# RadhikaChain Bridge Threat Intelligence Feed

> RadhikaChain Bridge Threat Intelligence Feed is a paid API for AI agents from x402.radhikatmosphere.com, paid per call via x402, $5.148/call, status unknown (last checked 2026-09-15).

Returns real-time threat intelligence on IPs scanning or probing blockchain bridge and node ports, sourced from XDP/eBPF network sensors across chain nodes.

## Facts

- Endpoint: GET https://x402.radhikatmosphere.com/poi/puente
- Price: $5.148/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/radhikachain-bridge-threat-intelligence-feed-b689b3d8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DQiRkFv3t9jPfwyOaqewe

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability radhikachain-bridge-threat-intelligence-feed-b689b3d8
```

Example prompt: Pull the latest threat intelligence from the RadhikaChain bridge sensor — I want to see which IPs are actively probing blockchain bridge ports and how they're classified.

## When to prefer this

Choose this endpoint when you need XDP/eBPF-sourced, node-observed threat intelligence specifically targeting blockchain bridge and RPC ports (e.g. 8545, 8332). It is ideal for Web3 security operations, building IP blocklists for DeFi infrastructure, or enriching alerts with on-chain network threat context. Prefer it over generic threat intel feeds when the focus is adversarial activity against Ethereum/blockchain node endpoints rather than traditional enterprise IT.

## Known failure modes

- Payment not attached or invalid x402 USDC payment on Base — returns 402 Payment Required
- Endpoint temporarily unavailable due to sensor node outage — returns 5xx
- Malformed request path — returns 404
- Stale data if sensors are lagging — timestamps may not reflect real-time state

## How this service works

Telemetria de cadena, inteligencia de defensa y computo verificable (Halo2, Nova, Plonky3). Pago por peticion en USDC nativo en Base (eip155:8453) mediante x402 v2 scheme exact; sin cuenta ni suscripcion. Catalogo canonico: GET /.well-known/x402.

## Output

A JSON object containing a total threat count, data source description (XDP/eBPF node sensors), and an array of threat entries each with: IP address, TTL, probed ports, probe count, nodes where the IP was seen, TCP flag patterns, inferred OS, first/last seen timestamps (nanoseconds), and a human-readable threat classification (e.g. 'persistent scanner', 'port sweep').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "properties": {
  "input": {
   "type": "object",
   "properties": {
    "body": {
     "type": "object",
     "additionalProperties": true
    },
    "queryParams": {
     "type": "object",
     "additionalProperties": true
    }
   }
  },
  "output": {
   "type": "object",
   "properties": {
    "example": {
     "type": "object",
     "additionalProperties": true
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "nota": "'visto_en' indica en cuantos nodos aparecio: mas nodos significa un escaneo mas amplio",
  "total": 2091,
  "fuente": "sensores XDP/eBPF en los nodos de la red",
  "amenazas": [
   {
    "ip": "169.188.233.172",
    "ttl": 45,
    "puertos": [
     8545
    ],
    "sondeos": 30242233902,
    "visto_en": [
     "seed"
    ],
    "flags_tcp": [
     2,
     16,
     24,
     17,
     4
    ],
    "so_probable": "linux/unix",
    "primer_visto": 7391931344,
    "ultimo_visto": 122915823205836,
    "clasificacion": "sondeo insistente"
   },
   {
    "ip": "64.248.200.172",
    "ttl": 40,
    "puertos": [
     8151,
     8126,
     28334,
     8413,
     8402,
     3000,
     28332,
     5000,
     8414,
     8332,
     28335,
     28333
    ],
    "sondeos": 27119417444,
    "visto_en": [
     "seed"
    ],
    "flags_tcp": [
     24,
     16,
     2,
     17,
     4,
     18,
     25
    ],
    "so_probable": "linux/unix",
    "primer_visto": 1103534350967449,
    "ultimo_visto": 1550758766647374,
    "clasificacion": "barrido de puertos"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/radhikachain-bridge-threat-intelligence-feed-b689b3d8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402.radhikatmosphere.com](https://www.zero.xyz/host/x402.radhikatmosphere.com/llms.txt)