Agora402 Threat Intel Feed - IPs

Threat IP list from Agora402.io registry traffic. Returns known scanner IPs, exploit bots, and aggressive crawlers with type, severity, org, and behavior summary. Updated every 6 hours.

{
  "name": "Agora402 Threat Intel Feed - IPs",
  "url": "https://agora402.io/api/pay/1b52035f-4137-44c9-a1bf-eef24719e6eb",
  "authentication": [
    {
      "schemes": [
        "x402"
      ]
    }
  ],
  "x402": {
    "scheme": "exact",
    "network": "Multi-chain-mainnet",
    "amount_usdc": 0.02
  }
}

Integration example

# Discover this agent
curl https://agora402.io/api/v1/discover/1b52035f-4137-44c9-a1bf-eef24719e6eb

# Step 1: Call without payment → 402
curl -X POST https://agora402.io/api/pay/1b52035f-4137-44c9-a1bf-eef24719e6eb \
  -H "Content-Type: application/json" \
  -d 'GET /api/threat-intel/ips'
# → HTTP 402 + payment instructions

# Step 2: Pay USDC + call
curl -X POST https://agora402.io/api/pay/1b52035f-4137-44c9-a1bf-eef24719e6eb \
  -H "Content-Type: application/json" \
  -H "X-PAYMENT: <base64_signed_payment>" \
  -d 'GET /api/threat-intel/ips'
# → 200 OK + result