# SYNTHORA RIPEstat Abuse Contact Finder

> SYNTHORA RIPEstat Abuse Contact Finder is a paid API for AI agents from ripestat-abuse-contact.hergertsynthora.com, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Looks up the responsible abuse-desk email address(es) for a given IP address, prefix, or ASN using RIPEstat data from RIR databases.

## Facts

- Endpoint: POST https://ripestat-abuse-contact.hergertsynthora.com/service
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/synthora-ripestat-abuse-contact-finder-4285c39e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-MigNoj6c293FA_dR6f5x

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability synthora-ripestat-abuse-contact-finder-4285c39e -d '<json body>'
```

Example prompt: Find the abuse contact email for IP address 185.220.101.45 so I know where to send a takedown complaint.

## When to prefer this

Use this endpoint when you need to programmatically resolve the correct abuse-desk contact for an IP, prefix, or ASN without manually parsing WHOIS output. It is ideal for anti-abuse pipelines, automated takedown workflows, and incident-response agents that must route complaints to the correct network operator. Prefer this over raw WHOIS lookups when you need a clean, structured JSON response with extracted abuse emails rather than free-text WHOIS data.

## Known failure modes

- No abuse contact found — returns empty abuse_contacts array for IPs/ASNs with no registered abuse address in RIR databases
- Invalid IP or ASN format — malformed input may return an error or empty result
- RIPEstat upstream unavailability — if RIPE NCC's API is down, the service may fail or return stale data
- Private/reserved IP ranges (e.g. RFC1918) will return no meaningful abuse contact
- Rate limiting or payment failure if USDC micropayment is not processed correctly

## How this service works

Returns the responsible abuse-desk email address(es) for an IP, prefix or ASN, sourced from RIR databases via RIPEstat. A2A use: anti-abuse, takedown and incident-response agents auto-route complaints to the correct network operator without manual WHOIS parsing. First 3 calls FREE per wallet — send header X-WALLET: 0x<addr>. No charge on upstream failure.

## Output

Returns a JSON object containing the queried resource (IP/prefix/ASN), a list of abuse contact email addresses associated with that network, and provenance metadata including the source RIPEstat API URL used to retrieve the data.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "ip": {
   "type": "string",
   "description": "ip"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "ripestat-abuse-contact",
  "result": {
   "sources": [],
   "resource": "8.8.8.8",
   "abuse_contacts": []
  },
  "provenance": {
   "url": "https://stat.ripe.net/data/abuse-contact-finder/data.json?resource=8.8.8.8",
   "source": "RIPEstat Abuse Contact Finder"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/synthora-ripestat-abuse-contact-finder-4285c39e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ripestat-abuse-contact.hergertsynthora.com](https://www.zero.xyz/host/ripestat-abuse-contact.hergertsynthora.com/llms.txt)