Security x402 offerings

Resolve any public IPv4/IPv6 address (or hostname) to geolocation for analytics, fraud, and ops agents. Returns ISO country code, region, city, IANA timezone, latitude/longitude, EU membership flag, and the matched network range. Backed by an embedded MaxMind GeoLite2 dataset (no external API calls). Private and reserved IP ranges are rejected; no shell access.

Classify an IP address: version, public/private/loopback/link-local, integer form, and reverse-DNS (PTR) lookup.

Lookup geolocation, ASN, ISP and metadata for any IPv4 or IPv6 address via a paid API endpoint.

Inspect one IP address for network ownership, location and abuse signals.

Inspect up to 200 IP addresses at 0.0005 USDC per address.

IP Lookup API. Enrich an IPv4 or IPv6 address with geolocation, ASN, ISP, organization, reverse DNS, timezone, and proxy/mobile/hosting indicators. Useful for security, fraud checks, abuse triage, bot detection, traffic enrichment, and infrastructure investigation. Paid per call via x402.

IP reputation and malicious-IP check — screens an address against AbuseIPDB and AlienVault OTX threat feeds and returns a composite risk score, threat categories, malware families, and full source data.

Is this IPv4 address listed on 0spam (bl.0spam.org)? Performs the DNSBL query (reversed octets under bl.0spam.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Change watch for ip listed on 0spam: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on abuse ch spamhaus drop (drop.spamhaus.org)? Performs the DNSBL query (reversed octets under drop.spamhaus.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Change watch for ip listed on abuse ch spamhaus drop: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on backscatterer (ips.backscatterer.org)? Performs the DNSBL query (reversed octets under ips.backscatterer.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Change watch for ip listed on backscatterer: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on barracuda (b.barracudacentral.org)? Performs the DNSBL query (reversed octets under b.barracudacentral.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Bulk ip listed on barracuda: up to 20 ips in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

Change watch for ip listed on barracuda: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on blocklist de (bl.blocklist.de)? Performs the DNSBL query (reversed octets under bl.blocklist.de, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Change watch for ip listed on blocklist de: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on cbl (cbl.abuseat.org)? Performs the DNSBL query (reversed octets under cbl.abuseat.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Bulk ip listed on cbl: up to 20 ips in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

Change watch for ip listed on cbl: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on dbl spamhaus (dbl.spamhaus.org)? Performs the DNSBL query (reversed octets under dbl.spamhaus.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.

Change watch for ip listed on dbl spamhaus: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Is this IPv4 address listed on dronebl (dnsbl.dronebl.org)? Performs the DNSBL query (reversed octets under dnsbl.dronebl.org, via Cloudflare DoH) and returns listed yes/no with the return codes and, where the list publishes one, the reason text. One list, one precise answer. $0.01 per lookup.