Cactus
Check an IP address's reputation
Enter an IP address to see who owns it, its reverse DNS name, and whether it appears on public blocklists used to flag spam and abuse.
How this works
- We only run public DNS lookups (reverse DNS, Team Cymru for the network owner, and a sample of DNS blocklists). We never connect to the IP itself.
- The IP you enter is used to produce this result and isn't stored.
Address type
What kind of address is this?
- IP version
- IPv6
- Scope
- Public (global unicast)
- Block
2000::/3- Defined by
- RFC 4291
A routable, public IPv6 address (global unicast).
Network
Who owns this IP
- Network owner
- AMAZON-AES - Amazon.com, Inc., US (AS14618)
- Registry country (where this block was allocated — not where the server is)
- US
- Routing prefix
2600:1f28::/36
Blocklist checks are IPv4-only for now. We still show the owner and reverse DNS above.
Multi-engine reputation
VirusTotal
No security vendors on VirusTotal currently flag this IP address.
Source: VirusTotal aggregated vendor verdicts.
Blocklists can lag, can list an entire shared range, and don't cover everything. A listing is a strong reason for caution, not proof of malice; a clean result isn't a guarantee of safety.
Frequently asked questions
What does an IP address reputation tell me?
It shows who owns the IP (the network/ASN and country), its reverse DNS name, and whether it appears on public blocklists used to flag sources of spam and abuse. It's useful for checking a suspicious sender, server, or login-alert IP.
Does being on a blocklist mean an IP is dangerous?
Not always. Blocklists can lag or list a whole shared range, and a clean IP isn't a guarantee of safety. Treat a listing as a strong hint to be cautious, not proof - we check a sample of public lists, not every one.