How reliable is the list? False positives are rare but possible – especially with shared or newly assigned addresses. That is why only reports of several independent accounts count, older hits lose weight, and without new attacks an address drops off by itself after 14 days.
This page shows no details about the reporting sensors or accounts. There are no details for addresses that are not listed.
For programs: GET https://ipv64.net/api/v2/threat/ip/<ip> (without an API key with a tight limit, with an API key more generous). Contribute with your own sensor: node64.de/docs/honeypot/