Downloadable Feed · Free
Blacklist Feed
Community-driven blacklist, automatically scored from real-time reports. Plain text, JSON and CSV, ready for fail2ban, iptables, nginx or any blocklist consumer.
REST Threat Intelligence · Free tier
Public API
A REST API over the community reputation database. Check a single address, report an attacker, or pull the whole blacklist, from any stack in any language.
Why this exists
Your server already knows who is attacking it. What it does not know is whether that address attacked two hundred other sites this morning. One HTTPS call answers that, before you decide whether to let the request through.
REST Threat Intelligence · Free tier
What you get
- 1,000 checks and 50 reports a day on the free tier, no card
- 30 threat categories with decay-weighted confidence scoring
- Bulk check and report plus analytics from Professional up
- Your API key travels in one header, the answer comes back as JSON, rate limits are documented
- Ready to use in fail2ban actions, SIEM enrichment and custom firewalls
- Every response says what it cost you against the daily quota
Who it's for
Developers and ops teams putting reputation checks into tooling they already run.
Pricing
Free tier · 25,000 checks a day on PRO, 100,000 on Business
Check one address
curl
curl -H "X-Key: YOUR_API_KEY" \
"https://reportedip.com/wp-json/reportedip/v2/check?ip=1.2.3.4&verbose=true"The answer carries a confidence score from 0 to 100, the threat categories the address was reported under, and how many independent reporters saw it.
Frequently asked questions
Do I need an account?
Yes, a free one. The account gives you the access key; the key is what the quota is counted against. No card is involved at the free tier.
What happens when I hit the daily limit?
The API answers with HTTP 429 and tells you when the quota resets. Nothing is billed automatically and no request is silently dropped.
What runs on your servers?
The API, the blacklist feed and the DNS/RBL zone are hosted by us on EU infrastructure. The Hive plugin and the Honeypot Server run on yours.
How is the confidence score calculated?
Each report is weighted by recency, reporter diversity, threat severity and honeypot trust, then decayed over time. The full formula is documented.
The other products
Same dataset, different shape.
Live DNSBL Add-on · from PRO
DNS / RBL Zone
Ask a DNS question instead of downloading a list: your mail server looks the address up live, the same way it already queries Spamhaus. No imports, always fresh.
WordPress Plugin · Free
ReportedIP Hive
Real-time WordPress security with 18 detection sensors, a Web Application Firewall, four 2FA methods and an opt-in community threat network. Free and open source forever.
DNS Diagnostics · Free
DNS Checker
Domain health diagnostics from 76 resolvers across 6 continents. Validate SPF, DKIM, DMARC and DNSSEC, run DNSBL lookups and track propagation during migrations.
PTR Check · Free
Reverse DNS Lookup
Resolve the PTR record of an IPv4 or IPv6 address and check whether it resolves back. A PTR record nobody confirms is the most common reason a mail server is refused at the door.
Reputation Lookup, Free
DNSBL Blacklist Check
Look up an address or domain across curated blacklists at once and see which one lists it, so you know where to ask for removal.
Public API
Free tier · 25,000 checks a day on PRO, 100,000 on Business
Security Focused
GDPR Compliant
Made in Germany