{
  "x402Version": 2,
  "id": 29544,
  "slug": "29544",
  "resource": "https://netintel.dev/ip-reputation/analyze",
  "description": "IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds and returns a composite risk score, threat categories, malware families, and full source data.",
  "type": "http",
  "serviceName": "NetIntel",
  "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png",
  "resourceType": "Beauty & Personal Care",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "50000",
      "amountUsd": 0.05,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "payTo": "8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s",
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "amount": "50000",
      "amountUsd": 0.05,
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "properties": {
          "abuseipdb": {
            "type": "object"
          },
          "composite": {
            "type": "object"
          },
          "ip": {
            "type": "string"
          },
          "otx": {
            "type": "object"
          },
          "risk_level": {
            "type": "string"
          },
          "risk_score": {
            "description": "0-100, higher = more malicious",
            "type": "number"
          }
        },
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "queryParams": {
            "ip": "185.220.101.45"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "abuseipdb": {
              "categories": [
                18,
                14
              ],
              "confidence_score": 100,
              "distinct_reporters": 312,
              "domain": "frantech.ca",
              "isp": "Frantech Solutions",
              "last_reported_at": "2024-11-01T14:22:00Z",
              "total_reports": 1842,
              "usage_type": "Data Center/Web Hosting/Transit"
            },
            "composite": {
              "first_seen": "2022-03-11",
              "is_malicious": true,
              "last_seen": "2024-11-01T14:22:00Z",
              "threat_categories": [
                "brute_force",
                "port_scan"
              ]
            },
            "ip": "185.220.101.45",
            "otx": {
              "asn": "AS53667",
              "available": true,
              "country_code": "NL",
              "malware_families": [
                "Mirai"
              ],
              "pulse_count": 38,
              "reputation": -100,
              "threat_types": [
                "scanning"
              ]
            },
            "risk_level": "critical",
            "risk_score": 87
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "ip": {
                    "description": "IPv4 or IPv6 address to check",
                    "type": "string"
                  }
                },
                "required": [
                  "ip"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "properties": {
                  "abuseipdb": {
                    "type": "object"
                  },
                  "composite": {
                    "type": "object"
                  },
                  "ip": {
                    "type": "string"
                  },
                  "otx": {
                    "type": "object"
                  },
                  "risk_level": {
                    "type": "string"
                  },
                  "risk_score": {
                    "description": "0-100, higher = more malicious",
                    "type": "number"
                  }
                },
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "ip reputation",
    "ip reputation check",
    "ip blacklist check",
    "abuse score",
    "malicious ip check",
    "bazaar"
  ],
  "sourceHost": "netintel.dev",
  "lastUpdated": "2026-10-13T14:01:52.065Z",
  "quality": {
    "calls30d": 5,
    "uniquePayers30d": 3,
    "lastCalledAt": "2026-10-13T14:01:51.713Z"
  },
  "metadata": {
    "serviceName": "NetIntel",
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "ip": "185.220.101.45"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "abuseipdb": {
                "categories": [
                  18,
                  14
                ],
                "confidence_score": 100,
                "distinct_reporters": 312,
                "domain": "frantech.ca",
                "isp": "Frantech Solutions",
                "last_reported_at": "2024-11-01T14:22:00Z",
                "total_reports": 1842,
                "usage_type": "Data Center/Web Hosting/Transit"
              },
              "composite": {
                "first_seen": "2022-03-11",
                "is_malicious": true,
                "last_seen": "2024-11-01T14:22:00Z",
                "threat_categories": [
                  "brute_force",
                  "port_scan"
                ]
              },
              "ip": "185.220.101.45",
              "otx": {
                "asn": "AS53667",
                "available": true,
                "country_code": "NL",
                "malware_families": [
                  "Mirai"
                ],
                "pulse_count": 38,
                "reputation": -100,
                "threat_types": [
                  "scanning"
                ]
              },
              "risk_level": "critical",
              "risk_score": 87
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "ip": {
                      "description": "IPv4 or IPv6 address to check",
                      "type": "string"
                    }
                  },
                  "required": [
                    "ip"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "abuseipdb": {
                      "type": "object"
                    },
                    "composite": {
                      "type": "object"
                    },
                    "ip": {
                      "type": "string"
                    },
                    "otx": {
                      "type": "object"
                    },
                    "risk_level": {
                      "type": "string"
                    },
                    "risk_score": {
                      "description": "0-100, higher = more malicious",
                      "type": "number"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "netintel.dev",
    "manifest_name": "netintel.dev",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "abuseipdb": {
      "categories": [
        18,
        14
      ],
      "confidence_score": 100,
      "distinct_reporters": 312,
      "domain": "frantech.ca",
      "isp": "Frantech Solutions",
      "last_reported_at": "2024-11-01T14:22:00Z",
      "total_reports": 1842,
      "usage_type": "Data Center/Web Hosting/Transit"
    },
    "composite": {
      "first_seen": "2022-03-11",
      "is_malicious": true,
      "last_seen": "2024-11-01T14:22:00Z",
      "threat_categories": [
        "brute_force",
        "port_scan"
      ]
    },
    "ip": "185.220.101.45",
    "otx": {
      "asn": "AS53667",
      "available": true,
      "country_code": "NL",
      "malware_families": [
        "Mirai"
      ],
      "pulse_count": 38,
      "reputation": -100,
      "threat_types": [
        "scanning"
      ]
    },
    "risk_level": "critical",
    "risk_score": 87
  }
}