{"api":"v1","generated_at":"2026-09-16T00:42:28.452Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/api-agentstools-dev-fraud-ip-b28f47","pinned_page":"https://tollindex.com/e/api-agentstools-dev-fraud-ip-b28f47/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"api-agentstools-dev-fraud-ip-b28f47","canonical_url":"https://api.agentstools.dev/fraud/ip","resource":"https://api.agentstools.dev/fraud/ip","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Reputation of a public IP address for anti-abuse and KYC. Returns ASN, AS-org, country, datacenter/hosting classification, Tor-exit and Spamhaus DROP flags, plus a deterministic risk score with reasons.","service_name":"fraud-ip-reputation","declared_category":null,"declared_tags":["fraud","anti-abuse","ip","reputation","risk"],"route_template":null,"registry_updated":"2026-09-15T19:22:55.595Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"fraud ip","category":"identity","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.005 USDC","amount_units":0.005,"decimals_known":true,"pay_to":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":20,"unique_payers_30d":5,"last_called_at":"2026-09-15T14:04:59.585Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:15:19.713Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:15:19.713Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:45:53.260Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:39:13.745Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:56:05.195Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T11:50:20.806Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","page":"https://tollindex.com/seller/0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","endpoints":344,"hosts":2},"reports":0,"registry_record":{"cdp":[{"tags":["fraud","anti-abuse","ip","reputation","risk"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493","amount":"5000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-09-15T14:04:59.585Z","l30DaysTotalCalls":20,"l30DaysUniquePayers":5},"resource":"https://api.agentstools.dev/fraud/ip","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"ip":"185.220.101.1","country":"US"}},"output":{"type":"json","example":{"ip":"185.220.101.1","asn":60729,"as_org":"TORSERVERS-NET","is_tor":true,"country":"DE","on_drop":false,"reasons":[{"reason":"IP is a known Tor exit relay.","signal":"is_tor","weight":30,"severity":"high","dimension":"anonymity"}],"supported":true,"disclaimer":"These are automated reputation indicators, NOT a guarantee and NOT a statement about any individual. A high score is not proof of fraud; a low score is not an endorsement. Contains no personal data. Verify before acting.","ip_version":4,"risk_score":48,"is_datacenter":true,"risk_category":"medium"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"Public IPv4 address to screen"},"country":{"type":"string","description":"Optional 2-letter country the caller claims the IP is in, for a geo-mismatch check"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"Reputation of a public IP address for anti-abuse and KYC. Returns ASN, AS-org, country, datacenter/hosting classification, Tor-exit and Spamhaus DROP flags, plus a deterministic risk score with reasons.","lastUpdated":"2026-09-15T19:22:55.595Z","serviceName":"fraud-ip-reputation","x402Version":2}]}}