IP Reputation is the authoritative source of risk and threat scoring data for IP addresses worldwide.

We analyze billions of daily global queries from a variety of industries including financial services, streaming media/OTT content distribution, advertising, insurance, gaming, government and healthcare. So, when a decision is made to identify an IP address as fraud risk or a security threat, you can be confident that you're using the most insightful IP Reputation data available.

Discover how Neustar helps secure your organization online. Watch Now

Two Powerful Scores Help You Assess IP Risk

With risk insight from IP Reputation data, you can determine if the IP is being used by an actual human being or is non-human bot or server traffic. You can determine if the IP address has been associated with malicious activity in the past and is too risky to trust, the history of the IP address and the last time it was seen, and if its risk profile has changed since the last time it was seen.

Real User Score

We assign a score between 1 and 5. To arrive at this score, we analyze usage patterns across key industries as well as collection of non-human activity (e.g. server and bot lists) to differentiate real end-user (human) traffic from non-human (server or bot) traffic. The higher the number (e.g. 5), the more likely the traffic is "non-human."

Human or Non-Human?

Score between 1 and 5


  • Differentiate real-user (human) traffic from non-human (bot/server) traffic

Data Collected

  • Usage patterns from internal Neustar DNS Data Exhaust
  • Ingestion of known server and bot lists

Output: Real-User Score

  • The higher the number, the more likely the traffic is "non-human"

Risk Score

We assign a risk score between 1 and 100. This score provides insight about the risk of the IP address being associated with malicious activity from IP threat intelligence sources. The higher the risk score (e.g. 100), the more likely the IP has been associated with nefarious activity.

How Risky?

Score between 1 and 100


  • Insight about the risk of an IP being associated with malicious activity
  • Understand threat and risk insights

Data Collected

  • Data from leading threat intelligence sources, including internal Neustar Data Exhaust

Output: Risk Score

  • The higher the number, the more likely the IP has been associated with risky activity

IP Risk Decisioning Data

As a leading provider of Marketing and Security services, Neustar is uniquely positioned to see network traffic patterns and threat actors across all verticals. By analyzing traffic behavior and identifying threats from the insight we collect from over 30 globally distributed nodes and over 100 billion DNS looks ups per day, we are able to identify query patterns that indicate human or non-human behavior and increased risk. We then use that data and insight to enhance the Real User Score. This proprietary view adds another layer of intelligence to help teams confidently determine if traffic is originating from a real-user (human), or if it is non-human (bot/server) traffic.

Integrating IP Risk Data


Security Platform Integration

Integrating IP Reputation data into a Threat Intelligence/Cybersecurity platform decisioning flow enables you to uncover cybersecurity threats, detect and block non-human intrusions, identify malicious traffic, and stop spam/phishing attempts.

Read More


Fraud Platform Integration

Integrating IP Reputation data into a fraud platform allows you to identify malicious traffic and block risky IP's from network access, identify "non-human" or bot traffic, identify fraudsters and "bad-actors" to prevent online/CNP fraud, and deliver a better experience at every touchpoint throughout the customer journey.

Read More

Let's Connect

Learn How Your Company Can Benefit from the Power of Trusted Connections.

Contact Us   Give us a call 1-855-898-0036