Check if any IP address is on our blocklist of 2M+ threat IPs. Free — no signup required.
Our IP reputation checker queries the ThreatListPro database of over 2 million IP addresses that have been observed actively attacking VPN portals. Every IP in our database was captured by honeypots running real VPN software — GlobalProtect, SSL-VPN, AnyConnect, and others.
If the IP is on our blocklist, it was observed conducting VPN brute force attacks. We show when it was first and last seen attacking our honeypots. You should block this IP on your firewall immediately.
If the IP is not on our blocklist, it has not been observed attacking VPN portals in our honeypot network. This does not guarantee the IP is safe — it may pose other risks or be a newly active attacker not yet captured.
Unlike community-reported databases, every IP in ThreatListPro was captured by automated honeypots mimicking production VPN portals. The data is verified, not crowd-sourced.
Looking up IPs one at a time? Subscribe to ThreatListPro and block the entire list on your firewall with a single EDL URL. 5-minute setup, weekly automatic updates.
Stop checking IPs one at a time. Subscribe to ThreatListPro and automatically block every known VPN brute force attacker at your firewall.
Start Free Trial