{"uid":"cap_M6d7YFcM37nuxtjeVjz6K","slug":"2s-ip-reputation-check-ac77283b","name":"2s IP Reputation Check","description":"Multi-source IP reputation with one combined authority score (0-100). Polls four independent reputation sources in parallel and blends them: AbuseIPDB (crowd-sourced abuse confidence), abuse.ch threat-lists (Feodo botnet C2 + ThreatFox + Spamhaus DROP + Tor exit nodes), blocklist.de (fail2ban attack-report network), and StopForumSpam. Returns combinedScore, a verdict (clean / low / suspicious / malicious), which sources flagged it, per-source opinions (score + weight + detail), and enrichment (ISP, usage type, country, ASN, Tor). An authoritative threat-list hit (botnet/malware/hijacked netblock) hard-floors the verdict at malicious. Per-source isolation: a down feed degrades that opinion only. The one-call answer for 'should I trust this IP?' instead of trusting a single feed.","url":"https://2s.io/api/security/ip-reputation?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 or IPv6 address."}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0036","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0036/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.009","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_e9JB3WdvDltKRVH4YSTUh","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.009","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks the reputation of an IPv4 or IPv6 address against multiple threat intelligence sources, returning a verdict, combined score, and enrichment data.","exampleAgentPrompt":"Check the reputation of IP address 118.25.6.39 — is it malicious, what sources have flagged it, and what's its combined threat score?","exampleUseCases":null,"resultDescription":"Returns a JSON object with an overall verdict (e.g. 'malicious', 'clean'), a combined integer score (0-100), counts of sources flagged vs available, per-source opinions with scores and details, a list of flagging sources, IP version, and enrichment data including ASN, ISP, country code, domain, usage type, and whether the IP is a Tor exit node.","failureModes":["Missing or invalid 'ip' query parameter returns an error","Unparseable IP string (not valid IPv4 or IPv6) may return an error or empty result","Some threat sources may be partially unavailable, reflected in 'partial' array and reduced sourcesAvailable count","Payment failure via x402 results in 402 response before data is returned"],"whenToPreferThis":"Use this endpoint when you need a multi-source IP threat intelligence verdict in a single call without managing API keys for AbuseIPDB, abuse.ch, or blocklist.de individually. Ideal for fraud detection, security automation, or access control workflows where you need a fast, aggregated risk score with enrichment (ASN, ISP, Tor) for an IP address. Prefer over raw blocklist lookups when you want a weighted combined score and per-source opinions.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-10T00:58:28.397Z","isFirstParty":false,"canonicalSlug":"2s-ip-reputation-check-ac77283b"}