When I perform IP reputation checks, I always try to use IP reputation feeds that are up to date, and I like to do this with public reputation feeds. In my process, of doing all that online research, I quickly noticed that I am jumping from page to page, and I am entering the same values over and over again. So, I came up with the idea, to make a simple, central page, for myself and anyone that enjoys hunting down IP reputation information from the web.
How to use the IP reputation check tool
Time needed: 5 minutes.
In just a couple of steps, you will get access to a lot of information
- Enter the IP address which you want to know more about
Navigate to the box and provide the IP address (for example: 1.1.1.1)
- Hit search
Once you have provided the IP address, you can hit the search button.
- Results
You will get an overview with various results. Each result will contain a clickable link that will bring you to an external IP reputation feed.
An IP reputation feed is a collection of IP addresses or IP address ranges which have a specific reputation bound to them. This could for example be spam, malware, phishing, hosting, marketing and so on.
Each vendor has it’s own price, but the sites I am providing to you, they are all free to use. Of course, they do offer premium services.
No, never blindly add reputation feeds to your blocklist, unless, the quality of the reputation feed is extremely high.
No, I am not affiliated with BGP.he.net, Virustotal, Alienvault, IBM or any of the services that have been hyperlinked as a reputation feed.
Yes, this tool will allow you to quickly perform a manual IP reputation check via the external services that have been utilized in the tool
No, this tool does not support bulk IP reputation checks as this tool generates a page with links that you can use. If this would be in bulk, in the current setup, it would be impossible to use with ease.
Currently, the tool supports IP reputation via VirusTotal, Alienvault, He.net, Shodan, Twitter and IBM x-force.