Public threat intelligence

Check an IP.
Read the signal.

An IPv4-only MMDB database built from open sources covering Tor, anonymizer networks, and high-risk IP addresses.

—sources
—IPv4 addresses in source lists
—MMDB size

Transparency

Sources & freshness

Last build: —
Category Coverage Why listed IPs Freshness
Loading source metadata…

For nginx and applications

Ready to download

The IPv4-only MMDB file contains one field: category. If an IPv4 address is not listed, the result is empty.

Using nginx on Debian 12 or 13? Install our signed APT repository and GeoIP2 module.

Download MMDB

Terms of use

Open data, clear responsibility

This service uses open-source technology, including Go, MaxMind DB Writer, nginx, and Docker. Data is aggregated from the Tor Project and the public FireHOL blocklist repository.

These lists provide a risk signal, not proof of abuse. VPN, proxy, and Tor addresses may belong to legitimate users. Apply an allowlist and your own risk assessment.

Each upstream source retains its own terms and license. This service does not guarantee completeness, accuracy, or uninterrupted availability and is not liable for legitimate requests being blocked.