IPsum
A daily merge of 30+ public threat lists. The number tells how many of them list the address.
- Blocklist
What it is
IPsum is an open threat feed from the stamparm/ipsum project. Every 24 hours it downloads more than 30 public blacklists and counts, for each address, on how many of them it appears.
On this site the list is downloaded to our server and checked locally. The lookup is instant and the address never leaves us.
What it checks
- Whether the address appears in any of the merged public blacklists
- How many lists agree — shown as “in N blacklists”
How to read the result
- Not listed
- None of the 30+ lists names the address.
- 1–2 lists
- Weak evidence. Often old or noisy entries.
- 3 or more
- Several independent lists agree. The project itself recommends level 3 and above for blocking.
Limits
- IPv4 only.
- Updated once a day: a very fresh attack may be missing and a cleaned address can stay listed for up to a day.
How it is used here
Shown as “listed / not listed” with the number of lists. Each listing adds points to the overall risk.