Delisting & Dispute Workflow

A public, written process for owners, ISPs and analysts who believe an IP listed by ipinsights.io is incorrect. Use this page to request review or removal of a listing.

Stated Review Times

Acknowledgement

Within 3 business days of submission. You will receive a tracking reference and the name of the analyst reviewing your case.

Decision

Within 10 business days. Verified delistings propagate to the API and downloadable blocklists at the next scheduled refresh (every four hours).

Emergency

Operational impact on a production service? Mark the message URGENT and we aim to acknowledge within 1 business day.

How the Process Works

  1. Submit — Use the form below. The more context you provide (sensor observation timestamp, infrastructure ownership evidence, abuse contact, remediation steps already taken), the faster the review.
  2. Acknowledge — You receive a tracking reference and the reviewer’s name within 3 business days.
  3. Investigate — Sensor records, feed-source provenance and any third-party listings shown on the IP report are re-validated. We may ask for one round of clarification.
  4. Decide — One of three outcomes: delisted (listing removed and IP whitelisted against re-listing for 30 days), upheld (with the supporting observation cited), or partial (e.g. honeypot listing removed but a third-party feed listing remains and must be disputed with that feed).
  5. Propagate — Approved delistings flow into the public API, blocklist downloads and the per-IP report at the next refresh cycle. Decisions are also reflected in the per-IP provenance view so the audit trail remains visible.

Scope & Limitations

We can only directly action listings owned by ipinsights.io — for example, honeypot observations or derived classifications. Listings from third-party feeds (Spamhaus, AbuseIPDB, DShield and others) are mirrored from the upstream source; if you believe one of those is incorrect you must also dispute it with the originating feed. The per-IP provenance view on the report page identifies the originating feed for each listing.

Published data-quality numbers — including the platform false-positive rate and mean time from first observation to listing — are available on the methodology page.

Submit a Delisting / Dispute Request

Maximum 5,000 characters. Do not include credentials or sensitive personal data.