REST Threat Intelligence · Free tier
Public API
The reputation engine behind everything. Query IPs, submit reports, pull the blacklist and run bulk operations from any language, your SIEM, your firewall or your hosting panel.
Live DNSBL Add-on · from PRO
DNS / RBL Zone
The same blacklist served over DNS as a private RBL zone. Add one line to Postfix or Rspamd and connecting attackers are rejected in real time, the way mail servers already expect.
Why this exists
A downloaded blocklist is out of date the moment you import it, and importing it on every server is a cron job you have to maintain. A DNS zone has neither problem: your mail server asks at the moment of the connection and gets the current answer.
Live DNSBL Add-on · from PRO
What you get
- Private zone string with 127.0.0.2 and 127.0.0.3 return codes
- Works with Postfix, Exim, Rspamd, SpamAssassin and any DNSBL-capable software. Every answer is a live query; zone transfers and RPZ feeds are not offered
- IPv4 and IPv6 in one directive, RFC 5782 compliant
- Per-category sub-zones for spam, brute-force and malware
- 100,000 queries a day per token, resolver caching keeps it fast
- Refreshed from the community blacklist every few minutes
Who it's for
Mail and hosting operators filtering SMTP traffic at the connection layer.
Pricing
7.90 € a month or 79 € a year (incl. VAT), bookable from the PRO plan
Postfix, main.cf
conf
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_rbl_client <your-token>.bl.reportedip.de=127.0.0.[2..3],
...One directive covers IPv4 and IPv6, Postfix builds the reversed query for either family itself. RFC 5782 test point: looking up 127.0.0.2 always answers, so you can verify the setup without waiting for a real attacker.
Frequently asked questions
How do I block bad addresses at my mail server?
Add the zone string to Postfix or Rspamd as shown above. Connecting attackers are rejected before the message body is ever transferred.
Does this replace Spamhaus?
No, it sits next to it. Spamhaus is strong on mail abuse, this zone is strong on addresses caught attacking websites, which often precede the spam run.
What is in the zone?
The same high-confidence subset as the blacklist feed: 75 % confidence or higher, with a 48-hour false-positive cool-down before anything is listed.
What if a legitimate address gets listed?
Delisting is free and does not require an account. Submit the address and it is checked, with the scoring history attached to the decision.
The other products
Same dataset, different shape.
Downloadable Feed · Free
Blacklist Feed
Community-driven blacklist, automatically scored from real-time reports. Plain text, JSON and CSV, ready for iptables, nftables, nginx or any blocklist consumer.
WordPress Plugin · Free
ReportedIP Hive
Real-time WordPress security with 16 detection sensors, a Web Application Firewall, four 2FA methods and an opt-in community threat network. Free and open source forever.
Linux Server Agent · for hosters and admins
ReportedIP Agent
One static binary that puts thousands of known attackers into your kernel firewall before they reach you, and watches every log your server already writes for the ones nobody has reported yet.
DNS Diagnostics · Free
DNS Checker
Domain health diagnostics from 76 resolvers across 6 continents. Validate SPF, DKIM, DMARC and DNSSEC, run DNSBL lookups and track propagation during migrations.
PTR Check · Free
Reverse DNS Lookup
Resolve the PTR record of an IPv4 or IPv6 address and check whether it resolves back. A PTR record nobody confirms is the most common reason a mail server is refused at the door.
DNS / RBL Zone
7.90 € a month or 79 € a year (incl. VAT), bookable from the PRO plan
Security Focused
GDPR Compliant
Made in Germany