# is-port-464-open

> is-port-464-open is a paid API for AI agents from ip.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-11).

Checks whether TCP port 464 (kpasswd/Kerberos password change) is open, closed, or filtered on a given host by attempting a connection from Cloudflare's edge network.

## Facts

- Endpoint: GET https://ip.intel.rallylive.ca/ip/port/464?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/is-port-464-open-0b2ce6a5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_a1zfQNGnGM5moIMPg13rW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability is-port-464-open-0b2ce6a5
```

Example prompt: Can you check if TCP port 464 (kpasswd) is open or closed on the host auth.example.com? I want to know if it's reachable from the internet without running a scanner.

## When to prefer this

Use this endpoint when you need a lightweight, scannerless check of whether TCP port 464 (kpasswd) is publicly reachable on a specific host, particularly for security audits, compliance checks, or incident response, without setting up or running a dedicated network scanner. Prefer it over full port scanners when you need a quick single-port check at low cost ($0.01 per check) from an external vantage point (Cloudflare edge).

## Known failure modes

- Host is Cloudflare-fronted — result reported as inconclusive because Cloudflare's edge intercepts the connection
- Invalid or unresolvable hostname — likely returns an error or filtered status
- Host actively blocks all probes — port may show as filtered rather than closed
- Network timeout — may report filtered if no response received within timeout window

## How this service works

Is TCP port 464 (kpasswd) open on a host? Attempts a connection from Cloudflare's edge and reports open/closed/filtered with the connect time; Cloudflare-fronted hosts are reported as inconclusive because their edge answers for them. Exposure checks for kpasswd without running a scanner. $0.01 per check.

## Output

Returns the port status as open, closed, or filtered for TCP port 464 on the given host, along with the connection time in milliseconds. If the host is behind Cloudflare's edge, the result is reported as inconclusive since Cloudflare answers on behalf of the origin.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/is-port-464-open-0b2ce6a5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ip.intel.rallylive.ca](https://www.zero.xyz/host/ip.intel.rallylive.ca/llms.txt)