# Shodan InternetDB IP Lookup via clonecho.builda.company

> Shodan InternetDB IP Lookup via clonecho.builda.company is a paid API for AI agents from clonecho.builda.company, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-15).

Returns open ports, hostnames, and known CVEs observed by Shodan for a given IP address.

## Facts

- Endpoint: POST https://clonecho.builda.company/x402/s/shodan-internetdb
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shodan-internetdb-ip-lookup-via-clonecho-builda-company-ba3e7443
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_zSnpnT9uGZkAjALa9C9Rd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shodan-internetdb-ip-lookup-via-clonecho-builda-company-ba3e7443 -d '<json body>'
```

Example prompt: What open ports, hostnames, and known CVEs does Shodan have on the IP address 185.220.101.45?

## When to prefer this

Use this endpoint when you need a quick, passive lookup of open ports, hostnames, and CVE exposure for a specific IP address without active scanning. Ideal for security enrichment workflows, threat intelligence pipelines, or reconnaissance where you want Shodan's aggregated internet scan data without setting up a full Shodan API account.

## Known failure modes

- IP not found in Shodan InternetDB — returns empty or 404 response
- Invalid IP address format — likely returns an error or empty result
- Private/reserved IP addresses may return no data
- Rate limiting or payment failure resulting in 402 error
- IP with no Shodan observations returns empty ports/CVE arrays

## How this service works

Open ports, hostnames, and known CVEs observed by Shodan for an IP address {ip}. Query: ?ip= Returns JSON.

## Output

A JSON object containing the open ports detected on the IP, associated hostnames, and a list of known CVE identifiers flagged by Shodan for that address, reflecting passive internet scan observations.

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shodan-internetdb-ip-lookup-via-clonecho-builda-company-ba3e7443/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from clonecho.builda.company](https://www.zero.xyz/host/clonecho.builda.company/llms.txt)