{"uid":"cap_1lGVm7Jpdaw2FbrHmvMp6","slug":"cyber-intel-api-ip-threat-intelligence-lookup-2f29ef09","name":"Cyber Intel API - IP Threat Intelligence Lookup","description":"Cybersecurity threat intelligence powered by AbuseIPDB and Claude AI","url":"https://cyber-intel-api-production-a3c1.up.railway.app/api/ip/%7Bip%7D","method":"GET","headers":{},"bodySchema":{"properties":{"input":{"required":["method"],"properties":{"method":{"enum":["GET"],"type":"string"},"pathParams":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ipAddress":"118.25.6.39","countryCode":"CN","totalReports":642,"abuseConfidenceScore":100}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_snpPbl0Kw83Jw8v--pKdn","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up an IP address and returns cybersecurity threat intelligence including abuse confidence score, country, and total abuse reports, powered by AbuseIPDB and Claude AI","exampleAgentPrompt":"Can you check whether the IP address 118.25.6.39 is malicious? I want to see its abuse confidence score, how many times it's been reported, and what country it's from.","exampleUseCases":null,"resultDescription":"Returns a JSON object with the queried IP address, its two-letter country code, the total number of abuse reports submitted against it, and an abuse confidence score from 0–100 (100 meaning near-certain malicious activity), enriched with AI-powered analysis.","failureModes":["Invalid IP address format returns an error","Private/reserved IP addresses may return limited or no data","AbuseIPDB API downtime causes lookup failure","Rate limits exceeded returns 429 error","IP not found in database returns zero reports and null confidence score"],"whenToPreferThis":"Use this endpoint when you need a quick, pay-per-call threat intelligence check on a specific IP address and want both raw AbuseIPDB data and AI-enriched context. Ideal for real-time security workflows, incident response triage, or firewall rule validation where you need an instant abuse reputation score without a subscription to a full threat intel platform.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:40:41.225Z","isFirstParty":false}