Api Endpoint

IP Reputation Analyzer

IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds and returns a composite risk score, threat categories, malware families, and full source data.

Open interactive test console

Offering

Provider: netintel.dev
Method: GET
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://netintel.dev/ip-reputation/analyze
MIME type: application/json
First seen: 2026-10-16T01:50:14.534Z
Last seen: 2026-11-02T09:25:03.398Z
Tags: IP reputation, ip reputation check, ip blacklist check, abuse score, malicious ip check

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.05 USDC
Atomic price: 50000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Payment option 2: 0.05 USDC
Atomic price: 50000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "50000",
    "payTo": "0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df"
  },
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "50000",
    "payTo": "8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s"
  }
]

Observed health

Status: Healthy
Latest latency: 98 ms
Average latency: 103 ms
HTTP status: 402
Last checked: 2026-11-02T09:25:03.393Z
Reachability: 100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET"
      ]
    },
    "queryParams": {
      "type": "object",
      "properties": {
        "ip": {
          "type": "string",
          "description": "IPv4 or IPv6 address to check"
        }
      },
      "required": [
        "ip"
      ]
    }
  },
  "required": [
    "type",
    "method"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "json",
  "example": {
    "ip": "185.220.101.45",
    "otx": {
      "asn": "AS53667",
      "available": true,
      "reputation": -100,
      "pulse_count": 38,
      "country_code": "NL",
      "threat_types": [
        "scanning"
      ],
      "malware_families": [
        "Mirai"
      ]
    },
    "abuseipdb": {
      "isp": "Frantech Solutions",
      "domain": "frantech.ca",
      "categories": [
        18,
        14
      ],
      "usage_type": "Data Center/Web Hosting/Transit",
      "total_reports": 1842,
      "confidence_score": 100,
      "last_reported_at": "2024-11-01T14:22:00Z",
      "distinct_reporters": 312
    },
    "composite": {
      "last_seen": "2024-11-01T14:22:00Z",
      "first_seen": "2022-03-11",
      "is_malicious": true,
      "threat_categories": [
        "brute_force",
        "port_scan"
      ]
    },
    "risk_level": "critical",
    "risk_score": 87
  }
}