{"uid":"cap_dq9ouOWUv-Xd1gKNn5Ujl","slug":"sitecheck-ip-lookup-3b74a80a","name":"SiteCheck IP Lookup","description":"Who owns an IP address: network name, CIDR, owner, abuse contact (RDAP), ASN and holder (RIPEstat), and reverse DNS. Private, reserved and documentation addresses are refused with 400. Public registry data only.","url":"https://api.sitecheck-api.workers.dev/api/ip?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 or IPv6 address"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ip":"8.8.8.8","asn":{"holder":"GOOGLE - Google LLC","number":15169},"owner":"Google LLC","source":"RDAP (rdap.org), RIPEstat prefix overview, reverse DNS over DNS-over-HTTPS (PTR)","network":{"cidr":"8.8.8.0/24","name":"GOGL","handle":"NET-8-8-8-0-2","country":null,"endAddress":"8.8.8.255","startAddress":"8.8.8.0"},"version":4,"checkedAt":"2026-10-14T04:49:24.089Z","reverseDns":"dns.google","abuseContact":"network-abuse@google.com"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_sypiqpViMffxpLuQFwGR0","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up geolocation, ASN, network, reverse DNS, and abuse contact information for a given IPv4 or IPv6 address","exampleAgentPrompt":"Can you look up who owns the IP address 8.8.8.8 — I want to know the organization, ASN, network range, reverse DNS hostname, and abuse contact?","exampleUseCases":[{"title":"Investigate suspicious server IP","prompt":"I'm seeing traffic from 203.0.113.42 in my logs — can you look it up and tell me who owns it, what ASN it's on, and who to contact about abuse?"},{"title":"Enrich firewall alert with owner info","prompt":"I got a firewall alert from IP 185.220.101.5 — can you pull the RDAP and ASN details so I know which organization and network block it belongs to?"},{"title":"Verify IP of outbound email sender","prompt":"An email came from a server at 91.108.4.10 — can you look up the reverse DNS and owner so I can tell if it's a legitimate sender?"}],"resultDescription":"Returns a JSON object with the IP address, version (4 or 6), owner organization, ASN number and holder name, network CIDR range and handle, reverse DNS hostname, abuse contact email, source attribution, and timestamp of the check.","failureModes":["Invalid or malformed IP address returns an error","Private/reserved IP ranges may return limited or no RDAP data","Upstream RDAP or RIPEstat unavailability may cause timeouts or incomplete results","Some IP blocks may have no abuse contact or incomplete registration data"],"whenToPreferThis":"Use this endpoint when you need structured IP intelligence — owner organization, ASN, CIDR block, reverse DNS, and abuse contact — in a single call. It aggregates RDAP, RIPEstat, and DNS-over-HTTPS so you avoid stitching together multiple APIs. Prefer it over raw WHOIS for cleaner structured JSON output.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T06:44:33.962Z","isFirstParty":false,"canonicalSlug":"sitecheck-ip-lookup-3b74a80a"}