{"uid":"cap_8vzHt7miWh6pQ_ix6WpLC","slug":"grokzilla-ip-intelligence-6209234a","name":"Grokzilla IP Intelligence","description":"One public IP or CIDR in: normalized network, size, membership checks, plus holder, abuse contact and origin ASN from RIR RDAP and RIPEstat, and country from DB-IP Lite (CC BY 4.0, attributed). Private ranges refused before payment. Not charged if registries fail.","url":"https://grokzilla.shop/api/skills/ip-intel?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"check":{"type":"array","items":{"type":"string","maxLength":45},"maxItems":50,"description":"IPs to test for membership in the network"},"query":{"type":"string","maxLength":64,"minLength":2,"description":"IPv4/IPv6 address or CIDR"},"request_id":{"type":"string","pattern":"^[A-Za-z0-9._:-]+$","maxLength":64,"minLength":1,"description":"Optional idempotency key. Echoed back; a credit-pack redemption with the same request_id and body is charged once."}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"geo":{"country":"US","dataset":"DB-IP IP-to-Country Lite 2026-10","attribution":{"url":"https://db-ip.com","text":"IP Geolocation by DB-IP","license":"CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)"},"countries_at_edges":["US"]},"network":{"last":"8.8.8.8","first":"8.8.8.8","query":"8.8.8.8","network":"8.8.8.8/32","version":4,"is_global":true,"num_addresses":"1","prefix_length":32,"reverse_pointer":"8.8.8.8.in-addr.arpa","is_single_address":true},"routing":{"asns":[15169],"as_holder":"GOOGLE - Google LLC","routed_prefix":"8.8.8.0/24"},"registry":{"name":"GOGL","type":"DIRECT ALLOCATION","cidrs":["8.8.8.0/24"],"handle":"NET-8-8-8-0-2","holder":"Google LLC","registered":"2023-12-28T17:24:33-05:00","abuse_email":"network-abuse@google.com","end_address":"8.8.8.255","last_changed":"2023-12-28T17:24:56-05:00","start_address":"8.8.8.0","registry_country":null,"origin_asns_registered":null}},"next":["email_check"],"skill":"ip_intel","charged":true,"service":"ip_intel","sources":[{"url":"https://rdap.arin.net/registry/ip/8.8.8.8","name":"RIR RDAP (via rdap.org bootstrap)","fetched_at":"2026-10-17T11:12:56Z"},{"url":"https://stat.ripe.net/data/network-info/data.json?resource=8.8.8.8","name":"RIPEstat network-info / as-overview","fetched_at":"2026-10-17T11:12:56Z"},{"url":"https://db-ip.com","name":"IP Geolocation by DB-IP","license":"CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)","fetched_at":"2026-10-17T11:12:56Z","dataset_month":"2026-10"}],"summary":"8.8.8.8/32: AS15169 GOOGLE - Google LLC, Google LLC, US","version":"1.0.0","warnings":["country is DB-IP Lite geolocation (country-level, monthly); it can differ from the registry country"],"confidence":0.9,"data_as_of":"2026-10-17T11:12:56Z","attribution":{"url":"https://db-ip.com","text":"IP Geolocation by DB-IP","license":"CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)"},"generated_at":"2026-10-17T11:12:56Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0033","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0033/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0033","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0033","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_12fAQStOe1Za0RXCkk_GX","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0033","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Enriches a public IPv4/IPv6 address or CIDR with network normalization, size, CIDR membership checks, WHOIS holder, abuse contact, origin ASN from RIR RDAP/RIPEstat, and country from DB-IP Lite.","exampleAgentPrompt":"Look up 198.51.100.42 — I need the network it belongs to, who holds the block, the abuse contact, origin ASN, and which country it's in, and also check whether 198.51.100.10 and 198.51.100.200 are in the same CIDR.","exampleUseCases":[{"title":"Abuse report pre-flight enrichment","prompt":"Before I file an abuse report for 203.0.113.77, can you pull the registered holder name, abuse contact email, and ASN so I have the right details to include?"},{"title":"Firewall rule subnet membership check","prompt":"I have a list of IPs — 10.0.0.1, 172.16.5.3, 192.0.2.50, and 198.51.100.200 — can you tell me which ones fall inside 198.51.100.0/24?"},{"title":"Threat intel country and ASN triage","prompt":"We're seeing suspicious traffic from 45.152.66.18 — what country is it coming from, what ASN does it originate on, and who's the registered network holder?"}],"resultDescription":"Returns normalized CIDR network, network size, boolean membership results for each checked IP, registered holder name, abuse contact, origin ASN number and name (from RIR RDAP and RIPEstat), and country code/name (from DB-IP Lite). Private/RFC-1918 ranges are rejected before payment. If RIR registries are unreachable, no charge is incurred. The request_id is echoed back for idempotency tracking.","failureModes":["Private or reserved IP ranges are rejected before payment with a 4xx error","If RIR RDAP or RIPEstat registries are unavailable, the call returns an error and is not charged","Malformed IP or CIDR input (e.g. too long, invalid format) rejected at schema validation","CIDR membership check list limited to 50 IPs; exceeding this causes a validation error","Some IPs may have incomplete WHOIS records if the RIR has sparse registration data"],"whenToPreferThis":"Choose this endpoint when you need a single call that combines network normalization, subnet membership testing, and authoritative RIR/RIPEstat registration metadata (holder, ASN, abuse contact) alongside DB-IP country data — rather than calling separate WHOIS, geolocation, and routing APIs independently. Especially useful for abuse triage, firewall automation, threat intel enrichment, and compliance workflows where you need structured, machine-readable output. The no-charge-on-registry-failure guarantee reduces risk for automated pipelines.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T00:22:08.638Z","isFirstParty":false,"canonicalSlug":"grokzilla-ip-intelligence-6209234a"}