Malicious IP Checker
Check if an IP address appears in our threat database
Frequently Asked Questions
What is a malicious IP?
A malicious IP is an Internet address that has been detected performing harmful activities such as brute force attacks, malware distribution, or port scanning.
How does this tool work?
Our tool queries our globally distributed honeypot database in real-time. If the IP has attacked any of our sensors, we display its complete history.
What should I do if my IP appears as dangerous?
If your IP appears in our database, it could indicate that your system is compromised or being used for attacks. We recommend: 1) Scan your system with antivirus, 2) Check for suspicious network connections, 3) Contact your ISP if the problem persists.
About this tool
This tool uses real-time data from our network of 5 T-Pot honeypots distributed in Paris, Frankfurt, Warsaw, Singapore and Toronto. We detect over 420,000 security events daily.