A safer internet, built on open intelligence
IP-DB tells you in seconds whether an IP address is tied to abuse, and shows the evidence. It combines 44 open threat sources into one score and publishes both the sources and the method.
- 7,076 · Operator notices
01What we do
IP reputation lookup
A 0–100 abuse score for any address, the sources that list it, DNSBL results, owner, abuse contact, location and VPN/proxy/Tor detection.
API and firewall feeds
A REST API, the full blocklist, and a plain-text feed that FortiGate, Palo Alto, pfSense and others read directly. With a free key.
Notifying operators
Our Abuse Desk reports high-scoring addresses, with evidence, to the network's registered abuse contact, and publishes the replies.
Domain WHOIS
A domain's registration, DNS, TLS certificate and the reputation of the addresses it is hosted on, on one page, .tr domains included.
02How it works
-
01
Collect
44 open sources are fetched every 30 minutes; stale or dead sources are left out automatically.
-
02
Score
Lists that copy each other count once; independent sources, community reports and DNSBL results are weighted into a 0–100 score.
-
03
Act
The same verdict reaches the web lookup, the API and the firewall feed, and high-scoring addresses are reported to the network owner.
03Our principles
Evidence, not verdicts
Every score shows the sources and dates behind it. An address that is delisted shows as clean, with its history.
Full transparency
Every source is listed with its licence and freshness, and the system's live health is on a public status page.
A free core
Web lookups are unlimited and need no account; the API is free for 1,000 requests a day.