{"uid":"cap_b4Xr5-dLN85gsOssQn-lm","slug":"ip-reputation-check-b0ca831a","name":"IP Reputation Check","description":"IP reputation check: is this IP address on spam or abuse blocklists (DNSBL lookups across major lists), is it a Tor exit node, and does it belong to a cloud or hosting provider (datacenter IP) rather than a residential network. Returns a risk label (clean / suspicious / bad) with the reasons. Fraud screening, signup risk and firewall decisions. $0.01 per IP.","url":"https://intel.rallylive.ca/ip-reputation","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Z2RVsRTHH33uS0EGnPRto","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks an IP address against spam/abuse blocklists (DNSBL), Tor exit node databases, and datacenter/hosting provider registries, returning a risk label with reasons.","exampleAgentPrompt":"Can you check the reputation of IP address 185.220.101.42 — is it on any spam or abuse blocklists, a Tor exit node, or a datacenter IP, and what's the overall risk label?","exampleUseCases":[{"title":"Signup fraud screening at registration","prompt":"A new user just signed up from IP 45.33.32.156 — can you check if that IP is flagged on any abuse blocklists, is a Tor exit node, or belongs to a hosting provider, and tell me whether it's clean, suspicious, or bad?"},{"title":"Firewall triage for suspicious traffic","prompt":"We're seeing repeated requests from 194.165.16.9 — run an IP reputation check on it and tell me if it's on any DNSBL lists or is a known Tor exit node so I can decide whether to block it."},{"title":"Detecting datacenter IPs in ad traffic","prompt":"Check whether 104.21.33.100 is a residential IP or a datacenter/cloud-provider address, and flag if it has any spam or abuse reputation issues."}],"resultDescription":"Returns a risk label (clean, suspicious, or bad), along with specific reasons such as which DNSBL blocklists the IP appears on, whether it is a Tor exit node, and whether it belongs to a datacenter or hosting provider rather than a residential network.","failureModes":["Invalid or malformed IP address returns an error","Private or reserved IP ranges may not be checkable against public blocklists","DNSBL provider timeouts may result in incomplete blocklist coverage","IPv6 addresses may have limited blocklist coverage depending on lists queried","Rate limiting or payment failure returns 402 or 429 status"],"whenToPreferThis":"Choose this endpoint when you need a quick, multi-signal IP reputation verdict combining DNSBL blocklist checks, Tor exit node detection, and datacenter/residential classification in a single $0.01 call — ideal for fraud screening at signup, firewall triage, or ad traffic quality checks where you need structured risk labeling rather than raw WHOIS or geolocation data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T12:58:56.869Z","isFirstParty":false}