Report IP

Endpoint

POST/v1/key/report

Submit a report for a suspicious IP address. Reports contribute to the community threat intelligence database and are factored into confidence level calculations.

Each report is associated with your API key. There is no deduplication - multiple reports for the same IP increase its report count, which is a signal in the risk scoring algorithm.

Request

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{
    "ip": "203.0.113.42",
    "category": "brute_force",
    "protocol": "ssh",
    "comment": "Multiple failed login attempts"
  }'

import requests

response = requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={
        "Authorization": "Bearer sk_free_...",
        "Content-Type": "application/json"
    },
    json={
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
)

if response.json().get("success"):
    print("Report submitted successfully")

const response = await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "203.0.113.42",
    category: "brute_force",
    protocol: "ssh",
    comment: "Multiple failed login attempts"
  })
});

const result = await response.json();
if (result.success) {
  console.log("Report submitted successfully");
}

<?php
$data = [
    'ip' => '203.0.113.42',
    'category' => 'brute_force',
    'protocol' => 'ssh',
    'comment' => 'Multiple failed login attempts'
];

$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode($data),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);

$response = curl_exec($ch);
$result = json_decode($response, true);

if ($result['success']) {
    echo "Report submitted successfully\n";
}

package main

import (
    "bytes"
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    report := map[string]string{
        "ip":       "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment":  "Multiple failed login attempts",
    }

    body, _ := json.Marshal(report)
    req, _ := http.NewRequest("POST",
        "https://api.sikkerapi.com/v1/key/report",
        bytes.NewBuffer(body))

    req.Header.Set("Authorization", "Bearer sk_free_...")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var result map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&result)

    if result["success"] == true {
        fmt.Println("Report submitted successfully")
    }
}

import java.net.http.*;
import java.net.URI;

String json = """
    {
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
    """;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/report"))
    .header("Authorization", "Bearer sk_free_...")
    .header("Content-Type", "application/json")
    .POST(HttpRequest.BodyPublishers.ofString(json))
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;
using System.Text;
using System.Text.Json;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var report = new {
    ip = "203.0.113.42",
    category = "brute_force",
    protocol = "ssh",
    comment = "Multiple failed login attempts"
};

var content = new StringContent(
    JsonSerializer.Serialize(report),
    Encoding.UTF8,
    "application/json"
);

var response = await client.PostAsync(
    "https://api.sikkerapi.com/v1/key/report",
    content
);

var result = await response.Content.ReadAsStringAsync();
Console.WriteLine(result);

import java.net.http.*
import java.net.URI

val json = """
    {
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
""".trimIndent()

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/report"))
    .header("Authorization", "Bearer sk_free_...")
    .header("Content-Type", "application/json")
    .POST(HttpRequest.BodyPublishers.ofString(json))
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/report")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer sk_free_..."
request["Content-Type"] = "application/json"
request.body = {
  ip: "203.0.113.42",
  category: "brute_force",
  protocol: "ssh",
  comment: "Multiple failed login attempts"
}.to_json

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

result = JSON.parse(response.body)
puts "Report submitted successfully" if result["success"]

use reqwest::header::{AUTHORIZATION, CONTENT_TYPE, HeaderMap};
use serde::{Deserialize, Serialize};

#[derive(Serialize)]
struct Report {
    ip: String,
    category: String,
    protocol: String,
    comment: String,
}

#[derive(Deserialize)]
struct Response {
    success: bool,
}

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);
    headers.insert(CONTENT_TYPE, "application/json".parse()?);

    let report = Report {
        ip: "203.0.113.42".to_string(),
        category: "brute_force".to_string(),
        protocol: "ssh".to_string(),
        comment: "Multiple failed login attempts".to_string(),
    };

    let client = reqwest::Client::new();
    let resp: Response = client
        .post("https://api.sikkerapi.com/v1/key/report")
        .headers(headers)
        .json(&report)
        .send()
        .await?
        .json()
        .await?;

    if resp.success {
        println!("Report submitted successfully");
    }
    Ok(())
}

Request Body

The request body must be JSON with the following fields:

Field	Type	Required	Description
ip	string	Yes	IPv4 or IPv6 address to report.
category	string \| int	Yes	Attack category. Can be a name (e.g. brute_force) or numeric ID (1-16).
protocol	string	No	Protocol involved (e.g. ssh, http). Max 32 characters.
comment	string	No	Additional context about the suspicious activity. Max 1000 characters.

Minimal request

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.42", "category": "brute_force"}'

import requests

requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={"Authorization": "Bearer sk_free_..."},
    json={"ip": "203.0.113.42", "category": "brute_force"}
)

await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "203.0.113.42",
    category: "brute_force"
  })
});

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode([
        'ip' => '203.0.113.42',
        'category' => 'brute_force'
    ]),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);
curl_exec($ch);

Using numeric category

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{"ip": "2001:db8::1", "category": 1}'

import requests

# Using numeric category ID (1 = brute_force)
requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={"Authorization": "Bearer sk_free_..."},
    json={"ip": "2001:db8::1", "category": 1}
)

// Using numeric category ID (1 = brute_force)
await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "2001:db8::1",
    category: 1
  })
});

<?php
// Using numeric category ID (1 = brute_force)
$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode([
        'ip' => '2001:db8::1',
        'category' => 1
    ]),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);
curl_exec($ch);

ID	Name	Description
1	brute_force	Brute force / credential stuffing attacks
2	port_scan	Port scanning / reconnaissance
3	ddos	DDoS / botnet activity
4	web_exploit	Web application exploitation
5	sql_injection	SQL injection attempts
6	phishing	Phishing / social engineering
7	spam	Spam / email abuse
8	bad_bot	Bad bots / scrapers
9	exploited_host	Compromised / exploited host
10	malware	Malware distribution
11	dns_abuse	DNS abuse / tunneling
12	open_proxy	Open proxy / relay
13	iot_targeted	IoT device targeting
14	spoofing	IP / identity spoofing
15	fraud	Fraud / financial abuse
16	other	Other suspicious activity

Response

A successful report returns a simple confirmation. Errors return a JSON object with an error field.

Status	Meaning
200	Report submitted successfully.
400	Invalid request (bad IP, missing category, etc.).
401	Missing or invalid API key.
403	API key is disabled or expired.
429	Rate limit exceeded. Check Retry-After header.

200 - Success

{
  "success": true
}

400 - Invalid IP

{
  "error": "Invalid IP address"
}

400 - Invalid Category

{
  "error": "Invalid category (use 1-16 or name like 'brute_force')"
}

429 - Rate Limited

{
  "error": "Rate limit exceeded"
}

Rate Limits

Report submissions are rate-limited per API key. Limits vary by tier:

Tier	Reports/Day
Free	1,000
Basic	7,000
Small Business	14,000
Medium Business	30,000
Large Business	100,000

When rate limited, the response includes a Retry-After header indicating how many seconds to wait before retrying.

Rate limit headers on 429 responses:

Headers

HTTP/1.1 429 Too Many Requests
Retry-After: 5
Content-Type: application/json

Get started — Start reporting suspicious IPs to the community threat database. Free tier includes 1,000 reports per day. Create free API key →

Report IP

POST /v1/key/report · Back to Overview

Endpoint

POST/v1/key/report

Submit a report for a suspicious IP address. Reports contribute to the community threat intelligence database and are factored into confidence level calculations.

Each report is associated with your API key. There is no deduplication - multiple reports for the same IP increase its report count, which is a signal in the risk scoring algorithm.

Request

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{
    "ip": "203.0.113.42",
    "category": "brute_force",
    "protocol": "ssh",
    "comment": "Multiple failed login attempts"
  }'

import requests

response = requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={
        "Authorization": "Bearer sk_free_...",
        "Content-Type": "application/json"
    },
    json={
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
)

if response.json().get("success"):
    print("Report submitted successfully")

const response = await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "203.0.113.42",
    category: "brute_force",
    protocol: "ssh",
    comment: "Multiple failed login attempts"
  })
});

const result = await response.json();
if (result.success) {
  console.log("Report submitted successfully");
}

<?php
$data = [
    'ip' => '203.0.113.42',
    'category' => 'brute_force',
    'protocol' => 'ssh',
    'comment' => 'Multiple failed login attempts'
];

$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode($data),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);

$response = curl_exec($ch);
$result = json_decode($response, true);

if ($result['success']) {
    echo "Report submitted successfully\n";
}

package main

import (
    "bytes"
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    report := map[string]string{
        "ip":       "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment":  "Multiple failed login attempts",
    }

    body, _ := json.Marshal(report)
    req, _ := http.NewRequest("POST",
        "https://api.sikkerapi.com/v1/key/report",
        bytes.NewBuffer(body))

    req.Header.Set("Authorization", "Bearer sk_free_...")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    var result map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&result)

    if result["success"] == true {
        fmt.Println("Report submitted successfully")
    }
}

import java.net.http.*;
import java.net.URI;

String json = """
    {
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
    """;

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/report"))
    .header("Authorization", "Bearer sk_free_...")
    .header("Content-Type", "application/json")
    .POST(HttpRequest.BodyPublishers.ofString(json))
    .build();

HttpResponse<String> response = client.send(request,
    HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

using System.Net.Http;
using System.Net.Http.Headers;
using System.Text;
using System.Text.Json;

var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
    new AuthenticationHeaderValue("Bearer", "sk_free_...");

var report = new {
    ip = "203.0.113.42",
    category = "brute_force",
    protocol = "ssh",
    comment = "Multiple failed login attempts"
};

var content = new StringContent(
    JsonSerializer.Serialize(report),
    Encoding.UTF8,
    "application/json"
);

var response = await client.PostAsync(
    "https://api.sikkerapi.com/v1/key/report",
    content
);

var result = await response.Content.ReadAsStringAsync();
Console.WriteLine(result);

import java.net.http.*
import java.net.URI

val json = """
    {
        "ip": "203.0.113.42",
        "category": "brute_force",
        "protocol": "ssh",
        "comment": "Multiple failed login attempts"
    }
""".trimIndent()

val client = HttpClient.newHttpClient()
val request = HttpRequest.newBuilder()
    .uri(URI.create("https://api.sikkerapi.com/v1/key/report"))
    .header("Authorization", "Bearer sk_free_...")
    .header("Content-Type", "application/json")
    .POST(HttpRequest.BodyPublishers.ofString(json))
    .build()

val response = client.send(request, HttpResponse.BodyHandlers.ofString())
println(response.body())

require 'net/http'
require 'json'

uri = URI("https://api.sikkerapi.com/v1/key/report")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer sk_free_..."
request["Content-Type"] = "application/json"
request.body = {
  ip: "203.0.113.42",
  category: "brute_force",
  protocol: "ssh",
  comment: "Multiple failed login attempts"
}.to_json

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) do |http|
  http.request(request)
end

result = JSON.parse(response.body)
puts "Report submitted successfully" if result["success"]

use reqwest::header::{AUTHORIZATION, CONTENT_TYPE, HeaderMap};
use serde::{Deserialize, Serialize};

#[derive(Serialize)]
struct Report {
    ip: String,
    category: String,
    protocol: String,
    comment: String,
}

#[derive(Deserialize)]
struct Response {
    success: bool,
}

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut headers = HeaderMap::new();
    headers.insert(AUTHORIZATION, "Bearer sk_free_...".parse()?);
    headers.insert(CONTENT_TYPE, "application/json".parse()?);

    let report = Report {
        ip: "203.0.113.42".to_string(),
        category: "brute_force".to_string(),
        protocol: "ssh".to_string(),
        comment: "Multiple failed login attempts".to_string(),
    };

    let client = reqwest::Client::new();
    let resp: Response = client
        .post("https://api.sikkerapi.com/v1/key/report")
        .headers(headers)
        .json(&report)
        .send()
        .await?
        .json()
        .await?;

    if resp.success {
        println!("Report submitted successfully");
    }
    Ok(())
}

Request Body

The request body must be JSON with the following fields:

Field	Type	Required	Description
ip	string	Yes	IPv4 or IPv6 address to report.
category	string \| int	Yes	Attack category. Can be a name (e.g. brute_force) or numeric ID (1-16).
protocol	string	No	Protocol involved (e.g. ssh, http). Max 32 characters.
comment	string	No	Additional context about the suspicious activity. Max 1000 characters.

Minimal request

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.42", "category": "brute_force"}'

import requests

requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={"Authorization": "Bearer sk_free_..."},
    json={"ip": "203.0.113.42", "category": "brute_force"}
)

await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "203.0.113.42",
    category: "brute_force"
  })
});

<?php
$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode([
        'ip' => '203.0.113.42',
        'category' => 'brute_force'
    ]),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);
curl_exec($ch);

Using numeric category

curl -X POST "https://api.sikkerapi.com/v1/key/report" \
  -H "Authorization: Bearer sk_free_..." \
  -H "Content-Type: application/json" \
  -d '{"ip": "2001:db8::1", "category": 1}'

import requests

# Using numeric category ID (1 = brute_force)
requests.post(
    "https://api.sikkerapi.com/v1/key/report",
    headers={"Authorization": "Bearer sk_free_..."},
    json={"ip": "2001:db8::1", "category": 1}
)

// Using numeric category ID (1 = brute_force)
await fetch("https://api.sikkerapi.com/v1/key/report", {
  method: "POST",
  headers: {
    "Authorization": "Bearer sk_free_...",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    ip: "2001:db8::1",
    category: 1
  })
});

<?php
// Using numeric category ID (1 = brute_force)
$ch = curl_init("https://api.sikkerapi.com/v1/key/report");
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_POSTFIELDS => json_encode([
        'ip' => '2001:db8::1',
        'category' => 1
    ]),
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer sk_free_...",
        "Content-Type: application/json"
    ]
]);
curl_exec($ch);

ID	Name	Description
1	brute_force	Brute force / credential stuffing attacks
2	port_scan	Port scanning / reconnaissance
3	ddos	DDoS / botnet activity
4	web_exploit	Web application exploitation
5	sql_injection	SQL injection attempts
6	phishing	Phishing / social engineering
7	spam	Spam / email abuse
8	bad_bot	Bad bots / scrapers
9	exploited_host	Compromised / exploited host
10	malware	Malware distribution
11	dns_abuse	DNS abuse / tunneling
12	open_proxy	Open proxy / relay
13	iot_targeted	IoT device targeting
14	spoofing	IP / identity spoofing
15	fraud	Fraud / financial abuse
16	other	Other suspicious activity

Response

A successful report returns a simple confirmation. Errors return a JSON object with an error field.

Status	Meaning
200	Report submitted successfully.
400	Invalid request (bad IP, missing category, etc.).
401	Missing or invalid API key.
403	API key is disabled or expired.
429	Rate limit exceeded. Check Retry-After header.

200 - Success

{
  "success": true
}

400 - Invalid IP

{
  "error": "Invalid IP address"
}

400 - Invalid Category

{
  "error": "Invalid category (use 1-16 or name like 'brute_force')"
}

429 - Rate Limited

{
  "error": "Rate limit exceeded"
}

Rate Limits

Report submissions are rate-limited per API key. Limits vary by tier:

Tier	Reports/Day
Free	1,000
Basic	7,000
Small Business	14,000
Medium Business	30,000
Large Business	100,000

When rate limited, the response includes a Retry-After header indicating how many seconds to wait before retrying.

Rate limit headers on 429 responses:

Headers

HTTP/1.1 429 Too Many Requests
Retry-After: 5
Content-Type: application/json

Get started — Start reporting suspicious IPs to the community threat database. Free tier includes 1,000 reports per day. Create free API key →

Report IP

Endpoint

Request Body

Categories

Response

Rate Limits

Report IP

Endpoint

Request Body

Categories

Response

Rate Limits