# Halowerk IP Reputation

> Halowerk IP Reputation is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Analyzes an IP address for ASN, network operator, country, reverse DNS, bogon status, Tor exit node detection, and datacenter probability

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/ip/reputation
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-ip-reputation-c72a8542
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_CpvPQ4OVXj_u1J18qLhZc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-ip-reputation-c72a8542 -d '<json body>'
```

Example prompt: Check the reputation of IP address 185.220.101.45 — I need to know if it's a Tor exit node, whether it's coming from a datacenter, its ASN, country, and bogon status so I can decide whether to flag this user's signup.

## When to prefer this

Choose this endpoint when you need a lightweight, all-in-one IP intelligence check that combines ASN lookup, bogon detection, Tor exit identification, and datacenter probability in a single call — especially useful for fraud detection pipelines and content moderation agents that need a quick risk signal without integrating multiple separate IP intelligence APIs.

## Known failure modes

- Invalid or malformed IP address returns a 400 error
- Private/loopback IPs may return limited enrichment data
- Tor exit node list may have slight staleness leading to false negatives
- Datacenter probability is a heuristic and may misclassify some residential CG-NAT ranges
- Payment failure or insufficient USDC balance returns a 402 error

## How this service works

Liefert ASN, Netzbetreiber, Land, Reverse-DNS, Bogon-Status, Tor-Exit-Erkennung und eine Rechenzentrums-Wahrscheinlichkeit. Grundlage für Betrugs- und Moderationsagenten.

## Output

Returns structured data including ASN number, network operator name, country code, reverse DNS hostname, a boolean bogon flag, a boolean Tor exit node flag, and a datacenter probability score (0–1) for the submitted IP address.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string"
  },
  "ips": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "description": "Stapel bis 25 Adressen"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-ip-reputation-c72a8542/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)