Hazard report
Introduction
The Hazard Report API offers a unique set of cybersecurity metrics that helps businesses combat cyber threats proactively and reactively. It leverages advanced algorithms and third-party sources to monitor IP addresses against trusted blacklist sites and identify anonymizers like VPNs and proxies.
It also assesses the likelihood of every global IP address being assigned to a hosting environment. For more information on how the Hazard Report is prepared, please refer to our Understanding the Hazard Report support article.
Get Started
This API is part of the IP Geolocation API Package and is available in free and paid plans. Please visit the IP Geolocation API Package package page for limits and pricing information.
Endpoint
GET
https://api-bdc.net/data/hazard-report
Request
Parameter
Type
Required
Description
Parameter
ipType
stringRequired
YesDescription
IPv4 IP address in a string or numeric format or IPv6 IP address in a string format. If omitted, the caller’s IP address is assumedParameter
keyType
stringRequired
YesDescription
Your API keyResponses
200OK
200
OK
Sample Query
GET
https://api-bdc.net/data/hazard-report?ip=18.97.9.175&key=[YOUR API KEY]
Schema
application/json
isKnownAsTorServerbooleanDetermines whether the requested ip address is known as utilised by a TOR server
isKnownAsTorServerboolean
Determines whether the requested ip address is known as utilised by a TOR server
isKnownAsVpnbooleanDetermines whether the requested ip address is known as utilised by a VPN server
isKnownAsVpnboolean
Determines whether the requested ip address is known as utilised by a VPN server
isKnownAsProxybooleanDetermines whether the requested ip address is known as utilised by a proxy server
isKnownAsProxyboolean
Determines whether the requested ip address is known as utilised by a proxy server
isSpamhausDropbooleanDetermines whether the requested ip address is listed on the spamhause drop all traffic list.
The spamhaus drop (don't route or peer) lists are advisory 'drop all traffic' lists, consisting of netblocks that are 'hijacked'
or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers)
isSpamhausDropboolean
Determines whether the requested ip address is listed on the spamhause drop all traffic list.
The spamhaus drop (don't route or peer) lists are advisory 'drop all traffic' lists, consisting of netblocks that are 'hijacked'
or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers)
isSpamhausEdropbooleanDetermines whether the requested ip address is listed on the spamhause edrop list
According to spamhaus, edrop is an extension of the drop list that includes sub-allocated netblocks controlled by spammers or cyber criminals
isSpamhausEdropboolean
Determines whether the requested ip address is listed on the spamhause edrop list
According to spamhaus, edrop is an extension of the drop list that includes sub-allocated netblocks controlled by spammers or cyber criminals
isSpamhausAsnDropbooleandetermines whether the requested ip address is listed on the spamhause asn-drop list.
According to spamhaus, asn-drop contains a list of autonomous system numbers controlled by spammers or cyber criminals, as well as hijacked asns
isSpamhausAsnDropboolean
determines whether the requested ip address is listed on the spamhause asn-drop list.
According to spamhaus, asn-drop contains a list of autonomous system numbers controlled by spammers or cyber criminals, as well as hijacked asns
isBlacklistedUceprotectbooleanDetermines whether the requested ip address is blacklisted at uceprotect.net or backscatterer.org
isBlacklistedUceprotectboolean
Determines whether the requested ip address is blacklisted at uceprotect.net or backscatterer.org
isBlacklistedBlocklistDebooleanDetermines whether the requested ip address is blacklisted at blocklist.de
isBlacklistedBlocklistDeboolean
Determines whether the requested ip address is blacklisted at blocklist.de
isKnownAsMailServerbooleanDetermines whether the requested ip address is known as utilised by an SMTP mail server
isKnownAsMailServerboolean
Determines whether the requested ip address is known as utilised by an SMTP mail server
mailServerDomainstringThe last detected SMTP domain name making use of this ip address
mailServerDomainstring
The last detected SMTP domain name making use of this ip address
isKnownAsPublicRouterbooleanDetermines whether the requested ip address is known as utilised by a public router
isKnownAsPublicRouterboolean
Determines whether the requested ip address is known as utilised by a public router
isBogonbooleanIndicates whether the IP address is excluded from public Internet use
by the authorities but announced into the global routing table via BGP
isBogonboolean
Indicates whether the IP address is excluded from public Internet use
by the authorities but announced into the global routing table via BGP
isUnreachablebooleanDetermines whether the requested ip address is not reachable via the public Internet
isUnreachableboolean
Determines whether the requested ip address is not reachable via the public Internet
hostingLikelihoodintegerThe likelihood 0-10 of a hosting origin
hostingLikelihoodinteger
The likelihood 0-10 of a hosting origin
isHostingAsnbooleanDetermines whether the requested ip address was announced by an autonomous system which is likely to publish hosting networks
isHostingAsnboolean
Determines whether the requested ip address was announced by an autonomous system which is likely to publish hosting networks
isCellularbooleanDetermines whether the requested ip address was detected as utilised within a cellular network
isCellularboolean
Determines whether the requested ip address was detected as utilised within a cellular network
iCloudPrivateRelaybooleanDetermines whether the requested ip address was detected as Apple iCloud Private Relay address
iCloudPrivateRelayboolean
Determines whether the requested ip address was detected as Apple iCloud Private Relay address
Sample Response
JSON View
403Access denied, or your quota limit has exceeded
403
Access denied, or your quota limit has exceeded
Sample Response
JSON View
405The requested IP address is not valid
405
The requested IP address is not valid
Sample Response
JSON View
500An error has occurred and did not complete your request. Please try again
500
An error has occurred and did not complete your request. Please try again
Sample Response
JSON View
Was this page helpful?