← API network SECURITY / IP RISK / ABUSE / FRAUD

Direct Platform v0.0.2 / General Availability api.dakidarts.comDirect gateway

IP Reputation Checker API

IP and domain threat intelligence with AbuseIPDB reputation and reports, geolocation/ASN enrichment, DNS resolution, batch/CIDR scans and caller-supplied provider keys.

Preview examples View on RapidAPI OpenAPI 3.1 ↗ GitHub repository ↗ Release feed ↗

Direct PlatformIP

api.dakidarts.comv0.0.2General Availability25ms p9518 documented endpoints

DIRECT NATIVE API

Call IP Reputation Checker API through the Dakidarts gateway.

0 of 18 endpoints have an upstream URL configured. Other routes return 503 before billing; only send live requests to configured routes. The gateway injects upstream credentials for you.

Live checkout opens after an API route has an upstream URL. Preview examples are available below.

Base URLhttps://api.dakidarts.com/ip-reputation-checker

AuthenticationX-API-Key: dk_live_...

Default reference pathGET /ipinfo

Commercial modelPay-as-you-go / $0.0050 per call

01 / ACCESS

One key, one gateway

Use a Dakidarts API key with read or write scopes and control which APIs that key can reach.

02 / BILLING

Metered by the call

Wallet credits, plan quotas and organization invoices are settled per request with transparent response headers.

03 / RELIABILITY

Observable by default

Latency, upstream status and execution mode are logged so integration issues are visible before they spread.

RAPIDAPI SPOTLIGHTRapidAPI Marketplace

Also available through RapidAPI.

Keep the direct Dakidarts gateway as your primary route, or use the RapidAPI listing when marketplace billing and key management fit your stack better.

View on RapidAPI Plans, keys and usage stay inside RapidAPI.

CAPABILITIES

Built to disappear into the product.

The best API is the one your team can integrate, observe and then stop thinking about.

BYOK support for AbuseIPDB-backed requests

Designed as a composable building block for product teams, internal tooling and automation.

Risk signals for signup, checkout and abuse review

Designed as a composable building block for product teams, internal tooling and automation.

Cached scans and usage/cache analytics

Designed as a composable building block for product teams, internal tooling and automation.

PLATFORM FACTS

The shape of the surface.

Selected facts about coverage, delivery and production readiness.

01AbuseIPDB reputation and report data

02Geolocation/ASN and DNS enrichment

03Single, batch, bulk-CIDR and domain scans

FAQ

Answers before you integrate.

Access, billing and integration details for IP Reputation Checker API.

What does the IP Reputation Checker return? +

Risk signals related to abuse, fraud and IP reputation.

When should I call it? +

At sign-up, checkout or other trust-sensitive actions where IP risk matters.

Does it block users automatically? +

No. It returns signals that your application combines with its own policy.

How do I get access? +

Subscribe on the Dakidarts dashboard, then call the gateway with an API key.

Is the reputation data real-time? +

It reflects the current data available to the service; reputation can change over time.

SUBSCRIPTION PLANS

Choose a quota that matches the workload.

Plans are shown for reference. Live checkout opens after an API route has an upstream URL.

WALLET-ACCESS

Pay-as-you-go access

$0.00 / month

Wallet credits per call
$0.0050 / call overage
120 req/min

INTEGRATION PATH

From first request to production.

Start with a Dakidarts key, call the gateway, then monitor usage from the dashboard.

Create a Dakidarts key

Choose the API scope, then copy the key into your server environment.

Call the gateway

Send requests to https://api.dakidarts.com/ip-reputation-checker with your key and JSON body.

Watch usage

Track calls, latency and spend from the API dashboard and wallet.

ENDPOINT REFERENCE

Endpoint reference & metered costs.

These routes include contracts imported from the product implementation. 0 of 18 endpoints have an upstream URL configured. Other routes return 503 before billing; saved examples are previews only. Configure an upstream URL in API Studio to enable those routes.

GROUP / 01

Analysis

Analysis endpoints sourced from the IP Reputation Checker API implementation.

6 endpoints

GET /domain/{domain_raw} Domain Scan SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Resolve a domain to all its IP addresses and scan the reputation of every one. Accepts bare domains, subdomains, or full URLs.

7. `/domain/{domain}`

Resolve a domain to all its IP addresses and scan the reputation of every one. Accepts bare domains, subdomains, or full URLs.

Methods: GET, POST

Parameters:

domain *(path, required)* → Domain, subdomain, or URL (e.g. example.com, https://example.com/page)
max_age *(int, optional, default 90)* → Look-back window in days (1–365)
include_reports *(bool, optional)* → Include full report lists
force_refresh *(bool, optional)* → Bypass cache
X-AbuseIPDB-Key *(header, optional)* → Your own AbuseIPDB key (BYOK)

Example Request (GET):

GET /domain/example.com

Example Request (GET — with options):

GET /domain/https://example.com/page?include_reports=1&max_age=30

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/domain/example.com",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 540.3
  },
  "data": {
    "input": "example.com",
    "addresses": ["93.184.216.34", "2606:2800:220:1:248:1893:25c8:1946"],
    "scanned": 2,
    "results": [
      { "input": "93.184.216.34", "cached": false, "analysis": { "risk_score": 0, "category": "Clean", "...": "..." } },
      { "input": "2606:2800:220:1:248:1893:25c8:1946", "cached": false, "analysis": { "risk_score": 0, "category": "Clean", "...": "..." } }
    ]
  }
}

Errors:

400 → Invalid domain
400 → no_addresses if the domain doesn't resolve

Source contract imported from ip reputation checker/routes/domain.py. Handler: domain_scan. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`domain_raw`	path	string	Yes	Domain name supplied in the URL path.
`max_age`	query	integer	No	AbuseIPDB look-back window in days (1–365).
`force_refresh`	query	boolean	No	Bypass the cache and query AbuseIPDB live.
`include_reports`	query	boolean	No	Include the full abuse report list in the result.
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X GET 'https://api.dakidarts.com/ip-reputation-checker/domain/example.com?max_age=90&force_refresh=False&include_reports=False' -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY'

POST /domain/{domain_raw} Domain Scan SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Resolve a domain to all its IP addresses and scan the reputation of every one. Accepts bare domains, subdomains, or full URLs.

7. `/domain/{domain}`

Resolve a domain to all its IP addresses and scan the reputation of every one. Accepts bare domains, subdomains, or full URLs.

Methods: GET, POST

Parameters:

domain *(path, required)* → Domain, subdomain, or URL (e.g. example.com, https://example.com/page)
max_age *(int, optional, default 90)* → Look-back window in days (1–365)
include_reports *(bool, optional)* → Include full report lists
force_refresh *(bool, optional)* → Bypass cache
X-AbuseIPDB-Key *(header, optional)* → Your own AbuseIPDB key (BYOK)

Example Request (GET):

GET /domain/example.com

Example Request (GET — with options):

GET /domain/https://example.com/page?include_reports=1&max_age=30

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/domain/example.com",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 540.3
  },
  "data": {
    "input": "example.com",
    "addresses": ["93.184.216.34", "2606:2800:220:1:248:1893:25c8:1946"],
    "scanned": 2,
    "results": [
      { "input": "93.184.216.34", "cached": false, "analysis": { "risk_score": 0, "category": "Clean", "...": "..." } },
      { "input": "2606:2800:220:1:248:1893:25c8:1946", "cached": false, "analysis": { "risk_score": 0, "category": "Clean", "...": "..." } }
    ]
  }
}

Errors:

400 → Invalid domain
400 → no_addresses if the domain doesn't resolve

Source contract imported from ip reputation checker/routes/domain.py. Handler: domain_scan. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`domain_raw`	path	string	Yes	Domain name supplied in the URL path.
`max_age`	body	integer	No	AbuseIPDB look-back window in days (1–365).
`force_refresh`	body	boolean	No	Bypass the cache and query AbuseIPDB live.
`include_reports`	body	boolean	No	Include the full abuse report list in the result.
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/domain/example.com -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY' -H 'Content-Type: application/json' -d '{"max_age": 90, "force_refresh": false, "include_reports": false}'

GET /scan Scan SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Analyze an IP address for reputation, abuse history, and risk score. Results are cached for 24 hours for fast repeat lookups.

2. `GET/POST /scan`

Single IP reputation scan against AbuseIPDB, served from a 24 h SQLite cache when possible.

Parameters (query string for GET, JSON body for POST):

Param	Type	Default	Description
`ip`	string	—	Required. IPv4 or IPv6 address
`max_age`	int	`90`	Look-back window in days (1–365) for AbuseIPDB
`force_refresh`	bool	`false`	Bypass the cache and hit AbuseIPDB live
`include_reports`	bool	`false`	Include the full abuse report list
`geo`	bool	`false`	Attach geolocation/ASN data to the analysis

Headers: X-AbuseIPDB-Key (optional, BYOK)

curl "http://localhost:5000/scan?ip=8.8.8.8&include_reports=1"
curl -X POST http://localhost:5000/scan \
  -H "Content-Type: application/json" \
  -H "X-AbuseIPDB-Key: your_key" \
  -d '{"ip":"8.8.8.8","max_age":90,"include_reports":true}'

{
  "success": true,
  "meta": { "api": "IP Reputation Checker", "version": "v0.0.2", "endpoint": "/scan", "latency_ms": 241.1, "key_source": "server" },
  "data": {
    "input": "8.8.8.8",
    "cached": false,
    "analysis": {
      "ip": "8.8.8.8",
      "risk_score": 0,
      "risk_level": "low",
      "category": "Residential ISP",
      "is_whitelisted": false,
      "country_code": "US",
      "isp": "Google LLC",
      "is_public": true,
      "ip_version": 4,
      "usage_type": "Fixed Line ISP",
      "domain": "google.com",
      "is_tor": false,
      "num_distinct_users": 5,
      "total_reports": 2,
      "last_reported_at": "2026-08-01T00:00:00Z",
      "reports": [
        {
          "reported_at": "2026-08-01T00:00:00Z",
          "comment": "DDoS bot",
          "categories": [4],
          "reporter_id": 123,
          "reporter_country_code": "US",
          "reporter_country_name": "United States"
        }
      ],
      "checked_at": "2026-08-27T21:30:00Z"
    }
  }
}

data.analysis fields:

Field	Description
`ip`	The scanned address
`risk_score`	AbuseIPDB abuse confidence score (0–100)
`risk_level`	`low` (< 40) / `medium` (40–74) / `high` (≥ 75)
`category`	Human label: Clean, Suspicious, Malicious, Proxy/VPN, Hosting Service, Crawler/Bot, Mobile ISP, Residential ISP, Institutional Network
`is_whitelisted`	Whether AbuseIPDB whitelists the address
`country_code`	ISO-3166 alpha-2 country code
`isp`	Internet service provider
`is_public`	Whether the address is public
`ip_version`	4 or 6
`usage_type`	Raw AbuseIPDB usage type
`domain`	Reverse-mapped domain, if any
`is_tor`	Whether the address is a known Tor exit node
`num_distinct_users`	Distinct reporters count
`total_reports`	Total abuse reports in the look-back window
`last_reported_at`	Timestamp of the most recent report
`reports`	Array of report objects (only when `include_reports=1`)
`geo`	Geolocation object (only when `geo=1`)
`checked_at`	When the data was fetched

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan. Reference: docs/api-reference.md.

PARAMETERS

Name	In	Type	Required	Description
`max_age`	query	integer	No	Look-back window in days (1–365) for AbuseIPDB
`force_refresh`	query	boolean	No	Bypass the cache and hit AbuseIPDB live
`include_reports`	query	boolean	No	Include the full abuse report list
`geo`	query	boolean	No	Attach geolocation/ASN data to the analysis
`ip`	query	string	Yes	IPv4 or IPv6 address to check against AbuseIPDB.
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X GET 'https://api.dakidarts.com/ip-reputation-checker/scan?max_age=90&force_refresh=False&include_reports=False&geo=False&ip=8.8.8.8' -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY'

POST /scan Scan SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Analyze an IP address for reputation, abuse history, and risk score. Results are cached for 24 hours for fast repeat lookups.

2. `GET/POST /scan`

Single IP reputation scan against AbuseIPDB, served from a 24 h SQLite cache when possible.

Parameters (query string for GET, JSON body for POST):

Param	Type	Default	Description
`ip`	string	—	Required. IPv4 or IPv6 address
`max_age`	int	`90`	Look-back window in days (1–365) for AbuseIPDB
`force_refresh`	bool	`false`	Bypass the cache and hit AbuseIPDB live
`include_reports`	bool	`false`	Include the full abuse report list
`geo`	bool	`false`	Attach geolocation/ASN data to the analysis

Headers: X-AbuseIPDB-Key (optional, BYOK)

curl "http://localhost:5000/scan?ip=8.8.8.8&include_reports=1"
curl -X POST http://localhost:5000/scan \
  -H "Content-Type: application/json" \
  -H "X-AbuseIPDB-Key: your_key" \
  -d '{"ip":"8.8.8.8","max_age":90,"include_reports":true}'

{
  "success": true,
  "meta": { "api": "IP Reputation Checker", "version": "v0.0.2", "endpoint": "/scan", "latency_ms": 241.1, "key_source": "server" },
  "data": {
    "input": "8.8.8.8",
    "cached": false,
    "analysis": {
      "ip": "8.8.8.8",
      "risk_score": 0,
      "risk_level": "low",
      "category": "Residential ISP",
      "is_whitelisted": false,
      "country_code": "US",
      "isp": "Google LLC",
      "is_public": true,
      "ip_version": 4,
      "usage_type": "Fixed Line ISP",
      "domain": "google.com",
      "is_tor": false,
      "num_distinct_users": 5,
      "total_reports": 2,
      "last_reported_at": "2026-08-01T00:00:00Z",
      "reports": [
        {
          "reported_at": "2026-08-01T00:00:00Z",
          "comment": "DDoS bot",
          "categories": [4],
          "reporter_id": 123,
          "reporter_country_code": "US",
          "reporter_country_name": "United States"
        }
      ],
      "checked_at": "2026-08-27T21:30:00Z"
    }
  }
}

data.analysis fields:

Field	Description
`ip`	The scanned address
`risk_score`	AbuseIPDB abuse confidence score (0–100)
`risk_level`	`low` (< 40) / `medium` (40–74) / `high` (≥ 75)
`category`	Human label: Clean, Suspicious, Malicious, Proxy/VPN, Hosting Service, Crawler/Bot, Mobile ISP, Residential ISP, Institutional Network
`is_whitelisted`	Whether AbuseIPDB whitelists the address
`country_code`	ISO-3166 alpha-2 country code
`isp`	Internet service provider
`is_public`	Whether the address is public
`ip_version`	4 or 6
`usage_type`	Raw AbuseIPDB usage type
`domain`	Reverse-mapped domain, if any
`is_tor`	Whether the address is a known Tor exit node
`num_distinct_users`	Distinct reporters count
`total_reports`	Total abuse reports in the look-back window
`last_reported_at`	Timestamp of the most recent report
`reports`	Array of report objects (only when `include_reports=1`)
`geo`	Geolocation object (only when `geo=1`)
`checked_at`	When the data was fetched

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan. Reference: docs/api-reference.md.

PARAMETERS

Name	In	Type	Required	Description
`max_age`	body	integer	No	Look-back window in days (1–365) for AbuseIPDB
`force_refresh`	body	boolean	No	Bypass the cache and hit AbuseIPDB live
`include_reports`	body	boolean	No	Include the full abuse report list
`geo`	body	boolean	No	Attach geolocation/ASN data to the analysis
`ip`	body	string	Yes	IPv4 or IPv6 address to check against AbuseIPDB.
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/scan -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY' -H 'Content-Type: application/json' -d '{"max_age": 90, "force_refresh": false, "include_reports": false, "geo": false, "ip": "8.8.8.8"}'

GET /scan/me Scan Me SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Analyze the caller's own IP address — no parameters needed.

3. `/scan/me`

Analyze the caller's own IP address — no parameters needed.

Methods: GET, POST

Parameters: none

Example Request (GET):

GET /scan/me

Example Response: same shape as /scan → data.analysis.

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan_me. Reference: RAPID_README.md.

QUICK CURL

curl -X GET https://api.dakidarts.com/ip-reputation-checker/scan/me -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

POST /scan/me Scan Me SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Analyze the caller's own IP address — no parameters needed.

3. `/scan/me`

Analyze the caller's own IP address — no parameters needed.

Methods: GET, POST

Parameters: none

Example Request (GET):

GET /scan/me

Example Response: same shape as /scan → data.analysis.

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan_me. Reference: RAPID_README.md.

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/scan/me -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

GROUP / 02

Ipinfo

Ipinfo endpoints sourced from the IP Reputation Checker API implementation.

2 endpoints

GET /ipinfo Ipinfo SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Get rich geolocation and network intel for an IP: continent, country, region, city, coordinates, flag, organization, ISP, ASN, and timezone.

6. `/ipinfo`

Get rich geolocation and network intel for an IP: continent, country, region, city, coordinates, flag, organization, ISP, ASN, and timezone.

Methods: GET, POST

Parameters:

ip *(string, required)* → The IPv4/IPv6 address to look up (e.g. 8.8.8.8)

Example Request (GET):

GET /ipinfo?ip=8.8.8.8

Example Request (POST):

POST /ipinfo
{
  "ip": "8.8.8.8"
}

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/ipinfo",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 312.7
  },
  "data": {
    "input": "8.8.8.8",
    "cached": true,
    "geo": {
      "ip": "8.8.8.8",
      "type": "IPv4",
      "continent": "North America",
      "country": "United States",
      "country_code": "US",
      "region": "California",
      "city": "Mountain View",
      "latitude": 37.4056,
      "longitude": -122.0775,
      "flag_emoji": "🇺🇸",
      "org": "Google LLC",
      "isp": "Google LLC",
      "domain": "google.com",
      "asn": 15169,
      "timezone": "America/Los_Angeles"
    }
  }
}

Errors:

400 → Missing or invalid IP
400 → geo_unavailable for private/reserved addresses

Source contract imported from ip reputation checker/routes/ipinfo.py. Handler: ipinfo. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`ip`	query	string	Yes	IPv4 or IPv6 address to enrich with geolocation and ASN data.

QUICK CURL

curl -X GET 'https://api.dakidarts.com/ip-reputation-checker/ipinfo?ip=8.8.8.8' -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

POST /ipinfo Ipinfo SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Get rich geolocation and network intel for an IP: continent, country, region, city, coordinates, flag, organization, ISP, ASN, and timezone.

6. `/ipinfo`

Get rich geolocation and network intel for an IP: continent, country, region, city, coordinates, flag, organization, ISP, ASN, and timezone.

Methods: GET, POST

Parameters:

ip *(string, required)* → The IPv4/IPv6 address to look up (e.g. 8.8.8.8)

Example Request (GET):

GET /ipinfo?ip=8.8.8.8

Example Request (POST):

POST /ipinfo
{
  "ip": "8.8.8.8"
}

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/ipinfo",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 312.7
  },
  "data": {
    "input": "8.8.8.8",
    "cached": true,
    "geo": {
      "ip": "8.8.8.8",
      "type": "IPv4",
      "continent": "North America",
      "country": "United States",
      "country_code": "US",
      "region": "California",
      "city": "Mountain View",
      "latitude": 37.4056,
      "longitude": -122.0775,
      "flag_emoji": "🇺🇸",
      "org": "Google LLC",
      "isp": "Google LLC",
      "domain": "google.com",
      "asn": 15169,
      "timezone": "America/Los_Angeles"
    }
  }
}

Errors:

400 → Missing or invalid IP
400 → geo_unavailable for private/reserved addresses

Source contract imported from ip reputation checker/routes/ipinfo.py. Handler: ipinfo. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`ip`	body	string	Yes	IPv4 or IPv6 address to enrich with geolocation and ASN data.

SAMPLE RESPONSE

{
  "data": {
    "geo": {
      "ip": "8.8.8.8",
      "asn": 15169,
      "isp": "Google LLC",
      "org": "Google LLC",
      "city": "Mountain View",
      "type": "IPv4",
      "domain": "google.com",
      "region": "California",
      "country": "United States",
      "latitude": 37.4056,
      "timezone": "America/Los_Angeles",
      "continent": "North America",
      "longitude": -122.0775,
      "flag_emoji": "\ud83c\uddfa\ud83c\uddf8",
      "country_code": "US"
    },
    "input": "8.8.8.8",
    "cached": true
  },
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/ipinfo",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 312.7
  },
  "success": true
}

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/ipinfo -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"ip": "8.8.8.8"}'

GROUP / 03

Operations

Operations endpoints sourced from the IP Reputation Checker API implementation.

2 endpoints

GET /status Status SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Check service health, API version, and uptime.

1. `/status`

Check service health, API version, and uptime.

Methods: GET, POST

Parameters: none

Example Request (GET):

GET /status

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/status",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 1.2
  },
  "data": {
    "status": "online",
    "version": "v0.0.2",
    "uptime_seconds": 86400,
    "uptime_human": "1d 0h 0m",
    "database": "ok"
  }
}

Source contract imported from ip reputation checker/routes/meta.py. Handler: status. Reference: RAPID_README.md.

SAMPLE RESPONSE

{
  "data": {
    "status": "online",
    "version": "v0.0.2",
    "database": "ok",
    "uptime_human": "1d 0h 0m",
    "uptime_seconds": 86400
  },
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/status",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 1.2
  },
  "success": true
}

QUICK CURL

curl -X GET https://api.dakidarts.com/ip-reputation-checker/status -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

POST /status Status SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Check service health, API version, and uptime.

1. `/status`

Check service health, API version, and uptime.

Methods: GET, POST

Parameters: none

Example Request (GET):

GET /status

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/status",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 1.2
  },
  "data": {
    "status": "online",
    "version": "v0.0.2",
    "uptime_seconds": 86400,
    "uptime_human": "1d 0h 0m",
    "database": "ok"
  }
}

Source contract imported from ip reputation checker/routes/meta.py. Handler: status. Reference: RAPID_README.md.

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/status -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

GROUP / 04

Reports

Reports endpoints sourced from the IP Reputation Checker API implementation.

2 endpoints

GET /reports Reports SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Fetch the complete abuse report history for an IP, including report date, comment, abuse categories, and reporter details.

8. `/reports`

Fetch the complete abuse report history for an IP, including report date, comment, abuse categories, and reporter details.

Methods: GET, POST

Parameters:

ip *(string, required)* → The IPv4/IPv6 address (e.g. 118.25.6.39)
max_age *(int, optional, default 90)* → Look-back window in days (1–365)
X-AbuseIPDB-Key *(header, optional)* → Your own AbuseIPDB key (BYOK)

Example Request (GET):

GET /reports?ip=118.25.6.39&max_age=90

Example Request (POST):

POST /reports
{
  "ip": "118.25.6.39",
  "max_age": 90
}

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/reports",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 410.9
  },
  "data": {
    "input": "118.25.6.39",
    "total_reports": 48,
    "reports": [
      {
        "reported_at": "2023-07-10T20:55:14+00:00",
        "comment": "SSH brute force attempt",
        "categories": [18, 22],
        "reporter_id": 1,
        "reporter_country_code": "US",
        "reporter_country_name": "United States"
      }
    ]
  }
}

Errors:

400 → Missing or invalid IP

Source contract imported from ip reputation checker/routes/reports.py. Handler: reports. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`ip`	query	string	Yes	IPv4 or IPv6 address whose abuse-report history is requested.
`max_age`	query	integer	No	AbuseIPDB look-back window in days (1–365).
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X GET 'https://api.dakidarts.com/ip-reputation-checker/reports?ip=8.8.8.8&max_age=90' -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY'

POST /reports Reports SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Fetch the complete abuse report history for an IP, including report date, comment, abuse categories, and reporter details.

8. `/reports`

Fetch the complete abuse report history for an IP, including report date, comment, abuse categories, and reporter details.

Methods: GET, POST

Parameters:

ip *(string, required)* → The IPv4/IPv6 address (e.g. 118.25.6.39)
max_age *(int, optional, default 90)* → Look-back window in days (1–365)
X-AbuseIPDB-Key *(header, optional)* → Your own AbuseIPDB key (BYOK)

Example Request (GET):

GET /reports?ip=118.25.6.39&max_age=90

Example Request (POST):

POST /reports
{
  "ip": "118.25.6.39",
  "max_age": 90
}

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/reports",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 410.9
  },
  "data": {
    "input": "118.25.6.39",
    "total_reports": 48,
    "reports": [
      {
        "reported_at": "2023-07-10T20:55:14+00:00",
        "comment": "SSH brute force attempt",
        "categories": [18, 22],
        "reporter_id": 1,
        "reporter_country_code": "US",
        "reporter_country_name": "United States"
      }
    ]
  }
}

Errors:

400 → Missing or invalid IP

Source contract imported from ip reputation checker/routes/reports.py. Handler: reports. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`ip`	body	string	Yes	IPv4 or IPv6 address whose abuse-report history is requested.
`max_age`	body	integer	No	AbuseIPDB look-back window in days (1–365).
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

SAMPLE RESPONSE

{
  "data": {
    "input": "118.25.6.39",
    "reports": [
      {
        "comment": "SSH brute force attempt",
        "categories": [
          18,
          22
        ],
        "reported_at": "2023-07-10T20:55:14+00:00",
        "reporter_id": 1,
        "reporter_country_code": "US",
        "reporter_country_name": "United States"
      }
    ],
    "total_reports": 48
  },
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/reports",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 410.9
  },
  "success": true
}

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/reports -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY' -H 'Content-Type: application/json' -d '{"ip": "8.8.8.8", "max_age": 90}'

GROUP / 05

Report

Report endpoints sourced from the IP Reputation Checker API implementation.

1 endpoint

POST /report Report SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Submit an abuse report for an IP to AbuseIPDB. Requires a key with reporting permission (your own via BYOK, or the server key).

8. `GET/POST /reports`

Fetches the full abuse reports for an IP (live AbuseIPDB query).

Parameters: ip (required), max_age (default 90)

curl "http://localhost:5000/reports?ip=8.8.8.8"

{
  "success": true,
  "meta": { "...": "..." },
  "data": {
    "input": "8.8.8.8",
    "total_reports": 2,
    "reports": [
      {
        "reported_at": "2026-08-01T00:00:00Z",
        "comment": "DDoS bot",
        "categories": [4],
        "reporter_id": 123,
        "reporter_country_code": "US",
        "reporter_country_name": "United States"
      }
    ]
  }
}

Source contract imported from ip reputation checker/routes/reports.py. Handler: report. Reference: docs/api-reference.md.

PARAMETERS

Name	In	Type	Required	Description
`ip`	body	string	Yes	Required. Address to report
`categories`	body	array	Yes	One to five integer AbuseIPDB category IDs.
`comment`	body	string	No	Optional comment describing the abuse
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/report -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY' -H 'Content-Type: application/json' -d '{"ip": "example", "categories": "example", "comment": "example"}'

GROUP / 06

10. `/categories`

Get the full AbuseIPDB abuse category reference (IDs 1–23) with names and descriptions. Use these IDs with the /report endpoint and to interpret reports[].categories.

Methods: GET

Parameters: none

Example Request (GET):

GET /categories

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/categories",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 5.0
  },
  "data": {
    "count": 23,
    "categories": [
      { "id": 1, "name": "DNS Compromise", "description": "Abuse was involved in DNS cache poisoning, DNS DDoS, or DNS hijacking." },
      { "id": 4, "name": "DDoS Attack", "description": "Abuse was involved in distributed denial of service attacks." },
      { "id": 7, "name": "Phishing", "description": "Abuse was involved in phishing." }
    ]
  }
}

Source contract imported from ip reputation checker/routes/reports.py. Handler: categories. Reference: RAPID_README.md.

SAMPLE RESPONSE

{
  "data": {
    "count": 23,
    "categories": [
      {
        "id": 1,
        "name": "DNS Compromise",
        "description": "Abuse was involved in DNS cache poisoning, DNS DDoS, or DNS hijacking."
      },
      {
        "id": 4,
        "name": "DDoS Attack",
        "description": "Abuse was involved in distributed denial of service attacks."
      },
      {
        "id": 7,
        "name": "Phishing",
        "description": "Abuse was involved in phishing."
      }
    ]
  },
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/categories",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 5.0
  },
  "success": true
}

QUICK CURL

curl -X GET https://api.dakidarts.com/ip-reputation-checker/categories -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

GROUP / 07

Batch operations

Batch operations endpoints sourced from the IP Reputation Checker API implementation.

2 endpoints

POST /scan/batch Scan Batch SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Scan up to 20 IP addresses in a single request. Each IP is evaluated independently — one bad address won't fail the whole batch.

4. `POST /scan/batch`

Scans up to 20 IPs in a single call. Each IP is checked independently and results are returned per IP, so one bad address does not fail the whole batch.

Body (JSON):

Param	Type	Default	Description
`ips`	string[]	—	Required. List of IPs (max 20)
`max_age`	int	`90`	Look-back window in days
`force_refresh`	bool	`false`	Bypass cache for all IPs
`include_reports`	bool	`false`	Include reports per IP
`geo`	bool	`false`	Include geolocation per IP

curl -X POST http://localhost:5000/scan/batch \
  -H "Content-Type: application/json" \
  -d '{"ips":["8.8.8.8","1.1.1.1","not-an-ip"]}'

{
  "success": true,
  "meta": { "api": "IP Reputation Checker", "version": "v0.0.2", "endpoint": "/scan/batch", "latency_ms": 1200.5 },
  "data": {
    "scanned": 3,
    "from_cache": 1,
    "errors": 1,
    "results": [
      { "input": "8.8.8.8", "cached": true,  "analysis": { "...": "..." } },
      { "input": "1.1.1.1", "cached": false, "analysis": { "...": "..." } },
      { "input": "not-an-ip", "error": { "code": "invalid_ip", "message": "Invalid IP address" } }
    ]
  }
}

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan_batch. Reference: docs/api-reference.md.

PARAMETERS

Name	In	Type	Required	Description
`ips`	body	array	No	Required. List of IPs (max 20)
`max_age`	body	integer	No	Look-back window in days
`force_refresh`	body	boolean	No	Bypass cache for all IPs
`include_reports`	body	boolean	No	Include reports per IP
`geo`	body	boolean	No	Include geolocation per IP

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/scan/batch -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"ips": "example", "max_age": 90, "force_refresh": false, "include_reports": false, "geo": false}'

POST /scan/bulk Scan Bulk SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Scan a whole CIDR block (e.g. `8.8.8.0/24`) or a list of up to 40 IPs. Provide exactly one of `network` or `ips`.

5. `/scan/bulk`

Scan a whole CIDR block (e.g. 8.8.8.0/24) or a list of up to 40 IPs. Provide exactly one of network or ips.

Methods: POST

Parameters (JSON body):

network *(string, optional)* → CIDR block to check (e.g. 8.8.8.0/24)
ips *(array, optional)* → List of IPs to scan (max 40)
max_age *(int, optional, default 90)* → Look-back window in days (1–365)
X-AbuseIPDB-Key *(header, optional)* → Your own AbuseIPDB key (BYOK)

Example Request (POST — CIDR):

POST /scan/bulk
{
  "network": "8.8.8.0/24",
  "max_age": 90
}

Example Response:

{
  "success": true,
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/scan/bulk",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 800.2
  },
  "data": {
    "network": "8.8.8.0/24",
    "min_address": "8.8.8.0",
    "max_address": "8.8.8.255",
    "num_possible_hosts": 256,
    "num_distinct_users": 3,
    "total_reports": 7,
    "reported_count": 2,
    "reported_addresses": [
      {
        "ip": "8.8.8.2",
        "num_reports": 5,
        "abuse_confidence_score": 100,
        "country_code": "US",
        "most_recent_report": "2026-08-10T12:00:00Z",
        "last_reported_at": "2026-08-10T12:00:00Z"
      }
    ]
  }
}

Example Request (POST — IP list):

POST /scan/bulk
{
  "ips": ["118.25.6.39", "8.8.8.8"],
  "max_age": 90
}

Errors:

400 → Missing network and ips, or invalid network
413 → More than 40 IPs provided
402 → Block search beyond 30 days requires an AbuseIPDB subscription

Source contract imported from ip reputation checker/routes/scan.py. Handler: scan_bulk. Reference: RAPID_README.md.

PARAMETERS

Name	In	Type	Required	Description
`network`	body	string	No	CIDR network to check (for example, `8.8.8.0/24`). Provide this or `ips`, not both.
`ips`	body	array	No	List of IPv4/IPv6 addresses (maximum 40). Provide this or `network`, not both.
`max_age`	body	integer	No	AbuseIPDB look-back window in days (1–365).
`force_refresh`	body	boolean	No	When true, bypass cached results and query the provider.
`X-AbuseIPDB-Key`	header	string	No	Optional AbuseIPDB API key for BYOK; otherwise the configured server key is used.

SAMPLE RESPONSE

{
  "data": {
    "network": "8.8.8.0/24",
    "max_address": "8.8.8.255",
    "min_address": "8.8.8.0",
    "total_reports": 7,
    "reported_count": 2,
    "num_distinct_users": 3,
    "num_possible_hosts": 256,
    "reported_addresses": [
      {
        "ip": "8.8.8.2",
        "num_reports": 5,
        "country_code": "US",
        "last_reported_at": "2026-08-10T12:00:00Z",
        "most_recent_report": "2026-08-10T12:00:00Z",
        "abuse_confidence_score": 100
      }
    ]
  },
  "meta": {
    "api": "IP Reputation Checker",
    "version": "v0.0.2",
    "endpoint": "/scan/bulk",
    "timestamp": "2026-08-28T10:00:00Z",
    "latency_ms": 800.2
  },
  "success": true
}

QUICK CURL

curl -X POST https://api.dakidarts.com/ip-reputation-checker/scan/bulk -H 'X-API-Key: dk_live_...' -H 'Accept: application/json' -H 'X-AbuseIPDB-Key: YOUR_X_ABUSEIPDB_KEY' -H 'Content-Type: application/json' -d '{"network": "example", "ips": "example", "max_age": "example", "force_refresh": false}'

GROUP / 08

Stats

Stats endpoints sourced from the IP Reputation Checker API implementation.

1 endpoint

GET /stats Stats SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Usage analytics derived from the scan log (last 90 days by default).

11. `GET /stats`

Usage analytics derived from the scan log (last 90 days by default).

curl http://localhost:5000/stats

{
  "success": true,
  "meta": { "...": "..." },
  "data": {
    "total_scans": 1042,
    "cache_hits": 712,
    "cache_misses": 330,
    "hit_rate_pct": 68.33,
    "scans_last_24h": 88,
    "unique_ips_scanned": 402,
    "top_ips": [ { "ip": "8.8.8.8", "scans": 120, "max_risk": 0, "category": "Residential ISP" } ],
    "category_distribution": [ { "category": "Clean", "count": 900 }, { "category": "Malicious", "count": 88 } ]
  }
}

Source contract imported from ip reputation checker/routes/stats.py. Handler: stats. Reference: docs/api-reference.md.

QUICK CURL

curl -X GET https://api.dakidarts.com/ip-reputation-checker/stats -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

GROUP / 09

Cache

Cache endpoints sourced from the IP Reputation Checker API implementation.

1 endpoint

GET /cache Cache SOURCE CONTRACT — UPSTREAM NEEDED $0.0050 / call / 120 rpm Upstream needed

Cache statistics (reputation + geo caches, TTLs, most-requested entries).

12. `GET /cache`

Cache statistics (reputation + geo caches, TTLs, most-requested entries).

curl http://localhost:5000/cache

{
  "success": true,
  "meta": { "...": "..." },
  "data": {
    "cache_entries": 402,
    "geo_entries": 150,
    "expired_entries": 3,
    "total_cache_hits_served": 712,
    "cache_ttl_hours": 24,
    "geo_ttl_hours": 168,
    "most_requested": [ { "ip": "8.8.8.8", "hits": 58, "risk_score": 0, "category": "Residential ISP" } ]
  }
}

Source contract imported from ip reputation checker/routes/stats.py. Handler: cache. Reference: docs/api-reference.md.

QUICK CURL

curl -X GET https://api.dakidarts.com/ip-reputation-checker/cache -H 'X-API-Key: dk_live_...' -H 'Accept: application/json'

INTERACTIVE SANDBOX

Explore a response before you integrate.

Edit a JSON request to validate its syntax and preview the published sample response. This stays in your browser; it never calls the live API or uses credits.

The preview checks JSON syntax and shows the saved example response; it does not execute request values.

MOCK RESPONSE

TYPESCRIPT CONTRACT

INTEGRATION SDK

Use the product where it lives.

These are integration templates, not runnable sample calls. Configure an endpoint upstream in API Studio, then replace the placeholder path. Saved samples stay preview-only.

REST/JSON

# Replace with a connected GET route and include any required parameters.
curl -X GET "https://api.dakidarts.com/ip-reputation-checker/v1/your-connected-endpoint" \
  -H "X-API-Key: dk_live_..." \
  -H "Accept: application/json"

# Replace with a connected GET route and include any required parameters.
import requests

headers = {"X-API-Key": "dk_live_..."}
response = requests.get("https://api.dakidarts.com/ip-reputation-checker/v1/your-connected-endpoint", headers=headers)
print(response.json())

// Replace with a connected GET route and include any required parameters.
const res = await fetch("https://api.dakidarts.com/ip-reputation-checker/v1/your-connected-endpoint", {
  headers: { "X-API-Key": "dk_live_..." }
});
const data = await res.json();
console.log(data);

<?php
// Replace with a connected GET route and include any required parameters.
$ch = curl_init("https://api.dakidarts.com/ip-reputation-checker/v1/your-connected-endpoint");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["X-API-Key: dk_live_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = curl_exec($ch);
curl_close($ch);
$data = json_decode($response, true);

Explore more Security and adjacent APIs.

Full catalog

IP Reputation Checker API

Call IP Reputation Checker API through the Dakidarts gateway.

One key, one gateway

Metered by the call

Observable by default

Also available through RapidAPI.

Built to disappear into the product.

BYOK support for AbuseIPDB-backed requests

Risk signals for signup, checkout and abuse review

Cached scans and usage/cache analytics

The shape of the surface.

Answers before you integrate.

Choose a quota that matches the workload.

Pay-as-you-go access

From first request to production.

Create a Dakidarts key

Call the gateway

Watch usage

Endpoint reference & metered costs.

Analysis

7. /domain/{domain}

7. /domain/{domain}

2. GET/POST /scan

2. GET/POST /scan

3. /scan/me

3. /scan/me

Ipinfo

6. /ipinfo

6. /ipinfo

Operations

1. /status

1. /status

Reports

8. /reports

8. /reports

Report

8. GET/POST /reports

Categories

10. /categories

Batch operations

4. POST /scan/batch

5. /scan/bulk

Stats

11. GET /stats

Cache

12. GET /cache

Explore a response before you integrate.

Use the product where it lives.

Explore more Security and adjacent APIs.

Malware & Phishing URL Scanner API

Dark Web Exposure API

Encryption & Hashing Utility API

7. `/domain/{domain}`

7. `/domain/{domain}`

2. `GET/POST /scan`

2. `GET/POST /scan`

3. `/scan/me`

3. `/scan/me`

6. `/ipinfo`

6. `/ipinfo`

1. `/status`

1. `/status`

8. `/reports`

8. `/reports`

8. `GET/POST /reports`

10. `/categories`

4. `POST /scan/batch`

5. `/scan/bulk`

11. `GET /stats`

12. `GET /cache`