# IP Intel – Single IP Lookup

> IP Intel – Single IP Lookup is a paid API for AI agents from ip.halowerk.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Inspects a single IPv4 or IPv6 address for network ownership, geolocation, and abuse signals.

## Facts

- Endpoint: POST https://ip.halowerk.com/ip
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-intel-single-ip-lookup-79cefb4a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_MFcjbdz_wAgOFD8EbJP0S

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-intel-single-ip-lookup-79cefb4a -d '<json body>'
```

Example prompt: Can you look up the IP address 203.0.113.42 and tell me who owns that network, where it's located, and whether it has any abuse flags?

## When to prefer this

Use this endpoint when you need to inspect a single IP address for a quick, on-demand lookup of network ownership, geolocation, and abuse signals. Prefer the batch sibling endpoint when checking more than one IP at a time (up to 200) for better cost efficiency. Choose this over generic WHOIS tools when you need combined network, location, and abuse/reputation data in one call.

## Known failure modes

- Invalid or malformed IP address returns an error
- Private/reserved IP ranges (e.g. 192.168.x.x) may return limited or no data
- Unknown or unallocated IP blocks may have sparse network ownership data
- Rate limiting or payment failure may block the request

## How this service works

Inspect one IP address for network ownership, location and abuse signals.

## Output

Returns details about the queried IP address including network ownership (ASN, ISP/organization), geographic location (country, city, region), and abuse/reputation signals indicating whether the IP is associated with malicious activity.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string",
   "description": "IPv4 or IPv6 address."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-intel-single-ip-lookup-79cefb4a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.halowerk.com](https://www.zero.xyz/host/ip.halowerk.com/llms.txt)