IP purity report

200.80.227.234

0/ 100

Very high risk

confidence: high

Reputation is burned; almost every platform will block it.

Based on signals observed from public and partner data sources at 2026-09-30 03:21 UTC. This describes IP-level risk only; platforms' internal risk data is not visible to us.

Proxy exit

Profile

What this IP is

Country / region: Argentina · Buenos Aires F.D. · Buenos Aires
IP type: Mobile network
Native / broadcast: Native IP
Network: AS11664 Hipodromo Argentino De Palermo S.a. - Casino Club
Reverse DNS: claro200-234.binbaires.com.ar
Devices seen in subnet: 13

Suitability

What it is good for

Each use case weighs the evidence differently; these are not one overall score.

AI services

ChatGPT · Claude · Gemini

Best avoided

Main issue: Proxy IP

Least tolerant of data center and proxy exits: more likely to get degraded service, verification prompts or account limits. Spam history does not matter here

Social sign-up

X · Discord · Telegram · Reddit

Best avoided

Main issue: Proxy IP

Sign-up is the strictest checkpoint: data center / proxy exits are more likely to be asked for phone verification or refused, and IPs with bulk-registration history are blocked far more often

Streaming / short video

TikTok · Netflix · YouTube

Best avoided

Main issue: Proxy IP

Native IP and low sharing matter most: a broadcast IP reads as a region mismatch, and shared exits get throttled

Gaming platforms

Steam · PSN · Epic · Nintendo

Not recommended

Main issue: Proxy IP

Region locks, regional pricing and gifting all follow the IP's location, so broadcast IPs tend to be treated as cross-region; data center exits carry a high risk of restrictions

Cross-border e-commerce

Amazon · eBay · Shopee

Best avoided

Main issue: Proxy IP

Linked-account store closures are driven first by shared IPs, and only then by data center ranges

Email sending

SMTP · marketing email

Best avoided

Main issue: Blocklist hit: Spamhaus ZEN

Blocklists make or break deliverability, while sending from a data center IP is normal and is not penalised

Evidence

Why it got this score

−45
Blocklist hit: Spamhaus ZEN
SBL CSS — automatically detected spam source; XBL — compromised host / open proxy
What it means
A Spamhaus listing means this IP was confirmed sending spam, or the machine is compromised and being used as a relay.
Which uses care
Cares most: Email sending; Barely looks at it: AI services, Social sign-up, Streaming / short video, Gaming platforms
Why it is weighted this way
This is behavioural evidence, not a profile guess, so it is a hard cap and fatal for email. It carries little weight for scenarios that ignore mail reputation, such as AI services.
Can it be fixed
Fix the cause first (shut down the compromised service, remove malware), then request removal from Spamhaus; usually resolved within days.
−30
Proxy IP
2 data sources flag it as a proxy exit, without identifying the type
What it means
A source marks this address as a proxy exit without saying whether it is a VPN, a datacenter proxy or something else.
Which uses care
Cares most: AI services, Social sign-up, Streaming / short video, Gaming platforms, Cross-border e-commerce
Why it is weighted this way
Two or more sources agree, so it counts in full, slightly lighter than a confirmed VPN because the type is unknown.
Can it be fixed
These labels are usually applied to whole ranges and are hard to clear by behaviour; moving to an unlabeled range is the practical fix.
−19
Abuse reports (abuseipdb)
Confidence 38%, 17 reports in the last 90 days
What it means
Someone reported this IP to an abuse database (AbuseIPDB), typically for SSH brute force, port scanning or comment spam. The reporter may have seen a program on this machine, or a previous tenant.
Which uses care
Cares most: Social sign-up, Email sending
Why it is weighted this way
Counted at half the database's confidence. Sign-up scenarios care most: IPs with bulk-registration or credential-stuffing history are their first priority to block.
Can it be fixed
Reports age out; with no new reports for 90 days the score drops. If your machine is the one scanning, check for implanted software first.
−12
Blocklist hit: SpamCop
Listed by SpamCop
What it means
This IP is on a public blocklist. Most lists record addresses that sent spam or took part in scanning or attacks.
Which uses care
Cares most: Email sending; Barely looks at it: AI services, Social sign-up, Streaming / short video, Gaming platforms
Why it is weighted this way
A single aggregate list is moderate evidence, so about a dozen points; the email scenario more than doubles it because receiving servers query these lists directly.
Can it be fixed
Every list has a removal process, provided the cause is gone; some delist automatically after a quiet period.
−12
Blocklist hit: s5h.net
Listed by s5h.net
What it means
This IP is on a public blocklist. Most lists record addresses that sent spam or took part in scanning or attacks.
Which uses care
Cares most: Email sending; Barely looks at it: AI services, Social sign-up, Streaming / short video, Gaming platforms
Why it is weighted this way
A single aggregate list is moderate evidence, so about a dozen points; the email scenario more than doubles it because receiving servers query these lists directly.
Can it be fixed
Every list has a removal process, provided the cause is gone; some delist automatically after a quiet period.
−12
Blocklist hit: DroneBL
Listed by DroneBL
What it means
This IP is on a public blocklist. Most lists record addresses that sent spam or took part in scanning or attacks.
Which uses care
Cares most: Email sending; Barely looks at it: AI services, Social sign-up, Streaming / short video, Gaming platforms
Why it is weighted this way
A single aggregate list is moderate evidence, so about a dozen points; the email scenario more than doubles it because receiving servers query these lists directly.
Can it be fixed
Every list has a removal process, provided the cause is gone; some delist automatically after a quiet period.
−12
Blocklist hit: SpamRats
Listed by SpamRats
What it means
This IP is on a public blocklist. Most lists record addresses that sent spam or took part in scanning or attacks.
Which uses care
Cares most: Email sending; Barely looks at it: AI services, Social sign-up, Streaming / short video, Gaming platforms
Why it is weighted this way
A single aggregate list is moderate evidence, so about a dozen points; the email scenario more than doubles it because receiving servers query these lists directly.
Can it be fixed
Every list has a removal process, provided the cause is gone; some delist automatically after a quiet period.
−6
4 open ports
Open ports: 161, 1701, 1723, 2000
What it means
Scanners see ports open on this IP. With admin ports such as 22 or 3389 it is almost certainly a server, not a home router.
Which uses care
Barely looks at it: AI services
Why it is weighted this way
Mainly corroboration that "this is a server", which the datacenter item already charged for, so only a few points here; AI-type scenarios weight it at 0.3 to avoid charging the same fact three times.
Can it be fixed
Close or restrict ports that do not need public access (firewall, non-default port, fail2ban); scanners update within days, then re-check. One of the few items you can change yourself.
+5
IP type: Mobile network
Mobile IPs are heavily shared but are generally treated as real users
What it means
A residential, mobile, education or government network address: the kind of source risk systems trust most.
Which uses care
Cares most: AI services, Social sign-up, Gaming platforms, Cross-border e-commerce; Barely looks at it: Email sending
Why it is weighted this way
A bonus: the vast majority of real people come from these networks, so the default stance is to let them through.
Can it be fixed
An inherent attribute of the IP or its range; nothing a user can change short of a different IP.
+5
Native IP
Registered and used in the same country, allocated directly by a local carrier
What it means
Registered and used in the same country, allocated directly by a local carrier: a "native IP".
Which uses care
Cares most: Streaming / short video, Gaming platforms; Barely looks at it: Email sending
Why it is weighted this way
A bonus: region-based checks will not trip.
Can it be fixed
An inherent attribute of the IP or its range; nothing a user can change short of a different IP.

Reputation

Blocklists and abuse history

Listed on 5 of 8 blocklists checked: Spamhaus ZEN, SpamCop, s5h.net, DroneBL, SpamRats.

abuseipdb abuse confidence 38%, 17 reports in 90 days

Open ports observed: 161, 1701, 1723, 2000

Limits

What an IP check cannot tell you

Each platform's internal risk labels: Platforms keep their own IP reputation data and ban records and do not publish them. No hit in public sources does not mean a platform has nothing on this IP.
Whether the IP is truly exclusive: Sharing is only the number of devices observed in the same subnet. It cannot show who else is using this exit right now, or what they are doing.
Which accounts this IP has been tied to: Account-to-IP links exist only inside each platform. Accounts previously banned on this IP are invisible to us.
Device, browser and behaviour: Risk systems look at IP + device fingerprint + behavioural rhythm together. A clean IP with an odd fingerprint or behaviour still gets blocked.
Whether the account profile matches the IP: When sign-up country, phone number, payment method, language or time zone disagree with the IP's location, platforms verify further. That is unrelated to IP purity.

Sources

Data sources and responses

rdap
718ms
team-cymru
64ms
ip-api.com
70ms
proxycheck.io
100ms
abuseipdb
167ms
cloud-ranges
6ms
tor-exits
6ms
rdns
1262ms
shodan-internetdb
170ms
ipwho.is
78ms
dnsbl
260ms

Machine-readable versions of this report: JSON · plain text · 中文报告