# RIPEstat IP & ASN Network Intelligence (`straightforward_hydra/ripestat-ip-asn-intelligence`) Actor Enrich IPs, prefixes and ASNs into full profiles — holder, abuse contact, geo, routing. RIPE NCC data, no key. - **URL**: https://apify.com/straightforward\_hydra/ripestat-ip-asn-intelligence.md - **Developed by:** [Dev D](https://apify.com/straightforward_hydra) (community) - **Categories:** Developer tools, Lead generation, Automation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing from $3.00 / 1,000 resources This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are web data automations that power AI and operations. They run on the Apify platform to scrape websites, process data, connect APIs, and automate workflows. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js/docs.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python/docs.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## RIPEstat IP & ASN Network Intelligence 🛡️ **Enrich any IP address, prefix or ASN into a full network profile — holder, abuse contact, geolocation and routing — straight from RIPE NCC's RIPEstat API. No API key, no proxy.** Give it a list of IPs, CIDR prefixes or AS numbers and get back, for each one: - 🏢 **Network** — the ASN and holder (owning organization). - 🛡️ **Abuse contact** — the email to report abuse/security incidents to (the headline for threat-intel & abuse handling). - 🌍 **Geolocation** — country, city, coordinates (for IPs/prefixes). - 🔀 **Routing** — origin ASNs, first/last seen in BGP, RIS visibility, announced-prefix counts. Perfect for **security & abuse teams, threat intelligence, SOC/incident response, IP/data enrichment**, and network research. > Uses **RIPEstat** (RIPE NCC) — public internet-number data, no key. Pairs with a PeeringDB actor for a full network-infrastructure picture. --- ### Modes - 🎯 **Enrich** — IP / prefix / ASN → full profile (network + abuse + geo + routing). - 📋 **ASN announced prefixes** — an ASN → every prefix it announces (one row each). ### Features - ✅ **No API key, no proxy** — official RIPE NCC data. - ✅ **Mixed inputs** — IPs, CIDR prefixes and ASNs in one run (auto-detected). - ✅ **Abuse contacts** — resolve the right abuse email for any resource. - ✅ **Routing & RPKI origins** — see who originates a prefix and BGP visibility. - ✅ **Graceful** — anycast/aggregate resources that lack a field are returned faithfully, not errored. --- ### Input | Field | Description | |---|---| | **Mode** | enrich / asn-prefixes. | | **Resources** | IPs, prefixes or ASNs, e.g. `["8.8.8.8", "1.1.1.0/24", "AS15169"]`. | | **Include geolocation** | Add country/city/lat/lon. | | **Include routing** | Add routing status + origins. | | **Max results** | Cap on records. | #### Example — enrich a mixed list ```json { "mode": "enrich", "resources": ["8.8.8.8", "1.1.1.0/24", "AS15169", "104.16.0.1"] } ```` #### Example — all prefixes announced by an ASN ```json { "mode": "asn-prefixes", "resources": ["AS13335"] } ``` ### Output (enrich) ```json { "resource": "8.8.8.8", "type": "ip", "asn": "15169", "holder": "GOOGLE - Google LLC", "prefix": "8.8.8.0/24", "announced": true, "abuse_contacts": ["network-abuse@google.com"], "country": "US", "city": "", "latitude": 37.751, "longitude": -97.822, "origin_asns": [15169], "routing_first_seen": "2002-11-06T16:00:00", "routing_last_seen": "2026-07-18T00:00:00", "ris_peers_seeing_v4": 325, "total_ris_peers_v4": 325, "url": "https://stat.ripe.net/8.8.8.8" } ``` For ASNs, the profile adds `as_type` and `announced_v4_prefixes` / `announced_v6_prefixes`. ### Run it on a schedule Enrich a watchlist of IPs/ASNs periodically to keep abuse contacts and routing data current — pipe to a SIEM, threat-intel platform or a webhook. ### Notes & limitations - Official **RIPEstat** (RIPE NCC) data — global coverage across all RIRs. - Anycast addresses may have no single geolocation; aggregate prefixes may not be announced in BGP — such fields come back empty, faithfully. - Some routing sub-fields are best-effort and may be blank if RIPEstat is momentarily slow for a resource. - Data source: RIPE NCC / RIPEstat. *** #### Keywords RIPEstat, RIPE NCC, IP enrichment, ASN, abuse contact, threat intelligence, network intelligence, IP geolocation, BGP, routing, RPKI, whois, prefix, CIDR, security, SOC, incident response, abuse handling, internet numbers, network research, IP lookup. # Actor input Schema ## `mode` (type: `string`): enrich = resource -> full profile; asn-prefixes = ASN -> all announced prefixes. ## `resources` (type: `array`): IP addresses, prefixes or ASNs, e.g. \["8.8.8.8", "1.1.1.0/24", "AS15169"]. In asn-prefixes mode, provide ASNs. ## `includeGeo` (type: `boolean`): Add country/city/lat/lon (for IPs and prefixes). ## `includeRouting` (type: `boolean`): Add routing status: origin ASNs, first/last seen, visibility, announced prefix counts. ## `maxResults` (type: `integer`): Maximum number of records to return. ## Actor input object example ```json { "mode": "enrich", "resources": [ "8.8.8.8", "AS15169" ], "includeGeo": true, "includeRouting": true, "maxResults": 10000 } ``` # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "resources": [ "8.8.8.8", "AS15169" ] }; // Run the Actor and wait for it to finish const run = await client.actor("straightforward_hydra/ripestat-ip-asn-intelligence").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "resources": [ "8.8.8.8", "AS15169", ] } # Run the Actor and wait for it to finish run = client.actor("straightforward_hydra/ripestat-ip-asn-intelligence").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "resources": [ "8.8.8.8", "AS15169" ] }' | apify call straightforward_hydra/ripestat-ip-asn-intelligence --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=straightforward_hydra/ripestat-ip-asn-intelligence", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "RIPEstat IP & ASN Network Intelligence", "description": "Enrich IPs, prefixes and ASNs into full profiles — holder, abuse contact, geo, routing. RIPE NCC data, no key.", "version": "0.1", "x-build-id": "l89xC79xVAQXcyh89" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/straightforward_hydra~ripestat-ip-asn-intelligence/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-straightforward_hydra-ripestat-ip-asn-intelligence", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/straightforward_hydra~ripestat-ip-asn-intelligence/runs": { "post": { "operationId": "runs-sync-straightforward_hydra-ripestat-ip-asn-intelligence", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/straightforward_hydra~ripestat-ip-asn-intelligence/run-sync": { "post": { "operationId": "run-sync-straightforward_hydra-ripestat-ip-asn-intelligence", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "mode": { "title": "Mode", "enum": [ "enrich", "asn-prefixes" ], "type": "string", "description": "enrich = resource -> full profile; asn-prefixes = ASN -> all announced prefixes.", "default": "enrich" }, "resources": { "title": "Resources", "type": "array", "description": "IP addresses, prefixes or ASNs, e.g. [\"8.8.8.8\", \"1.1.1.0/24\", \"AS15169\"]. In asn-prefixes mode, provide ASNs.", "items": { "type": "string" } }, "includeGeo": { "title": "Include geolocation", "type": "boolean", "description": "Add country/city/lat/lon (for IPs and prefixes).", "default": true }, "includeRouting": { "title": "Include routing", "type": "boolean", "description": "Add routing status: origin ASNs, first/last seen, visibility, announced prefix counts.", "default": true }, "maxResults": { "title": "Max results", "minimum": 1, "maximum": 500000, "type": "integer", "description": "Maximum number of records to return.", "default": 10000 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```