullable, required
          - `observations` object[], required
            - `firstSeen` string, date-time, required
            - `lastSeen` string, date-time, required
            - `type` string, required
    - IpBogonQueryResultSchema
      - `item` string, required — normalized representation of requested item
      - `type` 'IP_BOGON', required
      - `bogon` true, required
    - DomainFullQueryResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'DOMAIN', required
      - `tags` string[], required
      - `firstSeen` string, date-time, nullable, required
      - `lastSeen` string, date-time, nullable, required
      - `intent` 'malicious' | 'suspicious' | 'unknown' | 'none', nullable, required
      - `observedActivity` object, nullable, required
        - `honeypotInteractions` object, required
          - `firstSeen` string, date-time, nullable, required
          - `lastSeen` string, date-time, nullable, required
          - `observations` object[], required
            - `firstSeen` string, date-time, required
            - `lastSeen` string, date-time, required
            - `service` string, required
            - `type` string, required
        - `spamtrapInteractions` object, required
          - `firstSeen` string, date-time, nullable, required
          - `lastSeen` string, date-time, nullable, required
          - `observations` object[], required
            - `firstSeen` string, date-time, required
            - `lastSeen` string, date-time, required
            - `type` string, required
    - UrlQueryResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'URL', required
    - Sha1QueryResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'SHA1', required
    - CryptoWalletResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'CRYPTO_WALLET', required
    - EmailResultSchema
      - `item` string, required — normalized representation of requested item
      - `abusixMailBlocklist` 'ACTIVE' | 'ALLOWLIST' | 'INFORMATIONAL' | 'NOT_LISTED' | 'PASSIVE', nullable, required
      - `type` 'EMAIL', required

## Other responses

- `400` — Invalid item
- `503` — Partial result due to service unavailability

---

[API](https://skmtc.net/abusix/apis/abusix-api.md) · [All operations](https://skmtc.net/abusix/apis/abusix-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/abusix/abusix-api/revisions/ace2f63e4853/schema)