{"uid":"cap_poM_50VQLeBpAiABIwSg9","slug":"sitecheck-web-intel-cisco-talos-ip-reputation-0662433c","name":"SiteCheck Web Intel – Cisco Talos IP Reputation","description":"Cisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (daily, monthly and last 30 days), the /24 network's average magnitude and how many neighbouring addresses in that /24 Talos rates untrusted, poor, neutral or favorable.","url":"https://api.webintel-api.workers.dev/api/security/talos-ip-blacklist?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"Public IPv4 address"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a86NTqIL9OLJvjubHQax5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns Cisco Talos threat reputation data for an IPv4 address, including threat level, web reputation score, DNS match status, owner/location, email volume stats, and neighbouring /24 network reputation breakdown.","exampleAgentPrompt":"Can you check the Cisco Talos reputation for 185.220.101.47 — I want to know if it's flagged as untrusted or poor, its web reputation score, whether its DNS records match, and how bad the surrounding /24 neighbourhood looks?","exampleUseCases":[{"title":"Triage suspicious inbound connection IP","prompt":"We just got a connection from 91.108.4.130 that looks sketchy — can you pull its Cisco Talos threat level and web reputation score, and tell me how many of its /24 neighbours are rated untrusted?"},{"title":"Email deliverability pre-flight check","prompt":"Before we switch to this new outbound mail server at 198.51.100.22, can you check its Talos reputation and email volume magnitude so we know if ISPs are likely to distrust it?"},{"title":"Enrich security alert with IP intelligence","prompt":"Our SIEM fired an alert on 45.33.32.156 — look up what Cisco Talos says about it: threat level, owner, location, DNS match, and whether its neighbourhood is mostly poor or favorable."}],"resultDescription":"A JSON object containing: Talos threat level label (favorable, neutral, poor, or untrusted), numeric web reputation score, forward/reverse DNS match status, resolved hostname, IP owner organisation, geographic location, daily/monthly/last-30-day email volume magnitude, the average magnitude of the /24 network, and counts of how many addresses in the same /24 subnet are rated untrusted, poor, neutral, and favorable.","failureModes":["Invalid or private IPv4 address returns an error or no data","IPv6 addresses are not supported","Talos data may be stale if Cisco has not recently scanned the IP","Rate limiting or payment failure returns a 402 or 429 error","Cloudflare Worker timeout if upstream Talos service is slow"],"whenToPreferThis":"Choose this endpoint when you need Cisco Talos-specific threat intelligence for an IPv4 address, particularly its proprietary threat level label, web reputation score, and email sending volume metrics. Prefer this over generic WHOIS or geolocation lookups when email reputation or spam-related risk is a concern, or when you want neighbourhood context showing how many surrounding IPs in the same /24 are rated unfavorably by Talos.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:45:34.582Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-cisco-talos-ip-reputation-0662433c"}