Most people start here
I run a WordPress site
Install Hive. It blocks known attackers on arrival, adds a firewall and gives every account real two-factor login. The plugin and all 16 sensors are free forever.
Get Hive for WordPress
Open IP threat intelligence platform
IP threat intelligence products for WordPress, mail and DNS
One community-powered reputation database, delivered six ways, a WordPress plugin, a REST API, a downloadable blacklist, a live DNS/RBL zone, a DNS checker and a honeypot. Use one or combine them; every product has a free tier and runs on EU infrastructure.
771k+
IP addresses tracked
7.0M+
community reports
63
threat categories
Start where you are
Three common situations, three short paths. Everything else on this page is detail.
Agencies and hosters
I look after client sites
One Business licence covers 15 sites at 2.60 € each, managed from a single dashboard, white-labelled with your own name on the quickstart and the 2FA screens.
See the agency setupServers, firewalls, mail
I need the data, not a plugin
Query the REST API, pull the blacklist as a feed for ipset or nftables, or point your mail server at the DNS/RBL zone. 1,000 checks a day are free.
Create free accountWhat ReportedIP does
Someone tries to break into a website in Rotterdam. Ninety seconds later that same attacker is blocked on a site in Lisbon that has never seen them before.
That is the whole idea. When a site running our plugin, a honeypot or a firewall gets attacked, it reports the attacking IP address. Every other site on the network gets that address straight away. About 771k+ addresses are known this way, from 7.0M+ reports. The more sites join, the earlier each one sees an attacker coming.
Everything below is one of those two things: the plugin that does it for you, or the same data in a shape your own systems can read. Every quarter the same dataset also becomes a WordPress Attack Report, free to cite under CC BY 4.0.
- A site gets attacked. Someone hammers the login form, floods the comments or scans for a known hole.
- The address is reported. Only the attacking address and what it did. No visitor data, no content, nothing about the site itself.
- Everyone else is warned. The address gets a score from 0 to 100, how sure the network is that it attacks people, and every connected site can act on it.
- Your site blocks it on arrival. Before the login page loads, before the comment form is reached, before anything is tried.
The product
If you run WordPress, this is all you need. Two editions share the same core: the small one if the login form is your whole problem, the full one if it is not.
WordPress Plugin · Free
ReportedIP Hive
Real-time WordPress security with 16 detection sensors, a Web Application Firewall, four 2FA methods and an opt-in community threat network. Free and open source forever.
Or take the raw data
The same list of attacking addresses, in whichever shape your stack can read. Pick one, they are not alternatives to each other so much as three doors into the same room.
REST Threat Intelligence · Free tier
Public API
The reputation engine behind everything. Query IPs, submit reports, pull the blacklist and run bulk operations from any language, fail2ban, SIEM, firewalls, hosting panels.
Downloadable Feed · Free
Blacklist Feed
Community-driven blacklist, automatically scored from real-time reports. Plain text, JSON and CSV, ready for fail2ban, iptables, nginx or any blocklist consumer.
Live DNSBL Add-on · from PRO
DNS / RBL Zone
Ask a DNS question instead of downloading a list: your mail server looks the address up live, the same way it already queries Spamhaus. No imports, always fresh.
Free tools
None of these block anything and none of them need an account. Three tell you what is already public about a domain or an address, one shows what your own visit gives away, and the last collects attack data and hands it back to the network.
DNS Diagnostics · Free
DNS Checker
Domain health diagnostics from 76 resolvers across 6 continents. Validate SPF, DKIM, DMARC and DNSSEC, run DNSBL lookups and track propagation during migrations.
PTR Check · Free
Reverse DNS Lookup
Resolve the PTR record of an IPv4 or IPv6 address and check whether it resolves back. A PTR record nobody confirms is the most common reason a mail server is refused at the door.
Reputation Lookup, Free
DNSBL Blacklist Check
Look up an address or domain across curated blacklists at once and see which one lists it, so you know where to ask for removal.
SPF, DKIM, DMARC, Free
Email Security Check
Validate the four records that decide whether your mail is trusted, and get told which one is missing, too permissive or contradicting another.
Privacy Mirror, Free
What We Know About You
Everything a website learns the moment you arrive: address, location, network, browser fingerprint. Shown back to you and stored nowhere.
HTTP Hardening · Free
Security Header Check
Read the security headers a site actually sends, weighted by what each one prevents. Tells you the directive to change, not just the header that is missing.
RDAP · Free
Abuse Contact Lookup
Find the mailbox responsible for an address and get a report draft. Reporting to the widest allocation is the same as not reporting at all.
Crawler Check · Free
Bot Verification
Your log says Googlebot. Find out whether it really was, using the check the search engines themselves publish.
Network Reputation · Free
ASN and Network Report
See the network behind an address: who runs it, how much of it we know, and how it ranks against every other network in the community data.
Standalone PHP App · Free
Honeypot Server
A fake site that exists only to record who attacks it, dressed up as WordPress, Drupal or Joomla. 36 threat analyzers score every request and feed clean intel back.
Which product do I need?
Start from the job you want done.
| Your goal | Use |
|---|---|
| Protect a WordPress site | ReportedIP Hive |
| Reputation checks in fail2ban, SIEM or a firewall | Public API |
| Drop a static blocklist into iptables or nginx | Blacklist Feed |
| Block addresses at your mail server (SMTP) | DNS / RBL Zone |
| Diagnose SPF, DKIM, DMARC or DNS | DNS Checker |
| Find out why a mail server is refused | Reverse DNS Lookup |
| Find out whether an address is blacklisted | DNSBL Blacklist Check |
| Check whether my mail is authenticated properly | Email Security Check |
| See what my own visit gives away | What We Know About You |
| Check how a site is hardened | Security Header Check |
| Find out where to report an address | Abuse Contact Lookup |
| Tell a real crawler from an impostor | Bot Verification |
| Judge a whole network, not one address | ASN and Network Report |
| Generate first-party attacker intelligence | Honeypot Server |
The protection is free forever. A paid plan buys our servers: 2FA mail and SMS delivery, higher API quotas and every site in one dashboard. Professional works out at 4.97 € per domain per month. View pricing
Get started: free forever
Create an account for API access, read the docs first, or check what the paid plans add. No credit card required.
Security Focused
GDPR Compliant
Made in Germany
Open source where possible