Api Endpoint

IP Abuse Check

AbuseIPDB abuse report for a single IP — the crowd-sourced abuse-confidence score (0-100) the fail2ban / SSH-scanner / web-attack ecosystem reports into. Pass ip (IPv4 or IPv6). Returns abuseConfidenceScore, totalReports, numDistinctUsers, lastReportedAt, usageType (e.g. Data Center / Residential), ISP, domain, hostnames, isTor, isWhitelisted, and country. Set verbose=true for the individual report records (categories + reporter country). Optional maxAgeInDays (1-365, default 90) bounds the reporting window. Live crowd data an LLM cannot know — SOC alert triage, login-abuse blocking, and firewall decisions.

Open interactive test console

Offering

Provider: 2s.io
Method: GET
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://2s.io/api/security/ip-abuse
MIME type: application/json
First seen: 2026-10-16T02:00:30.940Z
Last seen: 2026-11-02T01:53:57.884Z
Tags: public-records, identifiers, AI-agents, us-gov-data, X402, upto-billing, ai-gateway, agent-infrastructure

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.0054 USDC
Atomic price: 5400 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Payment option 2: 0.0054 USDC
Atomic price: 5400 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "5400",
    "payTo": "0x2b6D4988Db4723E6908Db86Ab2b8dFBc51FC32C5"
  },
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "5400",
    "payTo": "TW6ntaGzvj63ZgPjszd4FCGmVTGfzv1MAYZbjYcyWhn"
  }
]

Observed health

Status: Healthy
Latest latency: 1783 ms
Average latency: 937 ms
HTTP status: 402
Last checked: 2026-11-02T01:53:57.879Z
Reachability: 100% over 12 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "const": "http"
    },
    "method": {
      "const": "GET"
    },
    "queryParams": {
      "properties": {
        "ip": {
          "type": "string",
          "description": "IPv4 or IPv6 address."
        },
        "maxAgeInDays": {
          "type": "integer",
          "minimum": 1,
          "maximum": 365,
          "default": 90
        },
        "verbose": {
          "type": "boolean",
          "description": "Include individual report records.",
          "default": false
        }
      },
      "required": [
        "ip"
      ]
    }
  },
  "required": [
    "type",
    "method",
    "queryParams"
  ]
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "input": {
      "type": "object",
      "properties": {
        "type": {
          "const": "http"
        },
        "method": {
          "const": "GET"
        },
        "queryParams": {
          "properties": {
            "ip": {
              "type": "string",
              "description": "IPv4 or IPv6 address."
            },
            "maxAgeInDays": {
              "type": "integer",
              "minimum": 1,
              "maximum": 365,
              "default": 90
            },
            "verbose": {
              "type": "boolean",
              "description": "Include individual report records.",
              "default": false
            }
          },
          "required": [
            "ip"
          ]
        }
      },
      "required": [
        "type",
        "method",
        "queryParams"
      ]
    }
  },
  "required": [
    "input"
  ]
}