Which service would you query to determine if a user's IP is on known blacklists?

• A. Bug bounty program
• B. Acunetix WVS
• C. Apility.io
• D. RASP

Answer: (C)

IP reputation checks are used to see if a particular address appears on known blacklists. To determine this, you query a service that aggregates multiple blacklist feeds and can report whether the given IP is listed, along with reasons and timing. Apility.io fits this need because it’s a dedicated IP reputation/blacklist lookup service with an API that checks an IP across many feeds (spam and abuse lists) and returns listing status. This lets you decide whether to allow, challenge, or block traffic based on the IP’s reputation.

The other options serve different purposes: a bug bounty program is for reporting vulnerabilities in exchange for rewards, a vulnerability scanner like Acunetix WVS scans apps for weaknesses, and RASP provides runtime protection within an application. They don’t provide a direct lookup of an IP’s blacklist status.