IP Check

Endpoint

GET/v1/key/check/{ip_or_domain}

Authentication

Authorization: Bearer sk_...

Daily Quota

Tier-based (per lookup)

Response

application/json

← Back to Overview

Request

Look up reputation data for any IPv4, IPv6 address, or domain name. Domains are resolved via DNS and the first public IP is used for the lookup. Returns sensor-observed activity, behavioral classifications, community reports, and geolocation. If the IP has no recorded activity, returns HTTP 200 with found: false and confidenceLevel: 0.

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."}
)

data = response.json()
print(f"Confidence: {data['confidenceLevel']}")

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();
console.log(`Confidence: ${data.confidenceLevel}`);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);
echo "Confidence: " . $data['confidenceLevel'];

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/203.0.113.42", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
    fmt.Printf("Confidence: %v\n", data["confidenceLevel"])
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42");
var content = await response.Content.ReadAsStringAsync();
Console.WriteLine(content);

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

data = JSON.parse(response.body)
puts "Confidence: #{data['confidenceLevel']}"

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
        .headers(headers)
        .send()
        .await?
        .json::<serde_json::Value>()
        .await?;

    println!("Confidence: {}", resp["confidenceLevel"]);
    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/example.com" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/example.com",
    headers={"Authorization": "Bearer sk_free_..."}
)

data = response.json()
print(f"Resolved from: {data.get('resolvedFrom')}")
print(f"IP: {data['ip']}")
print(f"Confidence: {data['confidenceLevel']}")

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/example.com",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();
console.log(`Resolved: ${data.resolvedFrom} → ${data.ip}`);
console.log(`Confidence: ${data.confidenceLevel}`);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/example.com");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);
echo "Resolved: " . $data['resolvedFrom'] . " → " . $data['ip'];

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/example.com", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
    fmt.Printf("Resolved: %v → %v\n", data["resolvedFrom"], data["ip"])
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/example.com"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/example.com");
var content = await response.Content.ReadAsStringAsync();
Console.WriteLine(content);

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/example.com"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/check/example.com")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

data = JSON.parse(response.body)
puts "Resolved: #{data['resolvedFrom']} → #{data['ip']}"

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/example.com")
        .headers(headers)
        .send()
        .await?
        .json::<serde_json::Value>()
        .await?;

    println!("Resolved: {} → {}", resp["resolvedFrom"], resp["ip"]);
    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42?maxAge=7&verbose=false&protocols=ssh" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."},
    params={
        "maxAge": 7,
        "verbose": "false",
        "protocols": "ssh"
    }
)

data = response.json()

const params = new URLSearchParams({
  maxAge: "7",
  verbose: "false",
  protocols: "ssh"
});

const response = await fetch(
  `https://api.sikkerapi.com/v1/key/check/203.0.113.42?${params}`,
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();

<?php
$params = http_build_query([
    'maxAge' => 7,
    'verbose' => 'false',
    'protocols' => 'ssh'
]);

$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42?" . $params);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);

package main

import (
    "encoding/json"
    "net/http"
    "net/url"
)

func main() {
    baseURL := "https://api.sikkerapi.com/v1/key/check/203.0.113.42"
    params := url.Values{}
    params.Add("maxAge", "7")
    params.Add("verbose", "false")
    params.Add("protocols", "ssh")

    req, _ := http.NewRequest("GET", baseURL+"?"+params.Encode(), nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
}

import java.net.http.*;
import java.net.URI;

String url = "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh";

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create(url))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh");

import java.net.http.*
import java.net.URI

val url = "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh"

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create(url))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())

require 'net/http'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
uri.query = URI.encode_www_form(
  maxAge: 7, verbose: "false", protocols: "ssh"
)

request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
        .query(&[("maxAge", "7"), ("verbose", "false"), ("protocols", "ssh")])
        .headers(headers)
        .send()
        .await?;

    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."},
    params={"exclude": "contributor"}
)

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);

package main

import (
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor");

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())

require 'net/http'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor")
        .headers(headers)
        .send()
        .await?;

    Ok(())
}

Query Parameters

All optional. Omit for full response with descriptions.

Optional filters

maxAgeintegerOnly return data if last seen/reported within N days. 1–365.

excludestringOmit sections: sensor, contributor.

verbosebooleanStrip descriptions when false. Default: true.

protocolsstringFilter by protocol (e.g. ssh,http).

ignoreWhitelistbooleanRaw score without discounting. Default: false.

Response Map

Each section of the response is documented with its fields and an example value.

Top-level200 OK

ipstringQueried IP (resolved if domain)

resolvedFromstring?Original domain, if input was a hostname

confidenceLevelinteger0–100, whitelist-discounted

firstSeenlong?First sensor hit (epoch ms)

lastSeenlong?Latest sensor hit (epoch ms)

totalSessionsintegerTotal honeypot sessions

totalEventsintegerTotal events

"ip": "203.0.113.42", "resolvedFrom": null, "confidenceLevel": 78, "firstSeen": 1705312425000, "lastSeen": 1706108532000, "totalSessions": 45, "totalEvents": 1250

geoobject?

countryCodestring?ISO 3166-1 alpha-2

countryNamestring?Full name

citystring?City name

asnstring?AS number

asnOrgstring?Organization

isTorbooleanTor exit node

isProxybooleanProxy / VPN

"countryCode": "US", "countryName": "United States", "city": "New York", "asn": "AS12345", "asnOrg": "Example ISP", "isTor": false, "isProxy": false

protocols[]array

protocolstringProtocol name

sessionsintegerSessions count

eventsintegerEvents count

[ { "protocol": "ssh", "sessions": 15, "events": 650 }, { "protocol": "http", "sessions": 30, "events": 600 } ]

behaviors[]array

namestringBehavior identifier

severitystringvery_high | high | medium | low

countintegerSessions detected

protocolstring?Protocol observed

descriptionstring?Omitted if verbose=false

[ { "name": "credential_stuffing", "severity": "high", "count": 12, "protocol": "ssh", "description": "Multiple login..." } ]

primitives[]array

namestringPrimitive identifier

countintegerSessions matched

protocolstring?Protocol observed

descriptionstring?Omitted if verbose=false

[ { "name": "wget_download", "count": 5, "protocol": "ssh", "description": "wget used to..." } ]

contributorobject? · Report API

totalReportsintegerTotal abuse reports

uniqueReportersintegerDistinct reporters

categoriesobject{category_id: count}

protocolsobject{protocol: count}

firstReportedAtlong?First report (epoch ms)

lastReportedAtlong?Latest report (epoch ms)

reportsarray?Individual reports (max 25)

{ "totalReports": 8, "uniqueReporters": 3, "categories": {"1":5}, "protocols": {"ssh":6}, "firstReportedAt": 1705400000000, "lastReportedAt": 1706100000000, "reports": [{ "category": 1, "categoryName": "brute_force", "protocol": "ssh", "comment": "Failed logins", "reportedAt": 1706100000000 }] }

Not Found Response

200 OK — IP has no recorded activity

{ "ip": "203.0.113.42", "found": false, "confidenceLevel": 0, "geo": { /* still returned */ }, "firstSeen": null, "lastSeen": null, "totalSessions": 0, "totalEvents": 0, "protocols": [], "behaviors": [], "primitives": [], "contributor": null }

Errors

All errors return JSON with an "error" field

400Invalid IP address or hostname.check input

400Could not resolve hostname.NXDOMAIN / no records

400Domain resolves to private addresses only.RFC 1918 / loopback

401Missing or invalid API key.check header

403API key disabled or expired.regenerate

429Daily quota exhausted.upgrade or resets at midnight UTC

504DNS resolution timed out.try again

Get started — Create a free API key and start checking IPs in under a minute. Free tier includes 1,000 lookups per day. Create free API key →

IP Check

Endpoint

GET/v1/key/check/{ip_or_domain}

Authentication

Authorization: Bearer sk_...

Daily Quota

Tier-based (per lookup)

Response

application/json

← Back to Overview

Request

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."}
)

data = response.json()
print(f"Confidence: {data['confidenceLevel']}")

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();
console.log(`Confidence: ${data.confidenceLevel}`);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);
echo "Confidence: " . $data['confidenceLevel'];

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/203.0.113.42", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
    fmt.Printf("Confidence: %v\n", data["confidenceLevel"])
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42");
var content = await response.Content.ReadAsStringAsync();
Console.WriteLine(content);

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

data = JSON.parse(response.body)
puts "Confidence: #{data['confidenceLevel']}"

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
        .headers(headers)
        .send()
        .await?
        .json::<serde_json::Value>()
        .await?;

    println!("Confidence: {}", resp["confidenceLevel"]);
    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/example.com" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/example.com",
    headers={"Authorization": "Bearer sk_free_..."}
)

data = response.json()
print(f"Resolved from: {data.get('resolvedFrom')}")
print(f"IP: {data['ip']}")
print(f"Confidence: {data['confidenceLevel']}")

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/example.com",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();
console.log(`Resolved: ${data.resolvedFrom} → ${data.ip}`);
console.log(`Confidence: ${data.confidenceLevel}`);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/example.com");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);
echo "Resolved: " . $data['resolvedFrom'] . " → " . $data['ip'];

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/example.com", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
    fmt.Printf("Resolved: %v → %v\n", data["resolvedFrom"], data["ip"])
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/example.com"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/example.com");
var content = await response.Content.ReadAsStringAsync();
Console.WriteLine(content);

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/example.com"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/check/example.com")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

data = JSON.parse(response.body)
puts "Resolved: #{data['resolvedFrom']} → #{data['ip']}"

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/example.com")
        .headers(headers)
        .send()
        .await?
        .json::<serde_json::Value>()
        .await?;

    println!("Resolved: {} → {}", resp["resolvedFrom"], resp["ip"]);
    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42?maxAge=7&verbose=false&protocols=ssh" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."},
    params={
        "maxAge": 7,
        "verbose": "false",
        "protocols": "ssh"
    }
)

data = response.json()

const params = new URLSearchParams({
  maxAge: "7",
  verbose: "false",
  protocols: "ssh"
});

const response = await fetch(
  `https://api.sikkerapi.com/v1/key/check/203.0.113.42?${params}`,
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

const data = await response.json();

<?php
$params = http_build_query([
    'maxAge' => 7,
    'verbose' => 'false',
    'protocols' => 'ssh'
]);

$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42?" . $params);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);
$data = json_decode($response, true);

package main

import (
    "encoding/json"
    "net/http"
    "net/url"
)

func main() {
    baseURL := "https://api.sikkerapi.com/v1/key/check/203.0.113.42"
    params := url.Values{}
    params.Add("maxAge", "7")
    params.Add("verbose", "false")
    params.Add("protocols", "ssh")

    req, _ := http.NewRequest("GET", baseURL+"?"+params.Encode(), nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var data map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&data)
}

import java.net.http.*;
import java.net.URI;

String url = "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh";

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create(url))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh");

import java.net.http.*
import java.net.URI

val url = "https://api.sikkerapi.com/v1/key/check/203.0.113.42" +
    "?maxAge=7&verbose=false&protocols=ssh"

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create(url))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())

require 'net/http'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
uri.query = URI.encode_www_form(
  maxAge: 7, verbose: "false", protocols: "ssh"
)

request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42")
        .query(&[("maxAge", "7"), ("verbose", "false"), ("protocols", "ssh")])
        .headers(headers)
        .send()
        .await?;

    Ok(())
}

curl "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor" \
  -H "Authorization: Bearer sk_free_..."

import requests

response = requests.get(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42",
    headers={"Authorization": "Bearer sk_free_..."},
    params={"exclude": "contributor"}
)

const response = await fetch(
  "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor",
  {
    headers: {
      "Authorization": "Bearer sk_free_..."
    }
  }
);

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_..."
    ]
]);

$response = curl_exec($ch);

package main

import (
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor", nil)
    req.Header.Set("Authorization", "Bearer sk_free_...")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()
}

import java.net.http.*;
import java.net.URI;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor"))
    .header("Authorization", "Bearer sk_free_...")
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());

using System.Net.Http;
using System.Net.Http.Headers;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var response = await client.GetAsync(
    "https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor");

import java.net.http.*
import java.net.URI

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor"))
    .header("Authorization", "Bearer sk_free_...")
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())

require 'net/http'

uri = URI("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer sk_free_..."

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

use reqwest::header::{AUTHORIZATION, HeaderMap};

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);

    let client = reqwest::Client::new();
    let resp = client
        .get("https://api.sikkerapi.com/v1/key/check/203.0.113.42?exclude=contributor")
        .headers(headers)
        .send()
        .await?;

    Ok(())
}

Query Parameters

All optional. Omit for full response with descriptions.

Optional filters

maxAgeintegerOnly return data if last seen/reported within N days. 1–365.

excludestringOmit sections: sensor, contributor.

verbosebooleanStrip descriptions when false. Default: true.

protocolsstringFilter by protocol (e.g. ssh,http).

ignoreWhitelistbooleanRaw score without discounting. Default: false.

Response Map

Each section of the response is documented with its fields and an example value.

Top-level200 OK

ipstringQueried IP (resolved if domain)

resolvedFromstring?Original domain, if input was a hostname

confidenceLevelinteger0–100, whitelist-discounted

firstSeenlong?First sensor hit (epoch ms)

lastSeenlong?Latest sensor hit (epoch ms)

totalSessionsintegerTotal honeypot sessions

totalEventsintegerTotal events

"ip": "203.0.113.42", "resolvedFrom": null, "confidenceLevel": 78, "firstSeen": 1705312425000, "lastSeen": 1706108532000, "totalSessions": 45, "totalEvents": 1250

geoobject?

countryCodestring?ISO 3166-1 alpha-2

countryNamestring?Full name

citystring?City name

asnstring?AS number

asnOrgstring?Organization

isTorbooleanTor exit node

isProxybooleanProxy / VPN

"countryCode": "US", "countryName": "United States", "city": "New York", "asn": "AS12345", "asnOrg": "Example ISP", "isTor": false, "isProxy": false

protocols[]array

protocolstringProtocol name

sessionsintegerSessions count

eventsintegerEvents count

[ { "protocol": "ssh", "sessions": 15, "events": 650 }, { "protocol": "http", "sessions": 30, "events": 600 } ]

behaviors[]array

namestringBehavior identifier

severitystringvery_high | high | medium | low

countintegerSessions detected

protocolstring?Protocol observed

descriptionstring?Omitted if verbose=false

[ { "name": "credential_stuffing", "severity": "high", "count": 12, "protocol": "ssh", "description": "Multiple login..." } ]

primitives[]array

namestringPrimitive identifier

countintegerSessions matched

protocolstring?Protocol observed

descriptionstring?Omitted if verbose=false

[ { "name": "wget_download", "count": 5, "protocol": "ssh", "description": "wget used to..." } ]

contributorobject? · Report API

totalReportsintegerTotal abuse reports

uniqueReportersintegerDistinct reporters

categoriesobject{category_id: count}

protocolsobject{protocol: count}

firstReportedAtlong?First report (epoch ms)

lastReportedAtlong?Latest report (epoch ms)

reportsarray?Individual reports (max 25)

Not Found Response

200 OK — IP has no recorded activity

Errors

All errors return JSON with an "error" field

400Invalid IP address or hostname.check input

400Could not resolve hostname.NXDOMAIN / no records

400Domain resolves to private addresses only.RFC 1918 / loopback

401Missing or invalid API key.check header

403API key disabled or expired.regenerate

429Daily quota exhausted.upgrade or resets at midnight UTC

504DNS resolution timed out.try again

Get started — Create a free API key and start checking IPs in under a minute. Free tier includes 1,000 lookups per day. Create free API key →