Reputation Lookup

IP

Dotted-decimal IPv4 address.

Reputation Score

Value from 0-100, with 100 being the highest 'bad' reputation. Score is computed via an algorithm informed by 11 categories of behavior.

Days Observed

Number of days, in the previous 30 days, the IP was observed in at least one of the categories below.

Category

Describes the behavior observed for the given IP, as follows:

• bot: a system infected with malware
• bruteforce: a system associated with authentication brute force login attempts, usually against SSH systems
• controller: a system providing command and control (aka C&C, C2) services for a botnet
• darknet: a system associated with network or service scanning activity
• honeypot: a system indentified to be interacting with a honeypot
• openresolver: a system associated with a domain name system (DNS) service that answers any DNS query from anyone, which are often used in DNS amplification and reflection attacks
• phishing: a system implicated in hosting a malicious phishing page
• proxy: a system associated with an anonymous proxy service, which are often used for malicious activities
• scanner: a system associated with network or service scanning activity
• spam: a system indentified to be sending spam email messages

Country Code

Country where the IP is assigned, based on Internet registry data. Hover over the flag to display the country code and name.