○
Outpost / reputation
Get API key →

IP reputation lookup

Geolocation, network attribution and threat signals for any IPv4 address. Backed by 6 honeypots and a dozen public blocklists.

200 queries / day · free
status ● operational
Try: 88.198.24.108 1.1.1.1 8.8.8.8 SSHD brute force → log4j attack logs →
Result for
88.198.24.108
↳ static.88-198-24-108.clients.your-server.de AS24940 HETZNER-AS, DE 🇩🇪 Germany
Suspicious
74 / 100
Reputation score

Reputation signals

0 of 6 categories triggered
Web spam
Clean
No match · Comment & forum spam blocklists (StopForumSpam, NOC forum networks).
Web attacks
Clean
No match · IP observed in web exploit attempts and DShield /24 lists.
Botnet C2
Clean
No match · C2 indicators from ccabuse and feodotracker.
Email spam
Clean
No match · Spamhaus DROP / EDROP listings.
Brute force
Clean
No match · SSHD honeypot capture against this IP or its /24.
DDoS source
Clean
No match · Recent amplification or volumetric activity.

Network usage

probe @ 20 Jun 2026 14:50 UTC
Routable true
Hosting provider true
Pingable (ICMP) true
Tor exit node false
Web server false
Open proxy / VPN true
Bogon (unroutable)false
Country 🇩🇪 DE

Recommended actions

based on detected signals
ALLOW
Block traffic
Drop traffic from this IP at your firewall / edge.
BLOCK
Block account registrations
Prevent sign-ups from this address.
BLOCK
Block comments & forms
Block forum, comment and contact-form submissions.

Why: Traffic from Tor and public Proxies are often used by spammers.

.htaccess nginx iptables
# Outpost · block 88.198.24.108 (suspicious · 74/100) # 0 reputation signals detected Require all granted Require not ip 88.198.24.108 # or block the entire /24: Require not ip 88.198.24.0/24

Raw response

application/json · cached 60s
{ "ip": "88.198.24.108", "reverse": "static.88-198-24-108.clients.your-server.de", "as_number": "24940", "as_name": "HETZNER-AS, DE", "country_code": "DE", "country": "Germany", "usage": { "is_pingable": true, "is_webserver": false, "is_routable": true, "is_tor": false, "is_proxy": true, "details": "IP listed as an open public proxy or VPN.", "is_hosting": true, "is_bogon": false }, "reputation": { "web_spam": false, "web_attacks": false, "botnet": false, "email_spam": false, "brute_force": false, "ddos": false }, "recommendations": { "block_traffic": false, "block_registrations": true, "block_comments": true, "details": "Traffic from Tor and public Proxies are often used by spammers." } }