Metrictower Threat Intel
Is this IP attacking the internet?
Live IP reputation, powered by the open-source Funnypot sensor network. Look up any address for a verdict, browse the current blacklist, or wire the free feed into your firewall.
Live reports
from the Funnypot sensor network
- 64.62.156.0/24 Brute force — 7 minutes ago
- 13.86.106.0/24 Web attack — 7 minutes ago
- 200.74.120.0/24 scanning — 11 minutes ago
- 78.242.199.0/24 Web attack — 20 minutes ago
- 218.158.59.0/24 scanning — 24 minutes ago
- 84.15.217.0/24 scanning — 27 minutes ago
- 64.62.197.0/24 Brute force — 35 minutes ago
- 66.240.236.0/24 Brute force — 36 minutes ago
- 66.240.223.0/24 scanning — 37 minutes ago
- 34.145.158.0/24 Web attack — 45 minutes ago
- 185.242.226.0/24 Brute force — 46 minutes ago
- 34.96.62.0/24 Web attack — 57 minutes ago
Verdict-first
Every address gets a clear verdict — unknown, clean, suspicious, malicious, or critical — plus a 0–100 score.
Honeypot ground truth
Reports come from real honeypot sensors seeing live attack traffic — not a reports-only aggregator.
Free bulk feed
The blacklist is free to download with attribution — a drop-in for fail2ban, pfSense, or nftables.