{"uid":"cap_0QDwakT_TnF1BvrZrgAaE","slug":"virustotal-ip-comments-lookup-527eefd3","name":"VirusTotal IP Comments Lookup","description":"Threat intelligence platform — scan files by hash, URLs, domains, and IPs against 70+ antivirus engines and security tools.","url":"https://virustotal.x402.paywithlocus.com/virustotal/ip-comments","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ip":{"type":"string"},"limit":{"type":"number"}}},"responseSchema":{"type":"json","example":{"data":{},"payment":{"scheme":"exact","settledUsdc":"0.001000","authorizedMaxUsdc":"0.001000"},"request":{"id":"00000000-0000-4000-8000-000000000000","statusUrl":"/requests/00000000-0000-4000-8000-000000000000"},"success":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.055","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.055/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.055","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.055","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XC8DyEtB2xq2oSP3cx2op","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.055","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves community comments for a given IP address from VirusTotal's threat intelligence platform via x402 micropayment.","exampleAgentPrompt":"Can you pull up the VirusTotal community comments for the IP address 185.220.101.45 — give me up to 20 comments so I can see what security researchers are saying about it?","exampleUseCases":[{"title":"Investigating suspicious inbound traffic","prompt":"We're seeing a lot of inbound traffic from 91.92.251.103 — can you fetch the VirusTotal community comments for that IP so I can see if other researchers have flagged it as malicious?"},{"title":"SOC analyst IP reputation check","prompt":"I'm triaging an alert and need to know what the security community is saying about 45.142.212.100 on VirusTotal — pull up to 15 comments for me."},{"title":"Threat hunting for known bad actor IPs","prompt":"During our threat hunt we found connections to 198.98.56.19 — what are VirusTotal users commenting about this IP? Give me the top 10 comments."}],"resultDescription":"Returns a JSON object containing community-submitted comments for the queried IP address from VirusTotal, along with payment metadata (settled USDC amount, authorization details) and a request ID for status tracking.","failureModes":["Invalid IP address format returns an error","IP address not found in VirusTotal database returns empty data","Exceeding rate limits may result in request failure","Payment failure via x402 protocol prevents data retrieval","Limit parameter out of acceptable range may cause error"],"whenToPreferThis":"Choose this endpoint when you need crowdsourced community threat intelligence and analyst commentary specifically about an IP address, rather than automated scan scores alone. Useful when you want qualitative human-written context from the security research community about a suspicious IP, complementing raw antivirus engine verdicts available via other VirusTotal endpoints.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T00:31:49.000Z","isFirstParty":false}