# ip-listed-on-spamhaus-zen-bulk

> ip-listed-on-spamhaus-zen-bulk is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-13).

Checks up to 20 IP addresses against the Spamhaus ZEN blacklist in a single concurrent batch call, returning per-item results in input order with error fields and a failure count.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/bulk/ip/blacklist/spamhaus-zen?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ip-listed-on-spamhaus-zen-bulk-9b927a4d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_btDg4lWBsUdDl2sxKqw07

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ip-listed-on-spamhaus-zen-bulk-9b927a4d
```

Example prompt: Can you check this list of IPs — 203.0.113.5, 198.51.100.10, 192.0.2.1, and 10.0.0.1 — against the Spamhaus ZEN blacklist all at once and tell me which ones are listed?

## When to prefer this

Use this endpoint when you have a list of 2–20 IP addresses that all need Spamhaus ZEN lookups and you want to minimize latency and cost vs. making individual calls. It processes all IPs concurrently and returns results in input order, making it ideal for pipeline enrichment, pre-send email audits, or filtering bursts of inbound connections. Prefer the single-IP endpoint only when checking one address at a time in real-time flows.

## Known failure modes

- Batch exceeds 20 IPs — request rejected or truncated
- Individual IP format invalid — per-item error field set, other items still processed
- Spamhaus DNS timeout for a specific IP — per-item error reported, failure count incremented
- Payment not included or insufficient — 402 response, no results returned
- Network error reaching Spamhaus DNS — elevated failure count across batch

## How this service works

Bulk ip listed on spamhaus zen: up to 20 ips in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for agents that hold a list. $0.10 per batch.

## Output

Returns an ordered array of per-IP results matching the input order, each containing the same fields as the single-IP Spamhaus ZEN endpoint (listed status, ZEN sub-list details), plus a per-item error field indicating any lookup failure for that IP, and an overall failure count for the batch.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ip-listed-on-spamhaus-zen-bulk-9b927a4d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)
