Check if any IP address is on our blocklist covering 5.4M+ IPv4 addresses. Free — no signup required.
Our IP reputation checker queries the ThreatListPro blocklist covering 5.4M+ IPv4 addresses, built from real attacks on production Palo Alto GlobalProtect VPN portals in the US. Every entry in our database comes from real attacks on live production Palo Alto GlobalProtect VPN portals in the US.
If the IP is on our blocklist, it was observed conducting VPN brute force attacks. We show which list entry (single IP or range) it matches. You should block this IP on your firewall immediately.
If the IP is not on our blocklist, it has not been observed attacking the VPN portals we monitor. This does not guarantee the IP is safe — it may pose other risks or be a newly active attacker not yet captured.
Unlike community-reported databases, every entry in ThreatListPro comes from real attacks on live production Palo Alto GlobalProtect VPN portals in the US. The data comes from our own firewall logs, not crowd-sourcing.
Looking up IPs one at a time? Subscribe to ThreatListPro and block the entire list on your firewall with a single EDL URL. 5-minute setup, checked for new attackers every 6 hours.
Stop checking IPs one at a time. Subscribe to ThreatListPro and automatically block every known VPN brute force attacker at your firewall.
Start Free Trial