IP Fraud Score and Spam Blacklist Check

How the IP fraud score check works: one IPv4 or IPv6 address goes to our servers, which work out its 0 to 100 fraud score, its proxy, VPN and Tor flags and whether five spam and abuse blacklists including Spamhaus list it, and look up its country, network and ASN, without touching your connection. — One address, three checks: the fraud score with its flags, five blacklists, and country, network and ASN from ipinfo.io. All of it runs on our servers, so the IP you test never visits a scoring site.

What the IP fraud score check shows

The result has four parts. The fraud score is a number from 0 to 100; higher means riskier. It estimates how much of the traffic seen from an address, and from its network, looks fraudulent, so it is built from other people's traffic, not a verdict on you.

The flags say what kind of address it is: a datacenter or server, an anonymizing VPN, a Tor exit node, a public or web proxy. The blacklists say whether the address appears on five public spam and abuse lists. Location and network, country, city, ISP and ASN, come from ipinfo.io, the database our ISP proxy locations follow.

Part	What it answers
Fraud score, 0 to 100	How risky does traffic from this address look?
Datacenter, server, VPN, Tor, proxy flags	What kind of address is it?
Five blacklists, Spamhaus included	Has it been reported for spam or abuse?
Country, city, ISP, ASN (ipinfo.io)	Where is it and whose network is it on?

The five spam and abuse blacklists

A spam blacklist check tells you whether an address has been reported, not how it behaves today. Each list has its own rules for adding and removing addresses:

List	What it collects
Spamhaus	Blocklists of spam sources. Its SBL is a real-time database of IP addresses of known spammers, spam gangs, spam operations and spam support services.
FireHOL	Security IP feeds about online attacks, abuse of online services, malware, botnets, command and control servers and other cybercrime.
IPsum	A daily threat feed built from 30+ public lists of suspicious or malicious IP addresses.
IP2ProxyLite	The free IP2Proxy LITE database of IP addresses being used as open proxies.
X4Bnet Spambot	A spambot list from X4BNet, which publishes automatically updated IP lists on GitHub.

What we measured on 17 October 2026 on 18 public IPs: six home ISP resolvers scored 0 to 17 with no blacklist hits, six datacenter resolvers scored 0 to 10 and were all flagged as servers, and six Tor exit relays scored 0 to 33 while all six were on the IPsum list. — Our measurement of 17 October 2026: the fraud score alone did not separate a Tor exit from a home connection; the lists and flags did.

What we measured on 18 IPs

On 17 October 2026 we checked 18 public addresses in three groups of six, with the same data this tool reads: DNS resolvers run by home ISPs (Comcast, AT&T, Charter, Deutsche Telekom, Free, Telecom Italia), public and hosting resolvers on datacenter or anycast networks (Google, Cloudflare, Quad9, Cisco OpenDNS, Hetzner, OVH), and six Tor exit relays, every 150th of the 1,208 exits on the Tor Project's list that morning.

Group, 6 IPs each	Fraud score	Median	On a blacklist	Flags
Home ISP resolvers	0 to 17	2	0 of 6	none
Datacenter and anycast resolvers	0 to 10	0	0 of 6	server on 6 of 6
Tor exit relays	0 to 33	13.5	6 of 6	Tor exit on 6 of 6

The Tor exits were on IPsum 6 of 6 times, on FireHOL 4 times and on X4Bnet Spambot once. Spamhaus and IP2ProxyLite listed none of the 18 addresses.

The lesson is in the score column. Two of the six Tor exits scored 0, the same as Google's resolver, and a Comcast resolver scored 17, higher than three of the Tor exits. A low fraud score is not a clean bill of health: read the flags and the lists with it. If a site blocks Tor or datacenter traffic, the flag matters more than the score.

Why the same IP scores differently on different sites

Every fraud-scoring service builds its number from its own traffic, its own lists and its own model, so one address can be 0 on one site and much higher on another. IPQualityScore, for example, runs its own scoring. When a score matters, check it on the database the site you care about uses. That is why the IP quality selection of our low fraud score ISP proxies in the US, UK and Germany is optimized for IPQualityScore (IPQS) and Synthient checks as well as for low fraud scores.

Check a proxy IP from outside the proxy

Fraud-scoring sites log the visits they receive. If you open one through the proxy you want to test, the proxy's address becomes one more visit in their data, and that can raise its score. This tool never does that: your browser sends us the address, and our servers look it up. The IP you are checking never connects to anything.

If your IP is on a blacklist

Confirm it on the list's own site. Spamhaus has a public lookup for IPs and domains; the other lists publish their data on their project pages.
Fix the cause before asking for removal. On a home or office connection the usual cause is an infected device or a misconfigured mail server; on a server, a compromised account sending mail. A listing comes back if the traffic does.
Request removal where the list offers it. Spamhaus runs a removal process for its blocklists. IPsum rebuilds itself every day from its source lists, so it follows them.

Start with IPs that pass the check

If you are checking addresses because a site keeps blocking your proxies, change the network rather than the address. These are the measurements and selections already published on our pages:

Network	Fraud score evidence	Price
Mobile proxies	50 of 55 carrier exits at 0, median 0 in all 11 countries, tested 15 October 2026	$5 for 1 GB
ISP proxies, low fraud score	Low fraud scores in the US, UK and Germany (IP quality selection)	in the configurator
Residential proxies, Premium	Median fraud score 2 on 50 exits, tested 13 September 2026	from $2.20/GB

Then test each new endpoint with the free proxy tester and check its exit address here, from outside the proxy.

Check fewer IPs, buy cleaner ones

Mobile exits scored 0 on 50 of 55 lookups in our 15 October test, and ISP proxies come with a low fraud score selection in the US, UK and Germany.

Create my free account See low fraud score ISP proxies

$2 of free API usage per month, no credit card.

Sources and data

Where the lists and the measurement come from, so you can check them yourself:

Questions about IP fraud scores and blacklists

What is a good IP fraud score?

Lower is better: 0 means the database suspects none of the traffic it sees from that address. But read the score with the flags and blacklists. In our 17 October 2026 sample two Tor exits scored 0, while every one of them was on at least one blacklist.

Why is my IP fraud score high?

The score reflects traffic the database has seen from your address or its network: other users of a shared or recycled IP, a VPN or proxy service, or an infected device on your network. Check the flags and blacklists here to see which reason applies, then fix that cause.

How do I check if my IP is on the Spamhaus blacklist?

Enter the IP above: the result says whether Spamhaus lists it, together with four other spam and abuse lists. To see which Spamhaus list it is on and to request removal, use the lookup on Spamhaus's own site after fixing the cause.

Why do two sites show different fraud scores for the same IP?

Each service scores from its own traffic, lists and model, so the same address can be 0 on one and much higher on another. Use the database the site you care about relies on, and compare like with like over time.

Can checking an IP raise its fraud score?

Visiting fraud-scoring sites through the proxy you want to test adds visits from that IP to their data, which can raise its score. This tool looks the address up from our servers: the IP you check never connects to a scoring site.

Does it check IPv6 addresses and lists of IPs?

IPv6 yes: enter it like an IPv4 address, or press Check my IP if your connection reaches us over IPv6. Lists no: it checks one address at a time, up to ten a minute and 30 a day per visitor. For a list of proxies, test each endpoint with the free proxy tester first, then check here the exit addresses that work.

IP fraud score and spam blacklist check