# RIL Keep – Recent Threat IP List

> RIL Keep – Recent Threat IP List is a paid API for AI agents from keep.ripitlabs.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-17).

Returns a list of recently detected AI crawler and scraper IP addresses that have been blocked by the Keep platform.

## Facts

- Endpoint: GET https://keep.ripitlabs.com/api/x402/threat/recent?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ril-keep-recent-threat-ip-list-fd3c188d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HqgCfm6CeobRjQaqofYyA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ril-keep-recent-threat-ip-list-fd3c188d
```

Example prompt: Can you pull the 100 most recent AI crawler and scraper IP addresses that Keep by Rip It Labs has detected and blocked, so I can update my firewall rules?

## When to prefer this

Use this endpoint when you need an up-to-date feed of recently detected AI crawler and scraper IP addresses, particularly to augment firewall rules, blocklists, or threat intelligence pipelines. It is especially useful for creators, artists, and website operators who want to proactively block scrapers targeting creative content. Prefer this over generic threat-feed providers if you specifically need IPs flagged for AI crawling and scraping behavior rather than general malware or spam.

## Known failure modes

- Invalid limit value (outside 1–200 range) returns a validation error
- Payment not provided or insufficient USDC results in HTTP 402 Payment Required
- Service downtime returns 5xx error
- Empty result set if no threats have been recently recorded
- Rate limiting if called too frequently without proper payment

## How this service works

Keep by Rip It Labs blocks AI crawlers and scrapers on your website and protects your art, music and voice: invisible watermarks, AI cloaking, proof you made it first. Free for 3 sites.

## Output

An object containing a list of recently detected threat IP addresses (AI crawlers and scrapers) identified by the Keep platform, up to the requested limit (1–200). Each entry likely includes the IP address and associated threat metadata.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "limit": {
   "type": "integer",
   "description": "How many IPs to return (1 to 200)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ril-keep-recent-threat-ip-list-fd3c188d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from keep.ripitlabs.com](https://www.zero.xyz/host/keep.ripitlabs.com/llms.txt)