> ## Documentation Index
> Fetch the complete documentation index at: https://developers.everflow.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get IP Address Blacklist Incident

> **Traffic Health Premium.** A single hosting-IP blocklist incident by its identifier — provider and vendor, status, the IP address it affects, the vendor's listing details, and a delist URL where available. Requires `has_blacklist_monitoring`.


<Note>Requires **Traffic Health Premium** (`has_blacklist_monitoring`).</Note>

A single hosting-IP blocklist incident by its identifier — provider and vendor, status, the IP address it affects, the vendor's listing details, and a delist URL where available.


## OpenAPI

````yaml openapi/traffic-health.yaml get /networks/traffic/blacklistincidents/ipaddresses/{blacklistIncidentIdentifier}
openapi: 3.0.3
info:
  title: Everflow Network API - Traffic Health
  description: >
    Read endpoints for Traffic Health — the operational health of the domains
    and hosting IPs behind your tracking and conversion links. Surfaces uptime /
    SSL / DNS / expiry incidents, blocklist reputation, the remediation tasks
    that need your attention, and per-domain assignment summaries.


    Traffic Health has two tiers. The capabilities available to a network are
    reported by `GET /networks/traffic/access`. Endpoints marked **Traffic
    Health Premium** (domain and IP blocklist reputation) require the premium
    package; on a network without it they return an authorization error rather
    than data.


    For how these incidents and reputation flags work, see [Traffic Health:
    Incidents & Reputation
    Management](https://helpdesk.everflow.io/customer/traffic-health-incidents-and-reputation-management).
  version: 1.0.0
servers:
  - url: https://api.eflow.team/v1
security: []
tags:
  - name: Traffic Health
paths:
  /networks/traffic/blacklistincidents/ipaddresses/{blacklistIncidentIdentifier}:
    get:
      tags:
        - Traffic Health
      summary: Get IP Address Blacklist Incident
      description: >
        **Traffic Health Premium.** A single hosting-IP blocklist incident by
        its identifier — provider and vendor, status, the IP address it affects,
        the vendor's listing details, and a delist URL where available. Requires
        `has_blacklist_monitoring`.
      parameters:
        - in: path
          name: blacklistIncidentIdentifier
          required: true
          schema:
            type: string
          description: The IP blacklist incident identifier.
      responses:
        '200':
          description: ''
          content:
            application/json:
              example:
                network_id: 1
                ip_address: 203.0.113.44
                ip_address_id: 5
                identifier: BL9Q2X7K4ZP1
                status: active
                provider: hetrix_tools
                vendor: pbl.spamhaus.org
                time_created: 1775957980
                time_saved: 1782437980
                time_last_observed: 1782437980
                time_resolved: 0
                relationship:
                  vendor:
                    provider: Hetrix
                    category: IP Blocklist
                    name: Spamhaus PBL (pbl.spamhaus.org)
                    identifier: pbl.spamhaus.org
                    impact_level: high
                  ip_address:
                    ip_address_id: 5
                    ip_address: 203.0.113.44
                    ip_version: ipv4
                    is_external: false
                  delist_url: https://check.spamhaus.org/results/?query=203.0.113.44
              schema:
                $ref: '#/components/schemas/IpBlacklistIncident'
      security:
        - API Key: []
components:
  schemas:
    IpBlacklistIncident:
      type: object
      properties:
        network_id:
          type: integer
        ip_address:
          type: string
        ip_address_id:
          type: integer
        identifier:
          type: string
        status:
          type: string
        provider:
          type: string
        vendor:
          type: string
        time_created:
          type: integer
        time_saved:
          type: integer
        time_last_observed:
          type: integer
        time_resolved:
          type: integer
        relationship:
          type: object
          properties:
            vendor:
              $ref: '#/components/schemas/BlacklistVendor'
            ip_address:
              type: object
              properties:
                ip_address_id:
                  type: integer
                ip_address:
                  type: string
                ip_version:
                  type: string
                  description: '`ipv4` or `ipv6`.'
                is_external:
                  type: boolean
            delist_url:
              type: string
              description: Delisting request URL where available.
    BlacklistVendor:
      type: object
      description: Listing details for the flagging vendor.
      properties:
        provider:
          type: string
        category:
          type: string
        name:
          type: string
        identifier:
          type: string
        website_url:
          type: string
        impact_level:
          type: string
          description: '`low`, `medium`, or `high`.'
        impact_details:
          type: string
        listing_criteria:
          type: string
  securitySchemes:
    API Key:
      type: apiKey
      in: header
      name: X-Eflow-Api-Key

````