What's the reputation of this IP address?
An IP hitting your server, login page or inbox could be a normal user — or a bot, proxy or known attacker. Reputation tells you which.
DARKSHARE aggregates abuse reports, blocklists, exposure scans and network data into one 0–100 risk score.
What's the reputation of this IP address?
3 anonymous scans a day · no signup · zero query logs
Check it free nowWhat we check
- ✓Abuse reports — AbuseIPDB and attack-tracker counts for this IP.
- ✓Blocklists — spam, botnet and known-attacker feeds (Spamhaus, Blocklist.de and more).
- ✓Exposure — open ports and services seen by Shodan/Censys-style scanners.
- ✓Network & proxy — ASN, geolocation and proxy/VPN/Tor detection.
Data sources we cross-reference
We cross-reference 62+ specialised sources (of 176+ total).
How the 0–100 risk score works
Heavy recent abuse reports and multiple blocklist hits dominate. Tor/open-proxy origin and dangerous exposed services add weight; a clean residential or cloud IP scores low.
Frequently asked questions
What does a high IP risk score mean?
The address has been reported for malicious activity or sits on blocklists. Treat its traffic with caution and consider rate-limiting or blocking.
Is checking an IP legal?
Yes — IP reputation uses publicly published abuse and network data. It's standard security practice.
Can I check my own server's IP?
Definitely — it's a good way to confirm you're not on a blocklist that hurts email delivery.