{"uid":"cap_ugpY33MzYRJug-rQ1qpMo","slug":"sitecheck-web-intel-abuseipdb-ip-reputation-check-b3bba64e","name":"SiteCheck Web Intel – AbuseIPDB IP Reputation Check","description":"AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced.","url":"https://api.webintel-api.workers.dev/api/security/abuseipdb-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 address such as 185.220.101.1 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_0kxjQPw3ZjbTFcBQvruPk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns AbuseIPDB crowd-sourced abuse reputation for an IPv4 address: confidence score, report count, last report date, ISP, usage type, and country over the past 90 days.","exampleAgentPrompt":"Can you check the abuse reputation for the IP address 185.220.101.1 — I want to see its AbuseIPDB confidence score, how many times it's been reported, and what ISP it belongs to?","exampleUseCases":[{"title":"Triage suspicious login attempt","prompt":"We just got a login attempt from IP 45.33.32.156 — can you pull its AbuseIPDB abuse score and tell me if it's been flagged recently so I can decide whether to block it?"},{"title":"Firewall rule research for threat feeds","prompt":"I'm building a blocklist and need to know the abuse confidence score, report count, and country for IP 192.64.119.140 — can you check AbuseIPDB for me?"},{"title":"Enrich security alert with IP context","prompt":"Our SIEM just flagged traffic from 89.248.167.131 — can you look it up on AbuseIPDB and tell me its ISP, usage type, and how many abuse reports it has from the last 90 days?"}],"resultDescription":"Returns the AbuseIPDB reputation record for the queried IPv4 address, including: abuse confidence score (0–100), total number of distinct abuse reports, date of the most recent report, ISP name, usage type (e.g. hosting, residential), and the country associated with the IP, all sourced from crowd-sourced reports over the last 90 days.","failureModes":["Invalid or private IPv4 address returns an error or empty result","Missing or misconfigured AbuseIPDB API key causes authentication failure","Rate limit exceeded on the underlying AbuseIPDB free tier returns a quota error","IPv6 addresses are not supported; submitting one returns an error","Network timeout from the Cloudflare Worker proxy"],"whenToPreferThis":"Choose this endpoint when you need a quick, crowd-sourced abuse reputation score for a single IPv4 address without maintaining your own AbuseIPDB integration. It is ideal for enriching security alerts, triaging suspicious traffic, or building blocklists. Prefer it over raw WHOIS or passive scan tools (e.g. Shodan/Censys) when the primary concern is abuse history and confidence scoring rather than open port discovery.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:40:53.483Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-abuseipdb-ip-reputation-check-b3bba64e"}