How to read the score
Alongside IP risk, we check for signs of browser privacy leaks.
Higher score, higher risk
0–29 is low, 30–59 medium, 60–79 high and 80–100 critical. The composite score represents signals under the current rules, not a probability of malicious activity.
How the composite risk score is calculated
Multiply the AbuseIPDB abuse score by 0.72 and take the greater of that value and the network baseline: Tor 72, VPN/proxy 58, or datacenter 42. If several types match, use only the first in that order. Then add 1 point per report, capped at 18 points. Round and limit the result to 0–100. Browser observations and latency do not contribute.
Browser checks and external requests
IP risk lookups are processed by our server. Some browser information is checked on your device; WebRTC and DNS tests also contact external services. We do not send WebRTC addresses, DNS resolver addresses or browser fingerprint results collected by these checks to Ping123's application backend or Google Analytics.
What results cannot guarantee
The score indicates risk. It does not guarantee access to any platform or replace a professional security audit.
Understanding the results
Three kinds of evidence, presented separately
IP risk comes from backend results, browser privacy from checks in the current browser, and latency from remote probes. Identify the measurement subject and source before interpreting each metric.
Scope and uncertainty
This page describes how the current product checks work; it is not a security certification. Missing data, provider availability, browser restrictions and network changes can affect results. Confidence should not be treated as a percentage of accuracy.
Frequently asked questions
Why do different tools disagree about the same IP?
Tools may use different sources, update times and rules. Check the source and measurement subject when comparing results, rather than comparing only a score or label.
Does the map show an exact address?
No. The map shows an approximate IP-level area, not a device’s precise position, a home address or a person’s location.
Can these results replace a full security assessment?
No. Ping123 provides network diagnostic signals. Access-control or security decisions also require observed behavior, other evidence and an assessment of the specific environment.