{"uid":"cap_QZNalCH1DIaltcTYmkQGR","slug":"is-ip-nordvpn-watch-78ad8ac4","name":"is-ip-nordvpn-watch","description":"Change watch for is ip nordvpn: runs the check, compares it with the result from your previous call for the same ip (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.","url":"https://ip.intel.rallylive.ca/watch/ip/is/nordvpn?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_7IONArd-YUtdQOBNaHeYK","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether an IP address belongs to NordVPN infrastructure, compares the result against the previous check (retained 90 days), and returns whether anything changed along with before/after field diffs.","exampleAgentPrompt":"Keep an eye on 185.220.101.45 and let me know if its NordVPN classification ever changes — I want to know the before and after values if it does.","exampleUseCases":[{"title":"VPN exit node change alerting","prompt":"Set up a watch on 45.83.64.12 so I'm alerted if it starts or stops being identified as a NordVPN exit node — include what changed and when it was last seen."},{"title":"Security audit for suspicious login IP","prompt":"We had a login attempt from 194.165.16.78 — can you check if it's a NordVPN IP and flag me if that classification changes over the next few days?"},{"title":"Ongoing abuse prevention monitoring","prompt":"We're seeing repeated traffic from 185.220.103.5 — monitor it and tell me if its NordVPN status changes, showing the before and after values."}],"resultDescription":"Returns the current is-NordVPN boolean result, a changed true/false flag indicating whether the answer differs from the previous call for the same IP (stored up to 90 days), a breakdown of which fields changed with before and after values, and a timestamp of when the IP was last seen.","failureModes":["Missing or invalid IP address parameter returns an error","IP not previously checked returns no change comparison (first-run baseline only)","Stored comparison data older than 90 days is purged, treating next call as a fresh baseline","Payment failure via x402 protocol results in 402 response and no data returned","Non-public or malformed IP addresses may return unexpected results"],"whenToPreferThis":"Choose this endpoint when you need to detect changes in NordVPN classification for a specific IP over time, rather than just a one-time lookup. It is ideal for scheduled polling workflows, alerting pipelines, or abuse-detection systems where you want to know if an IP has started or stopped using NordVPN infrastructure since your last check. Prefer this over a plain is-ip-nordvpn check when change detection and diff history matter.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:40:39.962Z","isFirstParty":false,"canonicalSlug":"is-ip-nordvpn-watch-78ad8ac4"}