IP Lookup & IP Blacklist

Threat Scores

The Threat Rating is a metric that describes how dangerous an IP is based off its observed suspicious activity and how many websites reported it. These activities include sending spam messages, performing dictionary attacks, harvesting addresses, posting spam comments to web forms, hosting bad web pages (phish sites, etc), and breaking nofollow or certain robot.txt rules, fraud Orders, DDoS Attack, Open Proxy, Port Scan, Brute-Force, Bad Web Bot, Exploited Host, Web App Attack, SSH abuse, Internet of things abuse.

Category

IPs are labeled as "suspicious" if they engage in behavior that is consistent with a malicious robot, but malicious behavior has not yet been observed. For example, on average it takes a harvester nearly a week between when it finds an email address and when it send the first spam message to that address. In the meantime, the as-of-yet-unidentified harvester's IP address in the meantime is seen hitting a number of honey pots, not obeying rules such as those set forth by robots.txt, and otherwise behaving suspiciously. In this case, the IP may be listed as suspicious.