Diagnose the listing before you request removal.

EDGE: READY
More options
What are you checking?
EXAMPLE Checked static example Cache n/a NOT LIVE
IP

8.8.8.8

EXAMPLERUN A LIVE CHECK
ASN
AS15169 · Google LLCgoogle.com
LOCATION
US · California, Mountain View
IPBot
🇺🇸 US · California, Mountain View
IPinfo
🇺🇸 US · AS15169
GeoLite2
🇺🇸 US
DB-IP
🇺🇸 US · California, Mountain View
Bright Data
🇺🇸 US · California, Mountain View
ROUTE
ANNOUNCED 8.8.8.0/24
IP TYPE
PUBLIC INTERNET INFRASTRUCTURE
Not assessedIPJURY SCOREEXPERIMENTAL · NOT A PROBABILITY IPJURY VERDICT EXAMPLE

Run a live check for an evidence verdict and experimental interpretation.

Why this result · full calculation

Run a live check. The example is not scored.

    Evidence confidence is not prediction accuracy. A provisional range spans policy outcomes for unanswered questions; it is not a probability interval.

    OPEN FULL EVIDENCE REPORT

    JURY READY

    Enter an address, or check your own connection · the example below is replaced in place

    FULL REPORT IDENTITY · SOURCE MATRIX · SIX-AXIS VERDICT · EVIDENCE RECORD
    EVIDENCE SNAPSHOTSEPARATE AXES · NOT A SCORE
    ANONYMITY
    No direct anonymity evidence observed
    ABUSE EVIDENCE
    No abuse evidence in covered sources
    COVERAGE
    6/7 jurors responded
    01

    IDENTITY

    COORDINATES
    not loaded in static example
    ROUTING
    ROUTE ORIGIN OBSERVED
    PREFIX
    8.8.8.0/24
    TIMEZONE
    America/Los_Angeles
    REVERSE DNS
    not loaded in static example
    STACK
    IPv4
    RANGE
    8.8.8.0 – 8.8.8.255
    REGISTRY
    not loaded in static example
    02

    SOURCE MATRIX

    4 location sources agree at country level · — not covered · W/H withheld

    SIGNALIPBotIPinfoGeoLite2DB-IPIPtoASN
    COUNTRYUSUSUSUS
    CITYCalifornia, Mountain ViewCalifornia, Mountain View
    ASNAS15169AS15169AS15169AS15169
    PROXYNO
    VPNW/H
    TORNO
    HOSTINGNO
    ABUSENO
    03

    SIX-AXIS VERDICT

    NETWORK ROLEHIGH
    Public internet infrastructure

    Service role · anycast context · operator identity

    ANONYMITYMEDIUM
    No direct anonymity evidence observed

    No proxy, VPN, or Tor finding in covered fields

    ABUSE EVIDENCEMEDIUM
    No abuse evidence in covered sources

    This means “not observed,” never “clean”

    GEO CONTEXTLOW
    US · single geolocation estimate

    Country-level context; physical location not proven

    ROUTINGHIGH
    Route origin observed · RPKI state withheld by licence

    Origin ASN · announced prefix · route-origin conflict

    COVERAGEMEDIUM
    6/7 jurors responded

    Named jurors · lineage families · abstentions visible

    04

    EVIDENCE RECORD

    JURORAXISCLAIMCONF.STATUS
    Network identityIPBot networknetwork roleAS15169 · Google LLCHIGHRESPONDED
    Operator and role profileIPBot classificationnetwork rolepublic infrastructureHIGHRESPONDED
    Anonymity signalsIPBot classificationanonymityno direct proxy/VPN/Tor evidenceMEDIUMRESPONDED
    Direct threat evidenceIPBot evidenceabuseno direct record in covered evidenceMEDIUMRESPONDED
    REPORT ipjury.com/check/8.8.8.8 EXPERIMENTAL INDEX
    TERMINAL curl ipjury.com/8.8.8.8 irm ipjury.com/8.8.8.8
    IPJURY.COM · EVIDENCE, NOT AN ENTERTAINMENT SCORE

    IPJury uses the IP2Location LITE database for IP geolocation. This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com. IP Geolocation by DB-IP. Full source credits: source register.

    05

    READ THE LISTING BEFORE YOU APPEAL IT

    Which listing should I inspect before seeking removal?

    Distinguish an exact-address record from surrounding-prefix context, check its source and date, then follow that operator’s current procedure. IPJury neither scans every blocklist nor decides whether a removal request will succeed.

    Evidence scope and register licence-review dates — not live lookup dates
    SourceRegister review
    abuse.ch Feodo Tracker C2 list
    IPBot Direct Evidence

    Source availability depends on the current deployment and each returned record. These review dates do not establish when a particular IP was observed. Method axis-scope-2026-09-15 · Score ipjury-score-v3.

    You found your address on a blocklist and the instinct is to file removal requests everywhere at once. First identify the named source, the scope and the date, rather than treating every listing as the same problem.

    Three kinds of listing, three different situations

    Exact-address direct record
    An operator observed something from this specific address and recorded it. The scope is this address, not an identified person. Inspect the operator’s current record and procedure before deciding what action is appropriate.
    Network or prefix-level listing
    The listing covers a range, an allocation, or an announcing network. A containing range is not an exact-address record. Ask the provider about the scope and consult the listing operator’s procedure; this tool cannot predict whether an individual request will succeed.
    Historical or community report
    A report filed by another operator or a volunteer, often about an event weeks or months old, sometimes about an address since reassigned. It describes the address's past, and many such records age out on their own schedule.

    IPJury separates returned exact-address evidence from surrounding-prefix context. It does not query every blocklist or every community reporting system. That label is the fork in the road: the same word "listed" points at three different responses.

    Diagnose in this order

    1. Establish scope. Is the finding against your exact address or inherited from prefix context? Everything downstream depends on this answer.
    2. Establish control. Do you hold this address, or does your provider assign it to you? On a dynamic or shared assignment you may be inheriting a previous or concurrent user's record, and the address may not be yours by tomorrow.
    3. Read the other axes. Network role and anonymity are separate context. They do not prove the mechanism that caused an abuse record.
    4. Find and fix the cause. Compromised host, misconfigured service, an open resolver or relay, a tenant of yours, or automation you did not know was running.
    5. Then request removal, describing what changed and when.

    Why filing first backfires

    The named operator decides under its own current procedure. Read any remediation and waiting requirements it publishes, and distinguish a range listing from an exact-address record. IPJury does not submit, adjudicate or predict removal requests. Quoting a score instead of the actual listing scope cannot resolve what that operator recorded.

    Are you the cause, or a neighbor?

    On shared egress this distinction is everything. Under carrier-grade NAT an address-level record does not identify the subscriber responsible. Ask the provider what it can investigate rather than assuming the current user caused it. On a hosting range, an adjacent tenant's incident can produce a prefix-level listing that reaches your unrelated address. The evidence record separates the two: an exact-address finding concerns that address, not necessarily its current user; a prefix-only finding identifies a different scope to discuss with the operator.

    Abuse contact basics

    The registry record for an address names the party responsible for reports about it. Query it through RDAP, the structured successor to whois, which the regional registries expose over HTTP; IPJury's routing and allocation context tells you which registry to ask. Use the actual abuse contact in that authoritative record or the provider’s published contact. Do not construct a mailbox from the operator name. This tool does not fetch or verify the contact for you.

    Two practical notes. The abuse contact for a prefix is often your upstream, which is who to talk to about a network-level listing. And the listing operator's own removal form is authoritative for their list; the abuse contact reaches whoever runs the network.

    06

    A NUMBER NEEDS ITS EVIDENCE

    IPJury keeps network type, anonymity, abuse, location, routing and coverage separate. Its optional experimental index explains a published policy over those facts; it never replaces the named evidence verdict or conceals missing information.

    MYSTERY SCORE MODEL
    83/100

    What does 83 measure? Who supplied it? Is hosting being treated as abuse? Did one heuristic outweigh a direct record? A number cannot tell you that two of its sources flatly contradicted each other.

    • Cross-axis averaging
    • Hidden source lineage
    • Missing source treated as “false”
    • Disagreement averaged away
    • Platform outcome implied
    EVIDENCE + EXPLAINED INTERPRETATION
    BANDDISPUTED RULEsource-conflict ROLEhosting ANONYMITYno direct evidence ABUSEno record observed GEOcountry disputed ROUTINGorigin observed COVERAGE6/7 responded

    One rule read one axis and named the state. The axes it did not read stay beside it. “Disputed” and “too little coverage to say” are answers a single number cannot express.

    07

    THE FIVE RULES OF EVIDENCE

    [ READ FULL METHOD ]
    1. 01

      Vote only on the same axis

      A proxy flag, an abuse report, a hosting role, and a city estimate are not interchangeable votes.

    2. 02

      Direct evidence outranks a prior

      An exact-IP record is different from an inference based on the ASN, prefix, or network category.

    3. 03

      Deduplicate source lineage

      Three websites backed by one upstream database do not become three independent evidence families.

    4. 04

      Let jurors abstain

      Timeout, no IPv6 coverage, disabled license, or missing record is shown—not silently converted to “no.”

    5. 05

      Explain dissent

      CGNAT, anycast, reassignment, data age, and route context can all produce legitimate disagreement.

    09

    QUESTIONS THE SCORE CANNOT ANSWER

    My address is on a blocklist. What should I do first?

    Establish which kind of listing it is before requesting anything. An exact-address record, a network-level listing that covers you by adjacency, and an aged community report call for three different responses.

    What is the difference between an exact-address listing and a network-level one?

    An exact-address claim names this address; a range claim names a block containing it. Follow the named operator's process for that scope; IPJury cannot predict whether an individual request will succeed.

    Why do removal requests get rejected?

    The list operator decides under its current process. Review the actual listing and any remediation or waiting requirements it publishes; this tool does not submit or adjudicate removal requests.

    How do I find who to contact about an address I do not control?

    Use the provider's published contact or the actual abuse contact in an authoritative registry record. IPJury's network context helps orient the question but does not fetch or verify a contact mailbox here.

    IPJURY // RECORD

    Methodology