AbuseIPDB vs CAPEsandbox

AbuseIPDB is a crowdsourced IP, domain, and URL reputation database where network operators report malicious activity like brute-force attempts, spam, and port scans. A live GET against the real gateway, api.abuseipdb.com/api/v2/check, returned a 401 with an invalid key rather than a CORS-enabled response, reconfirming API-key auth over HTTPS and resolving cors to no. A free Individual tier allows 1,000 checks a day forever with no card required, while paid Basic/Premium/Enterprise plans raise the daily ceiling for high-volume users.

CAPE (Config And Payload Extraction) is an open-source malware sandbox, forked from Cuckoo, that detonates submitted files and URLs to extract IOCs, dropped payloads, and decrypted configuration data through a REST API. Its docs point to a free public community instance at capesandbox.com; a live POST and OPTIONS preflight against its real apiv2/api-token-auth endpoint both returned no Access-Control-Allow-Origin header, resolving cors to no, and confirmed the instance issues a DRF token from a username/password exchange rather than a bare API key. Self-hosting the open-source project or registering on the community instance is free.