Metrictower Threat Intel

Is this IP attacking the internet?

Live IP reputation, powered by the open-source Funnypot sensor network. Look up any address for a verdict, browse the current blacklist, or wire the free feed into your firewall.

Live reports
from the Funnypot sensor network
  • Watching for live reports…

Verdict-first

Every address gets a clear verdict — unknown, clean, suspicious, malicious, or critical — plus a 0–100 score.

Honeypot ground truth

Reports come from real honeypot sensors seeing live attack traffic — not a reports-only aggregator.

Free bulk feed

The blacklist is free to download with attribution — a drop-in for fail2ban, pfSense, or nftables.

Get a free API key Browse the blacklist