# ReportedIP Documentation

> Community-driven IP reputation service: REST API, blacklist feeds, WordPress
> security plugins, honeypot server and DNSBL zone. Operated from Germany under GDPR.

Docs root: https://reportedip.com/docs/

## Products

- [ReportedIP Hive](https://reportedip.com/products/wordpress-plugin/): Real-time WordPress security with 16 detection sensors, a Web Application Firewall, four 2FA methods and an opt-in community threat network. Free and open source forever.
- [ReportedIP Agent](https://reportedip.com/products/linux-agent/): One static binary that puts thousands of known attackers into your kernel firewall before they reach you, and watches every log your server already writes for the ones nobody has reported yet.

## Data

- [Public API](https://reportedip.com/products/api/): The reputation engine behind everything. Query IPs, submit reports, pull the blacklist and run bulk operations from any language, your SIEM, your firewall or your hosting panel.
- [Blacklist Feed](https://reportedip.com/docs/blocking/blacklist/): Community-driven blacklist, automatically scored from real-time reports. Plain text, JSON and CSV, ready for iptables, nftables, nginx or any blocklist consumer.
- [DNS / RBL Zone](https://reportedip.com/products/dnsbl-zone/): Ask a DNS question instead of downloading a list: your mail server looks the address up live, the same way it already queries Spamhaus. No imports, always fresh.

## Free Tools

- [DNS Checker](https://reportedip.com/dnschecker/): Domain health diagnostics from about 100 resolvers in more than 50 countries. Validate SPF, DKIM, DMARC and DNSSEC, run DNSBL lookups and track propagation during migrations.
- [Reverse DNS Lookup](https://reportedip.com/reverse-dns/): Resolve the PTR record of an IPv4 or IPv6 address and check whether it resolves back. A PTR record nobody confirms is the most common reason a mail server is refused at the door.
- [DNSBL Blacklist Check](https://reportedip.com/dnsbl-checker/): Look up an address or domain across curated blacklists at once and see which one lists it, so you know where to ask for removal.
- [Email Security Check](https://reportedip.com/email-security-check/): Check the seven records that decide whether your mail is trusted and delivered encrypted, and get told which one is missing, too permissive or contradicting another.
- [SPF Generator](https://reportedip.com/spf-generator/): Build the SPF record from the services that send your mail, with the real number of DNS lookups for every include. Loads what you publish today and merges it.
- [DMARC Generator](https://reportedip.com/dmarc-generator/): Write a DMARC record that follows RFC 9989, with a dated plan from p=none to p=reject and the extra record an external report mailbox needs.
- [DKIM Generator](https://reportedip.com/dkim-generator/): Create an RSA or Ed25519 key pair in the browser and get the DNS record in the format your DNS panel accepts. Checks the key once it is published.
- [MTA-STS Generator](https://reportedip.com/mta-sts-generator/): Read your mail servers from MX and get the MTA-STS policy file, the _mta-sts record and the TLS-RPT record in one pass.
- [BIMI Generator](https://reportedip.com/bimi-generator/): Write the default._bimi record for your brand logo and see first whether your DMARC policy lets any mailbox show it.
- [What We Know About You](https://reportedip.com/whats-my-ip/): Everything a website learns the moment you arrive: address, location, network, browser fingerprint. Shown back to you and stored nowhere.
- [Security Header Check](https://reportedip.com/security-headers/): Read the security headers a site actually sends, weighted by what each one prevents. Tells you the directive to change, not just the header that is missing.
- [Abuse Contact Lookup](https://reportedip.com/abuse-contact/): Find the mailbox responsible for an address and get a report draft. Reporting to the widest allocation is the same as not reporting at all.
- [Bot Verification](https://reportedip.com/bot-verify/): Your log says Googlebot. Find out whether it really was, using the check the search engines themselves publish.
- [ASN and Network Report](https://reportedip.com/asn-lookup/): See the network behind an address: who runs it, how much of it we know, and how it ranks against every other network in the community data.
- [Honeypot Server](https://reportedip.com/docs/integrations/honeypot-server/): A fake site that exists only to record who attacks it, dressed up as WordPress, Drupal or Joomla. 36 threat analyzers score every request and feed clean intel back.

## API

- [API](https://reportedip.com/docs/api/): REST API documentation for ReportedIP: endpoint reference, authentication and rate limits, threat categories, and how the confidence score is calculated.
- [API Reference](https://reportedip.com/docs/api/reference/): Every endpoint with parameters, quota cost and examples in cURL, PHP, Python and JavaScript.
  - [Public Endpoints](https://reportedip.com/docs/api/reference/#public-endpoints)
  - [GET /check-public - Public IP Check](https://reportedip.com/docs/api/reference/#check-public)
  - [GET /stats-public - Detailed Public Statistics](https://reportedip.com/docs/api/reference/#stats-public)
  - [GET /asn-public - Public Network Report](https://reportedip.com/docs/api/reference/#asn-public)
  - [GET /search-public - Public IP Search](https://reportedip.com/docs/api/reference/#search-public)
  - [GET /categories - Threat Categories](https://reportedip.com/docs/api/reference/#categories)
  - [Authenticated Endpoints](https://reportedip.com/docs/api/reference/#authenticated-endpoints)
  - [GET /check - Full IP Check](https://reportedip.com/docs/api/reference/#check)
  - [POST /report - Report IP Address](https://reportedip.com/docs/api/reference/#report)
  - [GET /verify-key - Verify API Key](https://reportedip.com/docs/api/reference/#verify-key)
  - [GET /statistics - Service Statistics](https://reportedip.com/docs/api/reference/#statistics)
  - [Blacklist Endpoints](https://reportedip.com/docs/api/reference/#blacklist-endpoints)
  - [GET /blacklist - Get Blacklist](https://reportedip.com/docs/api/reference/#blacklist)
  - [GET /blacklist-categories - Blacklist Categories](https://reportedip.com/docs/api/reference/#blacklist-categories)
  - [GET /blacklist-stats - Blacklist Statistics](https://reportedip.com/docs/api/reference/#blacklist-stats)
  - [Advanced Endpoints](https://reportedip.com/docs/api/reference/#advanced-endpoints)
  - [GET /reports/{ip} - Reports for IP](https://reportedip.com/docs/api/reference/#reports-ip)
  - [GET /trends - Trend Data](https://reportedip.com/docs/api/reference/#trends)
  - [POST /bulk-check - Bulk IP Check](https://reportedip.com/docs/api/reference/#bulk-check)
  - [POST /bulk-report - Bulk Report](https://reportedip.com/docs/api/reference/#bulk-report)
  - [2FA Relay Endpoints](https://reportedip.com/docs/api/reference/#relay-endpoints)
  - [GET /relay-quota - Relay Quota Status](https://reportedip.com/docs/api/reference/#relay-quota)
  - [POST /relay-mail - Send 2FA Mail](https://reportedip.com/docs/api/reference/#relay-mail)
  - [POST /relay-sms - Send 2FA SMS](https://reportedip.com/docs/api/reference/#relay-sms)
  - [Error responses for relay endpoints](https://reportedip.com/docs/api/reference/#relay-error-codes)
- [Authentication](https://reportedip.com/docs/api/authentication/): How to send an API key, which role gets which quota, and what the 401, 403 and 429 responses mean.
  - [API Key Authentication](https://reportedip.com/docs/api/authentication/#api-key-authentication)
  - [Method 1: X-Key Header (Recommended)](https://reportedip.com/docs/api/authentication/#method-1-x-key-header-recommended)
  - [Method 2: Query Parameter](https://reportedip.com/docs/api/authentication/#method-2-query-parameter)
  - [Getting Your API Key](https://reportedip.com/docs/api/authentication/#getting-your-api-key)
  - [User Roles & Permissions](https://reportedip.com/docs/api/authentication/#user-roles-and-permissions)
  - [Rate Limits](https://reportedip.com/docs/api/authentication/#rate-limits)
  - [Example Response Headers](https://reportedip.com/docs/api/authentication/#example-response-headers)
  - [Hybrid Authentication](https://reportedip.com/docs/api/authentication/#hybrid-authentication)
  - [Error Responses](https://reportedip.com/docs/api/authentication/#error-responses)
  - [401 Unauthorized](https://reportedip.com/docs/api/authentication/#401-unauthorized)
  - [403 Forbidden](https://reportedip.com/docs/api/authentication/#403-forbidden)
  - [429 Too Many Requests](https://reportedip.com/docs/api/authentication/#429-too-many-requests)
  - [Best Practices](https://reportedip.com/docs/api/authentication/#best-practices)
- [Threat Categories](https://reportedip.com/docs/api/threat-categories/): All 63 categories with their severity levels, and how to send them when reporting.
  - [All Categories](https://reportedip.com/docs/api/threat-categories/#all-categories)
  - [Using Categories in the API](https://reportedip.com/docs/api/threat-categories/#using-categories-in-the-api)
  - [Report with Category](https://reportedip.com/docs/api/threat-categories/#report-with-category)
  - [Retrieve All Categories](https://reportedip.com/docs/api/threat-categories/#retrieve-all-categories)
  - [Severity Scale](https://reportedip.com/docs/api/threat-categories/#severity-scale)
- [Confidence Score](https://reportedip.com/docs/api/confidence-score/): The scoring formula in full: weighting, reporter diversity, recency, severity, honeypot bonus and time decay.
  - [How the score is built](https://reportedip.com/docs/api/confidence-score/#how-the-score-is-built)
  - [Reporter diversity](https://reportedip.com/docs/api/confidence-score/#reporter-diversity)
  - [Time decay](https://reportedip.com/docs/api/confidence-score/#time-decay)
  - [Honeypot reports](https://reportedip.com/docs/api/confidence-score/#honeypot-reports)
  - [Burst aggregation](https://reportedip.com/docs/api/confidence-score/#burst-aggregation)
  - [Reading the breakdown from the API](https://reportedip.com/docs/api/confidence-score/#reading-the-breakdown-from-the-api)
  - [Choosing a threshold](https://reportedip.com/docs/api/confidence-score/#choosing-a-threshold)
  - [If a score looks wrong](https://reportedip.com/docs/api/confidence-score/#if-a-score-looks-wrong)
- [Changelog](https://reportedip.com/docs/api/changelog/): Every API release with new endpoints, quota changes and breaking changes.
  - [v2.6.0 September 2026](https://reportedip.com/docs/api/changelog/#v2-6-0)
  - [v2.5.1 May 2026](https://reportedip.com/docs/api/changelog/#v2-5-1)
  - [v2.5.0 May 2026](https://reportedip.com/docs/api/changelog/#v2-5-0)
  - [v2.3.0 April 2026](https://reportedip.com/docs/api/changelog/#v2-3-0)
  - [v2.1.0 November 2025](https://reportedip.com/docs/api/changelog/#v2-1-0)
  - [v2.0.0 March 2025](https://reportedip.com/docs/api/changelog/#v2-0-0)
  - [v1.0.0 January 2025](https://reportedip.com/docs/api/changelog/#v1-0-0)

## Integrations

- [Integrations](https://reportedip.com/docs/integrations/): Ready-made ReportedIP integrations: the Hive WordPress security plugin with its Pro add-on, an agent for Linux servers, a standalone honeypot server, and a fail2ban action that reports every ban.
- [WordPress Plugin: Hive](https://reportedip.com/docs/integrations/wordpress-hive/): Free from wordpress.org: firewall, sixteen sensors, 2FA with passkeys and form protection. Paid plans add the Pro add-on. Start here for every subpage.
  - [Two plugins, one protection](https://reportedip.com/docs/integrations/wordpress-hive/#two-plugins-one-protection)
  - [How a request is checked](https://reportedip.com/docs/integrations/wordpress-hive/#how-a-request-is-checked)
  - [The guide](https://reportedip.com/docs/integrations/wordpress-hive/#the-guide)
  - [What it does not do](https://reportedip.com/docs/integrations/wordpress-hive/#what-it-does-not-do)
- [Installation and updates](https://reportedip.com/docs/integrations/wordpress-hive/install/): The free plugin from wordpress.org, the Pro add-on, the update from 2.x, MainWP, multisite and the requirements.
  - [Install the free plugin](https://reportedip.com/docs/integrations/wordpress-hive/install/#install-the-free-plugin)
  - [Add the Pro add-on](https://reportedip.com/docs/integrations/wordpress-hive/install/#add-the-pro-add-on)
  - [How updates arrive](https://reportedip.com/docs/integrations/wordpress-hive/install/#how-updates-arrive)
  - [Coming from an older version](https://reportedip.com/docs/integrations/wordpress-hive/install/#coming-from-an-older-version)
  - [MainWP](https://reportedip.com/docs/integrations/wordpress-hive/install/#mainwp)
  - [Multisite networks](https://reportedip.com/docs/integrations/wordpress-hive/install/#multisite-networks)
  - [Requirements](https://reportedip.com/docs/integrations/wordpress-hive/install/#requirements)
- [Quickstart and modes](https://reportedip.com/docs/integrations/wordpress-hive/quickstart/): The two modes, the access key, what the recommendation switches on per plan, and the dashboard after setup.
  - [The quickstart](https://reportedip.com/docs/integrations/wordpress-hive/quickstart/#the-quickstart)
  - [Local Shield and Community Network](https://reportedip.com/docs/integrations/wordpress-hive/quickstart/#operating-modes)
  - [The Community Access Key](https://reportedip.com/docs/integrations/wordpress-hive/quickstart/#the-community-access-key)
  - [After the quickstart](https://reportedip.com/docs/integrations/wordpress-hive/quickstart/#after-the-quickstart)
- [Protection settings](https://reportedip.com/docs/integrations/wordpress-hive/protection/): The five tabs, the main defaults, lockdown switches, security headers, trusted proxies and every readiness issue.
  - [The five tabs](https://reportedip.com/docs/integrations/wordpress-hive/protection/#the-five-tabs)
  - [The most important defaults](https://reportedip.com/docs/integrations/wordpress-hive/protection/#the-most-important-defaults)
  - [Access lockdown switches](https://reportedip.com/docs/integrations/wordpress-hive/protection/#access-lockdown)
  - [Security headers](https://reportedip.com/docs/integrations/wordpress-hive/protection/#security-headers)
  - [Cloudflare, reverse proxies and load balancers](https://reportedip.com/docs/integrations/wordpress-hive/protection/#trusted-proxies)
  - [System readiness](https://reportedip.com/docs/integrations/wordpress-hive/protection/#system-readiness)
  - [Protection score](https://reportedip.com/docs/integrations/wordpress-hive/protection/#protection-score)
- [Sensors and blocking](https://reportedip.com/docs/integrations/wordpress-hive/detection/): The sixteen sensors and their thresholds, the escalation ladder, reputation blocks, verified bots, Tor and group bans.
  - [The sixteen attack sensors](https://reportedip.com/docs/integrations/wordpress-hive/detection/#attack-sensors)
  - [Leaked password check](https://reportedip.com/docs/integrations/wordpress-hive/detection/#breach-check)
  - [Block escalation](https://reportedip.com/docs/integrations/wordpress-hive/detection/#block-escalation)
  - [Community reputation](https://reportedip.com/docs/integrations/wordpress-hive/detection/#community-reputation)
  - [Hardening mode during attack waves](https://reportedip.com/docs/integrations/wordpress-hive/detection/#hardening-mode-during-attack-waves)
  - [Tor exit nodes](https://reportedip.com/docs/integrations/wordpress-hive/detection/#tor-exit-nodes)
  - [Group bans](https://reportedip.com/docs/integrations/wordpress-hive/detection/#group-bans)
- [Firewall and WAF](https://reportedip.com/docs/integrations/wordpress-hive/firewall/): The two firewall layers, signed rule delivery, Priority Sync, the pre-WordPress guard, exceptions and reference codes.
  - [The engine inside WordPress](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#the-engine-inside-wordpress)
  - [Signed rule delivery and Priority Sync](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#signed-rule-delivery-and-priority-sync)
  - [Extended Protection: the guard before WordPress](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#extended-protection-the-guard-before-wordpress)
  - [Exceptions for false positives](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#waf-exceptions)
  - [Reference codes and the block page](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#reference-codes-and-the-block-page)
  - [Page caches](https://reportedip.com/docs/integrations/wordpress-hive/firewall/#page-caches)
- [Login security and 2FA](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/): The methods, passkeys and YubiKeys, enforcement per role, recovery, storefront 2FA and adaptive policies.
  - [The methods](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#the-methods)
  - [Enforcement per role](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#enforcement-per-role)
  - [Passkeys and YubiKeys](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#hardware-keys)
  - [Guessing protection](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#guessing-protection)
  - [Storefront 2FA for WooCommerce](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#storefront-2fa-for-woocommerce)
  - [Adaptive step-up](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#adaptive-2fa)
  - [How codes are delivered](https://reportedip.com/docs/integrations/wordpress-hive/two-factor/#how-codes-are-delivered)
- [Forms and spam](https://reportedip.com/docs/integrations/wordpress-hive/forms/): The invisible form check, the form plugin adapters, the comment spam filter, disposable mail and registration rules.
  - [The invisible form check](https://reportedip.com/docs/integrations/wordpress-hive/forms/#the-invisible-form-check)
  - [Form plugins](https://reportedip.com/docs/integrations/wordpress-hive/forms/#form-plugins)
  - [Computation check](https://reportedip.com/docs/integrations/wordpress-hive/forms/#computation-check)
  - [Comment spam filter](https://reportedip.com/docs/integrations/wordpress-hive/forms/#comment-spam-filter)
  - [Disposable mail addresses](https://reportedip.com/docs/integrations/wordpress-hive/forms/#disposable-mail-addresses)
  - [Registration rules](https://reportedip.com/docs/integrations/wordpress-hive/forms/#registration-rules)
- [Dashboard, logs and audit trail](https://reportedip.com/docs/integrations/wordpress-hive/activity/): The dashboard and its charts, the activity log, the badges, the audit trail and account control.
  - [The dashboard](https://reportedip.com/docs/integrations/wordpress-hive/activity/#the-dashboard)
  - [The Activity page](https://reportedip.com/docs/integrations/wordpress-hive/activity/#the-activity-page)
  - [Alerts and notices](https://reportedip.com/docs/integrations/wordpress-hive/activity/#alerts-and-notices)
  - [Footer badge and banners](https://reportedip.com/docs/integrations/wordpress-hive/activity/#footer-badge-and-banners)
  - [Audit trail](https://reportedip.com/docs/integrations/wordpress-hive/activity/#audit-event-trail-business)
  - [Account control and sessions](https://reportedip.com/docs/integrations/wordpress-hive/activity/#user-account-control)
- [Pro add-on and plans](https://reportedip.com/docs/integrations/wordpress-hive/pro/): What the Pro add-on adds per plan, quotas and domains, the mail and SMS relay, MainWP and fleet management.
  - [What each plan adds](https://reportedip.com/docs/integrations/wordpress-hive/pro/#what-each-plan-adds)
  - [Prices, quotas and domains](https://reportedip.com/docs/integrations/wordpress-hive/pro/#prices-quotas-and-domains)
  - [Mail and SMS relay](https://reportedip.com/docs/integrations/wordpress-hive/pro/#mail-and-sms-relay)
  - [MainWP integration](https://reportedip.com/docs/integrations/wordpress-hive/pro/#mainwp-integration)
  - [Cloud fleet management](https://reportedip.com/docs/integrations/wordpress-hive/pro/#cloud-fleet)
  - [When the plan changes](https://reportedip.com/docs/integrations/wordpress-hive/pro/#when-the-plan-changes)
- [WP-CLI commands](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/): IP lists, lookup, status, the support bundle, 2FA administration, account blocks and the hardening mode.
  - [IP lists and lookup](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/#ip-lists-and-lookup)
  - [Status and support](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/#status-and-support)
  - [Two-factor administration](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/#two-factor-administration)
  - [Accounts](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/#accounts)
  - [Hardening mode](https://reportedip.com/docs/integrations/wordpress-hive/wp-cli/#hardening-mode)
- [Hooks and developer API](https://reportedip.com/docs/integrations/wordpress-hive/developers/): Actions and filters, the form check API, the 2FA REST routes, shortcodes, tables and constants.
  - [Actions](https://reportedip.com/docs/integrations/wordpress-hive/developers/#actions)
  - [Filters](https://reportedip.com/docs/integrations/wordpress-hive/developers/#filters)
  - [The form check for your own forms](https://reportedip.com/docs/integrations/wordpress-hive/developers/#form-check-api)
  - [2FA REST routes](https://reportedip.com/docs/integrations/wordpress-hive/developers/#2fa-rest-routes)
  - [Shortcodes](https://reportedip.com/docs/integrations/wordpress-hive/developers/#shortcodes)
  - [Database tables](https://reportedip.com/docs/integrations/wordpress-hive/developers/#database-tables)
  - [Constants](https://reportedip.com/docs/integrations/wordpress-hive/developers/#constants)
  - [Building an add-on](https://reportedip.com/docs/integrations/wordpress-hive/developers/#building-an-add-on)
- [Privacy and external services](https://reportedip.com/docs/integrations/wordpress-hive/privacy/): What is stored and for how long, every external request, the privacy tools and what an uninstall removes.
  - [What is stored on your site](https://reportedip.com/docs/integrations/wordpress-hive/privacy/#what-is-stored-on-your-site)
  - [What leaves the site](https://reportedip.com/docs/integrations/wordpress-hive/privacy/#what-leaves-the-site)
  - [Privacy tools in WordPress](https://reportedip.com/docs/integrations/wordpress-hive/privacy/#privacy-tools-in-wordpress)
  - [Your privacy policy](https://reportedip.com/docs/integrations/wordpress-hive/privacy/#your-privacy-policy)
  - [Uninstalling](https://reportedip.com/docs/integrations/wordpress-hive/privacy/#uninstalling)
- [Troubleshooting and FAQ](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/): Locked out, wrong blocks, firewall false positives, the guard, API errors, 2FA and the common questions.
  - [Troubleshooting](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#troubleshooting)
  - [Locked yourself out](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#locked-yourself-out)
  - [Locked out by 2FA](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#locked-out-by-2fa)
  - [Nothing gets blocked](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#nothing-gets-blocked)
  - [Real visitors get blocked](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#real-visitors-get-blocked)
  - [The firewall blocks a legitimate request](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#the-firewall-blocks-a-legitimate-request)
  - [Extended Protection shows "not running"](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#extended-protection-shows-not-running)
  - [Something stopped working after a lockdown switch](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#something-stopped-working-after-a-lockdown-switch)
  - [The user sitemap is gone](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#the-user-sitemap-is-gone)
  - [Consent banner requests are blocked](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#consent-banner-requests-are-blocked)
  - [Connection errors in the Community Network](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#connection-errors-in-the-community-network)
  - [The daily checks run out](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#the-daily-checks-run-out)
  - [The Pro add-on stays inactive](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#the-pro-add-on-stays-inactive)
  - [Frequently asked questions](https://reportedip.com/docs/integrations/wordpress-hive/troubleshooting/#frequently-asked-questions)
- [Changelog](https://reportedip.com/docs/integrations/wordpress-hive/changelog/): What each release changed, from 1.0 to the free plugin and the Pro add-on in 3.0.0.
  - [Release highlights](https://reportedip.com/docs/integrations/wordpress-hive/changelog/#changelog-highlights)
- [Honeypot Server](https://reportedip.com/docs/integrations/honeypot-server/): Deploy a honeypot that emulates a CMS, analyses what hits it, and reports automatically.
  - [What is a Honeypot?](https://reportedip.com/docs/integrations/honeypot-server/#what-is-a-honeypot)
  - [CMS Emulation](https://reportedip.com/docs/integrations/honeypot-server/#cms-emulation)
  - [Threat Analyzers](https://reportedip.com/docs/integrations/honeypot-server/#threat-analyzers)
  - [Automatic Reporting](https://reportedip.com/docs/integrations/honeypot-server/#automatic-reporting)
  - [Impact on Confidence Score](https://reportedip.com/docs/integrations/honeypot-server/#impact-on-confidence-score)
  - [Requirements](https://reportedip.com/docs/integrations/honeypot-server/#requirements)
  - [Installation](https://reportedip.com/docs/integrations/honeypot-server/#installation)
  - [Docker (Recommended)](https://reportedip.com/docs/integrations/honeypot-server/#docker-recommended)
  - [Manual Setup](https://reportedip.com/docs/integrations/honeypot-server/#manual-setup)
  - [Configuration](https://reportedip.com/docs/integrations/honeypot-server/#configuration)
  - [Queue Processing](https://reportedip.com/docs/integrations/honeypot-server/#queue-processing)
  - [Webhooks](https://reportedip.com/docs/integrations/honeypot-server/#webhooks)
  - [Setup](https://reportedip.com/docs/integrations/honeypot-server/#setup)
  - [Request Headers](https://reportedip.com/docs/integrations/honeypot-server/#request-headers)
  - [Payload](https://reportedip.com/docs/integrations/honeypot-server/#payload)
  - [Signature Verification](https://reportedip.com/docs/integrations/honeypot-server/#signature-verification)
  - [Routing to any API](https://reportedip.com/docs/integrations/honeypot-server/#routing-to-any-api)
  - [Placeholders](https://reportedip.com/docs/integrations/honeypot-server/#placeholders)
  - [AbuseIPDB integration](https://reportedip.com/docs/integrations/honeypot-server/#abuseipdb-integration)
  - [Presets](https://reportedip.com/docs/integrations/honeypot-server/#presets)
  - [GitHub Repository](https://reportedip.com/docs/integrations/honeypot-server/#github-repository)
- [fail2ban](https://reportedip.com/docs/integrations/fail2ban/): A custom action that reports every ban on an existing fail2ban install.
  - [How fail2ban works (in 30 seconds)](https://reportedip.com/docs/integrations/fail2ban/#how-fail2ban-works-in-30-seconds)
  - [1. Create the report action](https://reportedip.com/docs/integrations/fail2ban/#1-create-the-report-action)
  - [2. Enable it on a jail](https://reportedip.com/docs/integrations/fail2ban/#2-enable-it-on-a-jail)
  - [3. Apply and verify](https://reportedip.com/docs/integrations/fail2ban/#3-apply-and-verify)
  - [Reading the fail2ban log](https://reportedip.com/docs/integrations/fail2ban/#reading-the-fail2ban-log)
  - [Choosing threat categories per jail](https://reportedip.com/docs/integrations/fail2ban/#choosing-threat-categories-per-jail)
  - [Reporting more than one jail](https://reportedip.com/docs/integrations/fail2ban/#reporting-more-than-one-jail)
  - [Good practice & safety](https://reportedip.com/docs/integrations/fail2ban/#good-practice-and-safety)
  - [Troubleshooting](https://reportedip.com/docs/integrations/fail2ban/#troubleshooting)

## Linux Agent

- [Linux Agent](https://reportedip.com/docs/agent/): ReportedIP Agent for Linux: installation and rollout examples, every configuration key, detection rules, kernel blocking, operations, licences, and fail2ban.
- [Overview](https://reportedip.com/docs/agent/overview/): What the agent does, what a host needs, the quick install, the first hour, and the release notes.
  - [What it does](https://reportedip.com/docs/agent/overview/#what-it-does)
  - [Where to go next](https://reportedip.com/docs/agent/overview/#where-to-go-next)
  - [Requirements](https://reportedip.com/docs/agent/overview/#requirements)
  - [ipset or nftables, and what auto decides](https://reportedip.com/docs/agent/overview/#ipset-or-nftables-and-what-auto-decides)
  - [Check the host first](https://reportedip.com/docs/agent/overview/#check-the-host-first)
  - [Reading the verdict](https://reportedip.com/docs/agent/overview/#reading-the-verdict)
  - [Quick install](https://reportedip.com/docs/agent/overview/#quick-install)
  - [The first hour, in order](https://reportedip.com/docs/agent/overview/#the-first-hour-in-order)
  - [Upgrades and release notes](https://reportedip.com/docs/agent/overview/#changelog)
  - [Recent releases](https://reportedip.com/docs/agent/overview/#recent-releases)
  - [Resource use](https://reportedip.com/docs/agent/overview/#resource-use)
  - [What the agent is not](https://reportedip.com/docs/agent/overview/#what-the-agent-is-not)
- [Installation](https://reportedip.com/docs/agent/install/): The terms of use, the checks, every question and what an Enter answers, the variables and flags of a rollout, an install by hand.
  - [Install](https://reportedip.com/docs/agent/install/#install)
  - [What install checks before it writes](https://reportedip.com/docs/agent/install/#what-install-checks-before-it-writes)
  - [What it asks, and what an Enter answers](https://reportedip.com/docs/agent/install/#what-it-asks-and-what-an-enter-answers)
  - [What the installer really does](https://reportedip.com/docs/agent/install/#what-the-installer-really-does)
  - [The environment variables of install.sh](https://reportedip.com/docs/agent/install/#the-environment-variables-of-install-sh)
  - [Installing by hand](https://reportedip.com/docs/agent/install/#installing-by-hand)
  - [A host without systemd](https://reportedip.com/docs/agent/install/#a-host-without-systemd)
- [Installation examples](https://reportedip.com/docs/agent/examples/): A rollout with Ansible or cloud-init, a golden image, control panels, a mail or database host, LXC containers and cloud firewalls.
  - [Unattended, on many hosts](https://reportedip.com/docs/agent/examples/#unattended-on-many-hosts)
  - [Ansible](https://reportedip.com/docs/agent/examples/#ansible)
  - [cloud-init](https://reportedip.com/docs/agent/examples/#cloud-init)
  - [A golden image](https://reportedip.com/docs/agent/examples/#a-golden-image)
  - [Control panels](https://reportedip.com/docs/agent/examples/#control-panels)
  - [ISPConfig](https://reportedip.com/docs/agent/examples/#ispconfig)
  - [Plesk](https://reportedip.com/docs/agent/examples/#plesk)
  - [cPanel](https://reportedip.com/docs/agent/examples/#cpanel)
  - [DirectAdmin](https://reportedip.com/docs/agent/examples/#directadmin)
  - [A mail server, a database server](https://reportedip.com/docs/agent/examples/#a-mail-server-a-database-server)
  - [Mail](https://reportedip.com/docs/agent/examples/#mail)
  - [Database](https://reportedip.com/docs/agent/examples/#database)
  - [LXC containers and cloud firewalls](https://reportedip.com/docs/agent/examples/#lxc-containers-and-cloud-firewalls)
  - [Proxmox LXC](https://reportedip.com/docs/agent/examples/#proxmox-lxc)
  - [A VPS behind a cloud firewall](https://reportedip.com/docs/agent/examples/#a-vps-behind-a-cloud-firewall)
- [Configuration](https://reportedip.com/docs/agent/configuration/): Every key of config.yaml with its default and range, the thresholds, the ban ladder, the mail, and when a change takes effect.
  - [Configuration](https://reportedip.com/docs/agent/configuration/#configuration)
  - [Every key of config.yaml](https://reportedip.com/docs/agent/configuration/#every-key-of-config-yaml)
  - [Detection limits, per source](https://reportedip.com/docs/agent/configuration/#detection-limits-per-source)
  - [Ban limits](https://reportedip.com/docs/agent/configuration/#ban-limits)
  - [Operating limits](https://reportedip.com/docs/agent/configuration/#operating-limits)
  - [Limits that do not come from the file](https://reportedip.com/docs/agent/configuration/#limits-that-do-not-come-from-the-file)
  - [Mail when something is wrong](https://reportedip.com/docs/agent/configuration/#mail-when-something-is-wrong)
  - [When a change takes effect](https://reportedip.com/docs/agent/configuration/#when-a-change-takes-effect)
- [Detection and rules](https://reportedip.com/docs/agent/detection/): The fourteen source types, adding a log the installer missed, what leaves the machine, and the rule files, including your own.
  - [What the agent finds in your logs](https://reportedip.com/docs/agent/detection/#what-the-agent-finds-in-your-logs)
  - [The fourteen source types](https://reportedip.com/docs/agent/detection/#the-fourteen-source-types)
  - [Port scans, from the kernel log](https://reportedip.com/docs/agent/detection/#port-scans-from-the-kernel-log)
  - [Adding a source the installer did not find](https://reportedip.com/docs/agent/detection/#adding-a-source-the-installer-did-not-find)
  - [What leaves the machine](https://reportedip.com/docs/agent/detection/#what-leaves-the-machine)
  - [Rules](https://reportedip.com/docs/agent/detection/#rules)
  - [The file format](https://reportedip.com/docs/agent/detection/#the-file-format)
  - [Why the address is not a capture group](https://reportedip.com/docs/agent/detection/#why-the-address-is-not-a-capture-group)
  - [The shipped rule web-query-crawl](https://reportedip.com/docs/agent/detection/#the-shipped-rule-web-query-crawl)
  - [The shipped rule web-listing-loop](https://reportedip.com/docs/agent/detection/#the-shipped-rule-web-listing-loop)
  - [What protects you from your own rule](https://reportedip.com/docs/agent/detection/#what-protects-you-from-your-own-rule)
  - [The rules commands](https://reportedip.com/docs/agent/detection/#the-rules-commands)
  - [Writing a rule of your own](https://reportedip.com/docs/agent/detection/#writing-a-rule-of-your-own)
  - [Lines a source must never see](https://reportedip.com/docs/agent/detection/#lines-a-source-must-never-see)
- [Blocking](https://reportedip.com/docs/agent/blocking/): The two kinds of set, how a local ban begins and ends, the escalation, the chain in the kernel, and lifting a ban.
  - [The community feed](https://reportedip.com/docs/agent/blocking/#the-community-feed)
  - [The group list](https://reportedip.com/docs/agent/blocking/#the-group-list)
  - [Blocking](https://reportedip.com/docs/agent/blocking/#blocking)
  - [Two kinds of set, two lifetimes](https://reportedip.com/docs/agent/blocking/#two-kinds-of-set-two-lifetimes)
  - [How a local ban begins and how it ends](https://reportedip.com/docs/agent/blocking/#how-a-local-ban-begins-and-how-it-ends)
  - [Escalation, with real numbers](https://reportedip.com/docs/agent/blocking/#escalation-with-real-numbers)
  - [A ban time per rule](https://reportedip.com/docs/agent/blocking/#a-ban-time-per-rule)
  - [Watching a rule without banning](https://reportedip.com/docs/agent/blocking/#watching-a-rule-without-banning)
  - [The chain in the kernel](https://reportedip.com/docs/agent/blocking/#the-chain-in-the-kernel)
  - [mode and ban.enabled are two switches](https://reportedip.com/docs/agent/blocking/#mode-and-ban-enabled-are-two-switches)
  - [Switching from log to drop](https://reportedip.com/docs/agent/blocking/#switching-from-log-to-drop)
  - [Looking at what is really in the kernel](https://reportedip.com/docs/agent/blocking/#looking-at-what-is-really-in-the-kernel)
  - [Handing the bans to a proxy or a script](https://reportedip.com/docs/agent/blocking/#handing-the-bans-to-a-proxy-or-a-script)
  - [Lifting one ban, and removing everything](https://reportedip.com/docs/agent/blocking/#lifting-one-ban-and-removing-everything)
- [Running it](https://reportedip.com/docs/agent/operations/): Commands and exit codes, the units, monitoring, test in place of fail2ban-regex, and the troubleshooting table.
  - [Commands](https://reportedip.com/docs/agent/operations/#commands)
  - [test, instead of fail2ban-regex](https://reportedip.com/docs/agent/operations/#test-instead-of-fail2ban-regex)
  - [Running it](https://reportedip.com/docs/agent/operations/#running-it)
  - [Exit codes](https://reportedip.com/docs/agent/operations/#exit-codes)
  - [The reputation of this host's own address](https://reportedip.com/docs/agent/operations/#the-reputation-of-this-hosts-own-address)
  - [Bot floods: what the agent does and does not do](https://reportedip.com/docs/agent/operations/#bot-floods-what-the-agent-does-and-does-not-do)
  - [The volume alarm](https://reportedip.com/docs/agent/operations/#the-volume-alarm)
  - [The rule web-query-crawl](https://reportedip.com/docs/agent/operations/#the-rule-web-query-crawl)
  - [In the web server](https://reportedip.com/docs/agent/operations/#in-the-web-server)
  - [Troubleshooting](https://reportedip.com/docs/agent/operations/#troubleshooting)
- [Monitoring](https://reportedip.com/docs/agent/monitoring/): status --json, the sudo rule, a Zabbix template, and checks for Nagios, Icinga, Checkmk and Prometheus.
  - [What a check should cover](https://reportedip.com/docs/agent/monitoring/#what-a-check-should-cover)
  - [status --json](https://reportedip.com/docs/agent/monitoring/#status-json)
  - [Permissions](https://reportedip.com/docs/agent/monitoring/#permissions)
  - [Zabbix](https://reportedip.com/docs/agent/monitoring/#zabbix)
  - [Install the check](https://reportedip.com/docs/agent/monitoring/#install-the-check)
  - [Import the template](https://reportedip.com/docs/agent/monitoring/#import-the-template)
  - [What the template watches](https://reportedip.com/docs/agent/monitoring/#what-the-template-watches)
  - [When the items stay empty](https://reportedip.com/docs/agent/monitoring/#when-the-items-stay-empty)
  - [Nagios and Icinga](https://reportedip.com/docs/agent/monitoring/#nagios-and-icinga)
  - [Checkmk](https://reportedip.com/docs/agent/monitoring/#checkmk)
  - [Prometheus](https://reportedip.com/docs/agent/monitoring/#prometheus)
  - [Without a monitoring system](https://reportedip.com/docs/agent/monitoring/#without-a-monitoring-system)
- [Server licences](https://reportedip.com/docs/agent/licences/): A licence per server, how it is assigned and released, the report budget, and what keeps running without one.
  - [Server licences](https://reportedip.com/docs/agent/licences/#server-licences)
  - [Groups and webhooks](https://reportedip.com/docs/agent/licences/#groups-and-webhooks)
  - [The report budget of one server](https://reportedip.com/docs/agent/licences/#the-report-budget-of-one-server)
  - [What happens without a licence](https://reportedip.com/docs/agent/licences/#what-happens-without-a-licence)
- [Replacing fail2ban](https://reportedip.com/docs/agent/fail2ban/): First check what owns the firewall objects, run both for a while, switch fail2ban off for good, and the way back.
  - [Replacing fail2ban](https://reportedip.com/docs/agent/fail2ban/#replacing-fail2ban)
  - [First check whether something already owns these names](https://reportedip.com/docs/agent/fail2ban/#first-check-whether-something-already-owns-these-names)
  - [Running both for a while](https://reportedip.com/docs/agent/fail2ban/#running-both-for-a-while)
  - [Switching fail2ban off for good](https://reportedip.com/docs/agent/fail2ban/#switching-fail2ban-off-for-good)

## Blocking

- [Blocking](https://reportedip.com/docs/blocking/): Block malicious IP addresses before they reach an application: downloadable blacklist feeds, kernel-level ipset and nftables blocking, and a DNSBL zone for mail servers.
- [Blacklist](https://reportedip.com/docs/blocking/blacklist/): Download the community blacklist as TXT, JSON or CSV, via API or from GitHub.
  - [How the blacklist is generated](https://reportedip.com/docs/blocking/blacklist/#how-the-blacklist-is-generated)
  - [GitHub Repository](https://reportedip.com/docs/blocking/blacklist/#github-repository)
  - [Repository Structure](https://reportedip.com/docs/blocking/blacklist/#repository-structure)
  - [File Formats](https://reportedip.com/docs/blocking/blacklist/#file-formats)
  - [TXT Format](https://reportedip.com/docs/blocking/blacklist/#txt-format)
  - [JSON Format](https://reportedip.com/docs/blocking/blacklist/#json-format)
  - [CSV Format](https://reportedip.com/docs/blocking/blacklist/#csv-format)
  - [Firewall Integration](https://reportedip.com/docs/blocking/blacklist/#firewall-integration)
  - [Nginx](https://reportedip.com/docs/blocking/blacklist/#nginx)
  - [Apache (.htaccess)](https://reportedip.com/docs/blocking/blacklist/#apache-htaccess)
  - [iptables (via ipset)](https://reportedip.com/docs/blocking/blacklist/#iptables-via-ipset)
  - [API Access](https://reportedip.com/docs/blocking/blacklist/#api-access)
  - [Service-specific blacklists](https://reportedip.com/docs/blocking/blacklist/#service-specific-blacklists)
  - [Real-time vs. GitHub](https://reportedip.com/docs/blocking/blacklist/#real-time-vs-github)
- [Network-Level Blocking](https://reportedip.com/docs/blocking/firewall/): Kernel-level blocking with ipset or nftables, port-scoped rules, IPv6 and cloud firewalls.
  - [How it works](https://reportedip.com/docs/blocking/firewall/#how-it-works)
  - [Service lists and their categories](https://reportedip.com/docs/blocking/firewall/#service-lists-and-their-categories)
  - [The request](https://reportedip.com/docs/blocking/firewall/#the-request)
  - [How large the lists get](https://reportedip.com/docs/blocking/firewall/#how-large-the-lists-get)
  - [Why confidence 90 keeps false positives low](https://reportedip.com/docs/blocking/firewall/#why-confidence-90-keeps-false-positives-low)
  - [Operational rules](https://reportedip.com/docs/blocking/firewall/#operational-rules)
  - [Sync script (ipset)](https://reportedip.com/docs/blocking/firewall/#sync-script-ipset)
  - [iptables rules](https://reportedip.com/docs/blocking/firewall/#iptables-rules)
  - [Native nftables](https://reportedip.com/docs/blocking/firewall/#native-nftables)
  - [One-time setup](https://reportedip.com/docs/blocking/firewall/#one-time-setup)
  - [Update step](https://reportedip.com/docs/blocking/firewall/#update-step)
  - [IPv6](https://reportedip.com/docs/blocking/firewall/#ipv6)
  - [Cloud and edge firewalls](https://reportedip.com/docs/blocking/firewall/#cloud-and-edge-firewalls)
  - [Cloudflare](https://reportedip.com/docs/blocking/firewall/#cloudflare)
  - [AWS](https://reportedip.com/docs/blocking/firewall/#aws)
  - [Other providers](https://reportedip.com/docs/blocking/firewall/#other-providers)
  - [Verify it works](https://reportedip.com/docs/blocking/firewall/#verify-it-works)
  - [Before you switch to DROP](https://reportedip.com/docs/blocking/firewall/#before-you-switch-to-drop)
  - [Troubleshooting](https://reportedip.com/docs/blocking/firewall/#troubleshooting)
  - [Report back](https://reportedip.com/docs/blocking/firewall/#report-back)
  - [Quick reference](https://reportedip.com/docs/blocking/firewall/#quick-reference)
- [DNSBL / RBL Zone](https://reportedip.com/docs/blocking/dnsbl/): Query the blacklist per message from Postfix, Rspamd or any DNSBL-aware filter.
  - [Your zone string](https://reportedip.com/docs/blocking/dnsbl/#your-zone-string)
  - [One key or many](https://reportedip.com/docs/blocking/dnsbl/#one-key-or-many)
  - [Return codes](https://reportedip.com/docs/blocking/dnsbl/#return-codes)
  - [Add it to your mail server](https://reportedip.com/docs/blocking/dnsbl/#add-it-to-your-mail-server)
  - [Postfix](https://reportedip.com/docs/blocking/dnsbl/#postfix)
  - [Rspamd](https://reportedip.com/docs/blocking/dnsbl/#rspamd)
  - [Category sub-zones](https://reportedip.com/docs/blocking/dnsbl/#category-sub-zones)
  - [Limits and caching](https://reportedip.com/docs/blocking/dnsbl/#limits-and-caching)
  - [Standards & compatibility](https://reportedip.com/docs/blocking/dnsbl/#standards-and-compatibility)
- [Groups](https://reportedip.com/docs/blocking/groups/): One account, several keys, one shared blocklist, a shared whitelist and a webhook per ban.
  - [What a group is](https://reportedip.com/docs/blocking/groups/#what-a-group-is)
  - [Limits per plan](https://reportedip.com/docs/blocking/groups/#limits-per-plan)
  - [The whitelist of the group](https://reportedip.com/docs/blocking/groups/#the-whitelist-of-the-group)
  - [Webhooks](https://reportedip.com/docs/blocking/groups/#webhooks)
  - [Applied by the Linux Agent](https://reportedip.com/docs/blocking/groups/#applied-by-the-linux-agent)
  - [Applied by Hive](https://reportedip.com/docs/blocking/groups/#applied-by-hive)
  - [Error codes](https://reportedip.com/docs/blocking/groups/#error-codes)

## Tools

- [Tools](https://reportedip.com/docs/tools/): Reference for the fifteen free ReportedIP tools: the public REST API behind them, the verification methods they use, and how their scores are calculated.
- [Free Tools](https://reportedip.com/docs/tools/overview/): All fifteen tools in one table: input, output, daily limit and what happens to the data.
  - [Which tool answers which question](https://reportedip.com/docs/tools/overview/#which-tool-answers-which-question)
  - [The daily limit](https://reportedip.com/docs/tools/overview/#the-daily-limit)
  - [What is stored](https://reportedip.com/docs/tools/overview/#what-is-stored)
  - [Where the community data comes from](https://reportedip.com/docs/tools/overview/#where-the-community-data-comes-from)
  - [Next](https://reportedip.com/docs/tools/overview/#next)
- [Tools API](https://reportedip.com/docs/tools/api/): Seventeen public endpoints, their parameters, their answers and the limit they share.
  - [Base URL and request format](https://reportedip.com/docs/tools/api/#base-url-and-request-format)
  - [Response shape](https://reportedip.com/docs/tools/api/#response-shape)
  - [DNS lookups](https://reportedip.com/docs/tools/api/#dns-lookups)
  - [POST /check](https://reportedip.com/docs/tools/api/#post-check)
  - [POST /check/all](https://reportedip.com/docs/tools/api/#post-check-all)
  - [Address checks](https://reportedip.com/docs/tools/api/#address-checks)
  - [POST /dnsbl/check](https://reportedip.com/docs/tools/api/#post-dnsbl-check)
  - [POST /reverse-dns/check](https://reportedip.com/docs/tools/api/#post-reverse-dns-check)
  - [POST /bot/verify](https://reportedip.com/docs/tools/api/#post-bot-verify)
  - [POST /abuse/lookup](https://reportedip.com/docs/tools/api/#post-abuse-lookup)
  - [POST /asn/lookup](https://reportedip.com/docs/tools/api/#post-asn-lookup)
  - [Email security](https://reportedip.com/docs/tools/api/#email-security)
  - [POST /security/validate](https://reportedip.com/docs/tools/api/#post-security-validate)
  - [The seven single checks](https://reportedip.com/docs/tools/api/#the-seven-single-checks)
  - [HTTP and request inspection](https://reportedip.com/docs/tools/api/#http-and-request-inspection)
  - [POST /headers/check](https://reportedip.com/docs/tools/api/#post-headers-check)
  - [GET /whoami](https://reportedip.com/docs/tools/api/#get-whoami)
  - [Limits in practice](https://reportedip.com/docs/tools/api/#limits-in-practice)
- [Verification Methods](https://reportedip.com/docs/tools/verification/): Forward confirmation, longest-prefix RDAP, nibble-format blacklist queries and two ways to verify a crawler.
  - [Forward-confirmed reverse DNS](https://reportedip.com/docs/tools/verification/#forward-confirmed-reverse-dns)
  - [Compare the whole address set, not the first record](https://reportedip.com/docs/tools/verification/#compare-the-whole-address-set-not-the-first-record)
  - [Compare addresses in binary form](https://reportedip.com/docs/tools/verification/#compare-addresses-in-binary-form)
  - [What a failure means](https://reportedip.com/docs/tools/verification/#what-a-failure-means)
  - [Verifying a crawler](https://reportedip.com/docs/tools/verification/#verifying-a-crawler)
  - [Finding the responsible registry over RDAP](https://reportedip.com/docs/tools/verification/#finding-the-responsible-registry-over-rdap)
  - [The bootstrap file, not a redirector](https://reportedip.com/docs/tools/verification/#the-bootstrap-file-not-a-redirector)
  - [Longest prefix, not first match](https://reportedip.com/docs/tools/verification/#longest-prefix-not-first-match)
  - [The contact with the abuse role](https://reportedip.com/docs/tools/verification/#the-contact-with-the-abuse-role)
  - [Blacklist queries](https://reportedip.com/docs/tools/verification/#blacklist-queries)
  - [The query format](https://reportedip.com/docs/tools/verification/#the-query-format)
  - [Not every list answers for IPv6](https://reportedip.com/docs/tools/verification/#not-every-list-answers-for-ipv6)
  - [Reading the return code](https://reportedip.com/docs/tools/verification/#reading-the-return-code)
  - [Fetching a page safely](https://reportedip.com/docs/tools/verification/#fetching-a-page-safely)
- [Tool Scoring](https://reportedip.com/docs/tools/scoring/): Every weight in one place, and the reasoning behind each one.
  - [Email security](https://reportedip.com/docs/tools/scoring/#email-security)
  - [HTTP security headers](https://reportedip.com/docs/tools/scoring/#http-security-headers)
  - [How the number is produced](https://reportedip.com/docs/tools/scoring/#how-the-number-is-produced)
  - [Three findings that are not a simple present-or-absent](https://reportedip.com/docs/tools/scoring/#three-findings-that-are-not-a-simple-present-or-absent)
  - [Network ranking](https://reportedip.com/docs/tools/scoring/#network-ranking)
  - [How the percentile is computed](https://reportedip.com/docs/tools/scoring/#how-the-percentile-is-computed)
  - [What a high rank does not mean](https://reportedip.com/docs/tools/scoring/#what-a-high-rank-does-not-mean)

## Support

- [Support](https://reportedip.com/docs/support/): Answers to common ReportedIP questions and the process for requesting removal of an IP address from the database.
- [FAQ](https://reportedip.com/docs/support/faq/): The questions that come up most often, grouped by topic.
  - [General](https://reportedip.com/docs/support/faq/#general)
  - [Account](https://reportedip.com/docs/support/faq/#account)
  - [API](https://reportedip.com/docs/support/faq/#api)
  - [WordPress Plugin](https://reportedip.com/docs/support/faq/#wordpress-plugin)
  - [Blacklists](https://reportedip.com/docs/support/faq/#blacklists)
  - [IP Delisting](https://reportedip.com/docs/support/faq/#ip-delisting)
  - [Pricing & Plans](https://reportedip.com/docs/support/faq/#pricing-and-plans)
  - [Privacy & GDPR](https://reportedip.com/docs/support/faq/#privacy-and-gdpr)
  - [Honeypot Server](https://reportedip.com/docs/support/faq/#honeypot-server)
  - [ReportedIP Agent](https://reportedip.com/docs/support/faq/#reportedip-agent)
  - [Free Tools](https://reportedip.com/docs/support/faq/#free-tools)
- [IP Delisting](https://reportedip.com/docs/support/ip-delisting/): How listings expire on their own, and how to request removal if one is wrong.
  - [Why IPs Get Listed](https://reportedip.com/docs/support/ip-delisting/#why-ips-get-listed)
  - [Automatic Removal](https://reportedip.com/docs/support/ip-delisting/#automatic-removal)
  - [How to Request Delisting](https://reportedip.com/docs/support/ip-delisting/#how-to-request-delisting)
  - [1. Check Your IP](https://reportedip.com/docs/support/ip-delisting/#1-check-your-ip)
  - [2. Fix the Cause](https://reportedip.com/docs/support/ip-delisting/#2-fix-the-cause)
  - [3. Submit the Form](https://reportedip.com/docs/support/ip-delisting/#3-submit-the-form)
  - [Request Delisting](https://reportedip.com/docs/support/ip-delisting/#request-delisting)
  - [Common Causes of False Listings](https://reportedip.com/docs/support/ip-delisting/#common-causes-of-false-listings)
  - [Review Process](https://reportedip.com/docs/support/ip-delisting/#review-process)
  - [Records and Privacy](https://reportedip.com/docs/support/ip-delisting/#records-and-privacy)
  - [Prevention](https://reportedip.com/docs/support/ip-delisting/#prevention)
  - [Why Delisting Requests Are Denied](https://reportedip.com/docs/support/ip-delisting/#why-delisting-requests-are-denied)
  - [Delisting FAQ](https://reportedip.com/docs/support/ip-delisting/#delisting-faq)
  - [How long does delisting take?](https://reportedip.com/docs/support/ip-delisting/#how-long-does-delisting-take)
  - [Does delisting cost anything?](https://reportedip.com/docs/support/ip-delisting/#does-delisting-cost-anything)
  - [Will my IP be relisted after delisting?](https://reportedip.com/docs/support/ip-delisting/#will-my-ip-be-relisted-after-delisting)
  - [Where can I see the status of my request?](https://reportedip.com/docs/support/ip-delisting/#where-can-i-see-the-status-of-my-request)
  - [Can I monitor my IP so I notice a listing early?](https://reportedip.com/docs/support/ip-delisting/#can-i-monitor-my-ip-so-i-notice-a-listing-early)