IP reputation & abuse score
Reputation estimate for an IP: abuse score from 0 to 100, risk level, VPN/Tor/hosting signals plus bogon, ASN and RIR context. Signals, not a verdict.
How this tool works
The IP reputation check condenses the risk-relevant attributes of an IP address into an estimate: an abuse score from 0 to 100, a coarse risk level plus the signals the picture is built from — anonymizing networks (VPN, Tor), hosting/data center, invalid or unallocated bogon ranges and the ASN/RIR context. The score is a reputation hint derived from open network data and known patterns — it is an estimate, not a verdict about a specific person or intent. With an empty field you check your own IP, otherwise any public address.
Typical use cases
- Quickly classify a conspicuous IP from the server log before taking manual measures
- Flag login or order attempts with an elevated abuse score for additional review
- Review the reputation signals of a business IP before whitelisting it
- On form spam, assess whether the sender IP carries anonymizing or hosting attributes
- Sanity-check your own server or office IP — is it estimated as risk-bearing?
Frequently asked questions
What does the abuse score from 0 to 100 mean?
It is a reputation estimate: the higher the value, the more risk-increasing attributes (anonymizing networks, hosting, known patterns) were found. A high score means elevated risk, not necessarily malicious behavior — it is a hint, not a verdict.
What is the estimate based on?
On open network and routing data plus known address ranges (hosting, VPN, Tor). We derive attributes from these; no profiling of individual persons takes place.
May I block based on the score alone?
We advise against it. Many legitimate users run VPNs or business hosting. Treat the score as one signal among several and do not base decisions on it alone.
What does the bogon flag mean here?
Bogon marks IPs from reserved or not-yet-allocated ranges that should not appear as a source on the public internet. If such an address shows up, it often points to spoofing or misconfiguration.
Are the queried IPs stored?
No. The query is processed in memory and not stored for tracking purposes. The page uses no cookies; our own cookieless reach measurement records no values you enter.
How does this differ from VPN & proxy detection?
VPN detection shows the individual anonymization flags. The reputation check condenses these and further attributes into a score and risk level — the consolidated view instead of single flags.
Related tools
IP address check
Full geo, network and risk profile for any IP.
VPN & proxy detection
Signals for VPN, Tor, relay and hosting IPs.
IP blacklist check
16 public DNSBLs in one pass.
Bulk IP geolocation
Up to 50 IPs at once — country, ASN, risk, CSV export.
Bogon & anycast check
Explains the bogon and anycast status of an IP plus ASN/RIR.
ASN & network lookup
IP, CIDR or ASN to organization, network, RIR and hosting.
Continuous monitoring vs. one-shot?
XICTRAQ monitors uptime, SSL, security headers, GDPR and performance 24/7. Free plan, no credit card.