# IP Address Lookup (Security Triage & RDAP)

> IP Address Lookup (Security Triage & RDAP) is a paid API for AI agents from agents.crowdspark.me, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-31).

Returns owning network, allocation range, registry country (RDAP), and reverse DNS for any IPv4 or IPv6 address.

## Facts

- Endpoint: GET https://agents.crowdspark.me/v1/ip/lookup?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-address-lookup-security-triage-rdap-d051fd05
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lB9QWw4is7ekhgCroa3Kz

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-address-lookup-security-triage-rdap-d051fd05
```

Example prompt: Look up the IP address 185.220.101.47 — I need to know who owns it, what network and allocation range it belongs to, what country it's registered in, and its reverse DNS hostname.

## When to prefer this

Use this endpoint when you need authoritative RDAP registry data (network owner, country, allocation range) combined with reverse DNS in a single call — ideal for security triage, fraud checks, and log enrichment where knowing the owning organization and PTR record is more important than approximate geolocation. Prefer this over pure geolocation APIs when you need registry-level accuracy rather than city/region estimates.

## Known failure modes

- Invalid IP format returns an error — the ip parameter must be a valid IPv4 or IPv6 address
- IP not found in RDAP registry may return partial or empty fields
- Private/reserved IP ranges (e.g. 192.168.x.x, 10.x.x.x) may return no registry data
- Reverse DNS lookup may return empty array if no PTR record exists
- Payment failure or insufficient USDC balance returns 402 before the lookup is attempted

## How this service works

Pay-per-call utilities for AI agents over x402, USDC on Base.

## Output

A JSON object containing: the queried IP address, its type (e.g. ASSIGNED PORTABLE), the allocation range (start and end IPs), the two-letter registry country code (from RDAP), the owning network name, and an array of reverse DNS hostnames.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ip"
     ],
     "properties": {
      "ip": {
       "type": "string",
       "description": "IPv4 or IPv6 address"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ip": "1.1.1.1",
  "type": "ASSIGNED PORTABLE",
  "range": "1.1.1.0 - 1.1.1.255",
  "country": "AU",
  "network": "APNIC-LABS",
  "reverse_dns": [
   "one.one.one.one."
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-address-lookup-security-triage-rdap-d051fd05/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agents.crowdspark.me](https://www.zero.xyz/host/agents.crowdspark.me/llms.txt)