Run a LIVE network & abuse reputation check on an IP address or a domain name. Performs real DNS / DNSBL / reverse-DNS lookups (something an LLM cannot do on its own) and returns: geolocation (RIR country) + ASN/organisation + BGP prefix, reverse DNS (PTR), a network-TYPE deduction (datacenter/hosting, VPN/proxy, Tor exit, mobile/carrier, or residential ISP), DNS blocklist (DNSBL) membership, Tor-exit status, and a 0–100 abuse/risk score with a CLEAN / LOW_RISK / ELEVATED / HIGH_RISK verdict and explained findings. Use this to vet inbound traffic, validate signups/registrations, decide whether to challenge a request, or moderate user-supplied IPs/domains. Pass deep=true for more blocklists and richer reasons.

Run the live IP/domain reputation check on several targets at once (e.g. a list of IPs from your logs). Returns one concise verdict per target. Useful for batch-vetting traffic or a blocklist candidate set.