# NetIntel ASN Lookup Analyze

> NetIntel ASN Lookup Analyze is a paid API for AI agents from netintel.dev, paid per call via x402, $0.03/call, status unknown (last checked 2026-09-15).

Analyzes an IP address or domain to return ASN info, geolocation, risk score, VPN/cloud/hosting classification, and threat findings

## Facts

- Endpoint: GET https://netintel.dev/asn-lookup/analyze
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netintel-asn-lookup-analyze-f609f2cb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_jErvqhPsHOMXyc6hRniQX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netintel-asn-lookup-analyze-f609f2cb
```

Example prompt: Run a full network intelligence analysis on 8.8.8.8 — I want to know the ASN, organization, whether it's a VPN or cloud provider, its risk score and grade, and any threat findings.

## When to prefer this

Use this endpoint when you need a comprehensive, single-call enrichment of an IP or domain combining ASN ownership, geolocation, VPN/proxy/cloud/hosting detection, and a composite risk score with itemized findings. Prefer over raw WHOIS or plain GeoIP lookups when you need structured threat classification and scoring in one call. Particularly useful for fraud detection, security investigations, or network access control decisions.

## Known failure modes

- Invalid or unresolvable target returns error — ensure target is a valid IPv4, IPv6, or resolvable domain
- Payment not received (402) — x402 micropayment of $0.03 USDC on Base must be completed before response is returned
- Rate limiting or quota exceeded for the calling account
- Private/reserved IP ranges may return incomplete or no geolocation data
- Domain that does not resolve to a public IP may return limited results

## How this service works

Resolves an IP address or domain to its Autonomous System Number (ASN), network owner, country, and hosting/cloud classification — agents get structured network ownership context plus a trust score to assess infrastructure risk.

## Output

Returns a JSON object containing the resolved IP, ASN string and number, organization name, network CIDR, hostname, city/region/country geolocation, IP version, boolean flags for VPN/cloud/hosting, a numeric risk score (0-100), a letter grade (A-F), a classification label, and an array of findings each with a rule name, detail string, and score deduction.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "target"
     ],
     "properties": {
      "target": {
       "type": "string",
       "description": "IP address (v4 or v6) or domain name to look up (aliases accepted: ip, address, host, hostname, query — query param or JSON body)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "ip": {
       "type": "string"
      },
      "asn": {
       "type": [
        "string",
        "null"
       ]
      },
      "city": {
       "type": [
        "string",
        "null"
       ]
      },
      "grade": {
       "type": "string"
      },
      "score": {
       "type": "number"
      },
      "is_vpn": {
       "type": "boolean"
      },
      "region": {
       "type": [
        "string",
        "null"
       ]
      },
      "target": {
       "type": "string"
      },
      "country": {
       "type": [
        "string",
        "null"
       ]
      },
      "network": {
       "type": [
        "string",
        "null"
       ]
      },
      "findings": {
       "type": "array"
      },
      "hostname": {
       "type": [
        "string",
        "null"
       ]
      },
      "is_cloud": {
       "type": "boolean"
      },
      "asn_number": {
       "type": [
        "number",
        "null"
       ]
      },
      "ip_version": {
       "type": "number"
      },
      "is_hosting": {
       "type": "boolean"
      },
      "organization": {
       "type": [
        "string",
        "null"
       ]
      },
      "classification": {
       "type": "string"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ip": "8.8.8.8",
  "asn": "AS15169",
  "city": "Mountain View",
  "grade": "B",
  "score": 80,
  "is_vpn": false,
  "region": "California",
  "target": "8.8.8.8",
  "country": "US",
  "network": null,
  "findings": [
   {
    "rule": "cloud_infrastructure",
    "detail": "IP belongs to known cloud provider (Google LLC)",
    "deduction": -20
   }
  ],
  "hostname": "dns.google",
  "is_cloud": true,
  "asn_number": 15169,
  "ip_version": 4,
  "is_hosting": true,
  "organization": "Google LLC",
  "classification": "cloud"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netintel-asn-lookup-analyze-f609f2cb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from netintel.dev](https://www.zero.xyz/host/netintel.dev/llms.txt)