Sources
No single provider answers every question, so each lookup asks every source that covers that indicator type. You don't need an account with any of them.
Coverage
| Source | IP | Domain | URL | Hash |
|---|---|---|---|---|
| VirusTotal What do security engines and sandboxes currently report? | ● | ● | ● | ● |
| Shodan What services and infrastructure are exposed to the internet? | ● | ● | – | – |
| AlienVault OTX Which threat-intelligence collections reference this address? | ● | – | – | – |
| AbuseIPDB Has this address been reported for abusive activity? | ● | – | – | – |
| IPinfo · location only Where is it, and on whose network? | ● | – | – | – |
How the verdict is decided
- Malicious evidence
- At least one VirusTotal vendor flags the indicator as malicious.
- Allowlisted, no detections
- AlienVault OTX or AbuseIPDB allowlists it, and nothing corroborates a threat: no suspicious vendor detection, no malicious or suspicious sandbox verdict, an AbuseIPDB abuse confidence below 25%, and no malware sample in AlienVault OTX. Malicious community votes alone do not outweigh an allowlist.
- Mixed evidence
- No vendor flags it as malicious or suspicious, but a sandbox verdict is malicious, or malicious community votes outnumber the harmless ones (with at least three malicious votes).
- Suspicious evidence
- Any of: a vendor flags it as suspicious, a sandbox verdict is suspicious, AbuseIPDB abuse confidence is 25% or higher, AlienVault OTX links a malware sample to it, or malicious community votes outnumber the harmless ones and VirusTotal has no vendor analysis.
- No current detections
- VirusTotal analysed it and none of the rules above apply. A minority of malicious community votes does not change this.
- Insufficient evidence
- No source returned detection data. A source can have no record, be temporarily unavailable, or not cover the indicator type, so this is not a clean result.
The rules are checked in this order and the first match is shown. The verdict is calculated from source evidence only; the AI summary cannot change it.