# SiteCheck Web Intel – AbuseIPDB IP Reputation Check

> SiteCheck Web Intel – AbuseIPDB IP Reputation Check is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Returns AbuseIPDB crowd-sourced abuse reputation for an IPv4 address: confidence score, report count, last report date, ISP, usage type, and country over the past 90 days.

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/abuseipdb-check?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-abuseipdb-ip-reputation-check-b3bba64e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ugpY33MzYRJug-rQ1qpMo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-abuseipdb-ip-reputation-check-b3bba64e
```

Example prompt: Can you check the abuse reputation for the IP address 185.220.101.1 — I want to see its AbuseIPDB confidence score, how many times it's been reported, and what ISP it belongs to?

## When to prefer this

Choose this endpoint when you need a quick, crowd-sourced abuse reputation score for a single IPv4 address without maintaining your own AbuseIPDB integration. It is ideal for enriching security alerts, triaging suspicious traffic, or building blocklists. Prefer it over raw WHOIS or passive scan tools (e.g. Shodan/Censys) when the primary concern is abuse history and confidence scoring rather than open port discovery.

## Known failure modes

- Invalid or private IPv4 address returns an error or empty result
- Missing or misconfigured AbuseIPDB API key causes authentication failure
- Rate limit exceeded on the underlying AbuseIPDB free tier returns a quota error
- IPv6 addresses are not supported; submitting one returns an error
- Network timeout from the Cloudflare Worker proxy

## How this service works

AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced.

## Output

Returns the AbuseIPDB reputation record for the queried IPv4 address, including: abuse confidence score (0–100), total number of distinct abuse reports, date of the most recent report, ISP name, usage type (e.g. hosting, residential), and the country associated with the IP, all sourced from crowd-sourced reports over the last 90 days.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ip"
     ],
     "properties": {
      "ip": {
       "type": "string",
       "description": "IPv4 address such as 185.220.101.1 (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-abuseipdb-ip-reputation-check-b3bba64e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)