# IP Listed on Spamhaus XBL Bulk Check

> IP Listed on Spamhaus XBL Bulk Check is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-13).

Bulk-checks up to 20 IPv4 addresses against the Spamhaus Exploits Block List (XBL) DNSBL in a single concurrent call, returning per-item results in input order.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/bulk/ip/blacklist/spamhaus-xbl?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-listed-on-spamhaus-xbl-bulk-check-2aedab8d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_bjNrAIL7tp9ymR-Vyb-rb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-listed-on-spamhaus-xbl-bulk-check-2aedab8d
```

Example prompt: Check all 15 IPs from today's suspicious login list against the Spamhaus XBL exploit block list and tell me which ones are flagged — here's the list: 1.2.3.4, 5.6.7.8, 9.10.11.12 (and the rest).

## When to prefer this

Choose this endpoint when you have a list of up to 20 IPv4 addresses to check against Spamhaus XBL and want to minimize latency and cost by processing them concurrently in one call, rather than making 20 sequential single-IP requests. Ideal for batch enrichment workflows, fraud screening pipelines, or email deliverability audits.

## Known failure modes

- Individual IP lookup failures surfaced via per-item error field without blocking other results
- Invalid IP address format causes per-item error
- Exceeding 20 IPs per batch results in rejection
- Network/DNSBL timeout may cause per-item failures
- Payment failure (x402) blocks the entire call

## How this service works

Bulk ip listed on spamhaus xbl: up to 20 ips in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

## Output

An ordered array of per-IP results matching the input list, each containing the XBL listing status (listed/not listed) plus a per-item error field if the lookup failed for that IP, and an overall failure count for the batch.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-listed-on-spamhaus-xbl-bulk-check-2aedab8d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)