What is IP reputation?
IP reputation is the judgment that blocklists, fraud tools and websites make about an IP address from its history and its network: abuse reports, spam and attack traffic, bot activity, and whether the address belongs to a home ISP, a mobile carrier or a hosting network. A poor reputation brings CAPTCHAs, throttling or blocks, whatever the request contains.
Updated
What goes into IP reputation
There is no single score. Each system builds its own from a mix of four kinds of data:
- Abuse lists. Spamhaus, AbuseIPDB, IPsum and similar feeds list addresses seen sending spam, scanning, brute-forcing logins or hosting malware. Some collect reports from many sites, others from honeypots.
- Network type. IP databases classify ranges as residential ISP, mobile, business, hosting or education. Hosting ranges carry most automated traffic, so many sites challenge them by default.
- Anonymizer flags. Lists of known VPN endpoints, Tor exits and proxies. They describe what an address is used for, not whether it has misbehaved.
- First-party history. A site's own record of what the address did there: failed sign-ins, request rates, challenge results. Bot-management vendors pool this across their customers. It is usually the deciding input, and the one you cannot look up.
Reputation moves. Listings expire when reports stop, an address the ISP reassigns inherits whatever the last user left behind, and on IPv6 many systems judge a whole /64 rather than one address.
How websites use it
Reputation sets the starting point for a request. A clean residential address may get the page straight away; the same request from a listed hosting address may get a JavaScript challenge, a CAPTCHA, a slow response or a 403. What happens next depends on the other signals a site reads, such as the TLS and browser fingerprint, cookies and behavior.
Mobile carrier addresses are a special case. Carrier-grade NAT puts many subscribers behind one public IPv4 address, so blocking it blocks real customers, and sites tend to be careful with them. Mail is another: Spamhaus's PBL lists many residential ranges because home connections should not send email directly. That listing is a mail policy, not a sign of abuse, and websites rarely apply it to web traffic.
How to check the reputation of a proxy IP
- Get the exit IP the target would see, from the Proxy Checker or an IP echo request through the proxy.
- Look it up from your own connection, not through the proxy: AbuseIPDB for reports and a confidence score, Spamhaus's lookup for its lists, and an IP database for the network type.
- Read each listing for what it is. An abuse report from last week matters; a PBL entry or a "residential" label does not.
- For a rotating pool, check a sample: 50 to 100 exits in the country you use, and record the share with recent abuse reports. One lookup describes one address at one moment.
- Compare with the outcome on your own target: challenge and block rates per exit over a representative batch. That is the reputation that counts for your job.
Common mistakes
- Treating a clean score as a pass. A listed address will often be challenged, but an unlisted one can still be blocked on fingerprint or behavior.
- Buying on pool size. A larger pool does not mean cleaner exits; measured challenge rates on your target tell you more.
- Spending the reputation yourself. Retry loops, hundreds of parallel requests on one sticky IP and repeated failed sign-ins become the address's history, for you and for whoever uses it next.
- Ignoring IPv6 prefixes. Changing the last bits of an IPv6 address does not escape a block applied to its /64.
IP reputation on TrueProxies
Residential IPv4 exits are addresses on residential ISP networks rather than hosting ranges. Reputation still varies from one address to the next, so TrueProxies does not promise a clean IP or a score. Record the exit with each response, and when a target challenges one, open a new connection on a rotating session or send a new session name on a sticky one to get another exit. The Proxy Checker shows the exit IP of each check; it does not test reputation.
Questions about IP reputation
What is a good IP reputation score?
There is no shared scale. AbuseIPDB's confidence of abuse runs from 0 to 100, where 0 means no recent reports; commercial fraud scores also run from 0 to 100 but weigh different data. Check that an exit has no recent abuse reports, then judge it by how your target responds.
Do residential proxies have a better reputation than datacenter proxies?
On network type, usually: many sites challenge hosting ranges by default and residential ranges are not treated that way. On history, it varies by address. A residential IP that many people have used for automation can carry more reports than a little-used datacenter IP.
How do I fix a bad IP reputation?
For an address you own, stop the abuse and request delisting from each list; many listings expire once reports stop. For a proxy exit, move to another exit and keep request rates and retries low so the next one stays usable.
Can a website tell that an IP is a proxy?
Sometimes. Commercial databases flag addresses seen acting as proxies or VPNs, and a site can combine that with fingerprints and behavior. No proxy type is undetectable.