diff --git a/composer.json b/composer.json
index b634895127d..80e8c658cd2 100644
--- a/composer.json
+++ b/composer.json
@@ -44,6 +44,7 @@
         "symfony/config": "^6.1",
         "symfony/dom-crawler": "^6.1",
         "symfony/filesystem": "^6.1",
+        "symfony/http-foundation": "^6.1",
         "symfony/mailer": "^6.1",
         "symfony/mime": "^6.1",
         "symfony/translation": "^6.1",
diff --git a/src/Control/Middleware/TrustedProxyMiddleware.php b/src/Control/Middleware/TrustedProxyMiddleware.php
index f9017bce4e2..e990646917c 100644
--- a/src/Control/Middleware/TrustedProxyMiddleware.php
+++ b/src/Control/Middleware/TrustedProxyMiddleware.php
@@ -3,7 +3,7 @@
 namespace SilverStripe\Control\Middleware;
 
 use SilverStripe\Control\HTTPRequest;
-use SilverStripe\Control\Util\IPUtils;
+use Symfony\Component\HttpFoundation\IpUtils;
 
 /**
  * This middleware will rewrite headers that provide IP and host details from an upstream proxy.
diff --git a/src/Control/Util/IPUtils.php b/src/Control/Util/IPUtils.php
index be3cdc52257..8d6039ad317 100644
--- a/src/Control/Util/IPUtils.php
+++ b/src/Control/Util/IPUtils.php
@@ -11,10 +11,13 @@
 
 namespace SilverStripe\Control\Util;
 
+use SilverStripe\Dev\Deprecation;
+
 /**
  * Http utility functions.
  *
  * @author Fabien Potencier <fabien@symfony.com>
+ * @deprecated 5.3.0 Use Symfony\Component\HttpFoundation\IpUtils instead
  */
 class IPUtils
 {
@@ -37,6 +40,7 @@ private function __construct()
      */
     public static function checkIP($requestIP, $ips)
     {
+        Deprecation::notice('5.3.0', 'Use Symfony\Component\HttpFoundation\IpUtils::checkIP() instead');
         if (!is_array($ips)) {
             $ips = [$ips];
         }
@@ -62,6 +66,7 @@ public static function checkIP($requestIP, $ips)
      */
     public static function checkIP4($requestIP, $ip)
     {
+        Deprecation::notice('5.3.0', 'Use Symfony\Component\HttpFoundation\IpUtils::checkIP4() instead');
         if (!filter_var($requestIP, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
             return false;
         }
@@ -100,6 +105,7 @@ public static function checkIP4($requestIP, $ip)
      */
     public static function checkIP6($requestIP, $ip)
     {
+        Deprecation::notice('5.3.0', 'Use Symfony\Component\HttpFoundation\IpUtils::checkIP6() instead');
         if (!((extension_loaded('sockets') && defined('AF_INET6')) || @inet_pton('::1'))) {
             throw new \RuntimeException('Unable to check IPv6. Check that PHP was not compiled with option "disable-ipv6".');
         }
@@ -141,6 +147,7 @@ public static function checkIP6($requestIP, $ip)
      */
     public static function anonymize(string $ip): string
     {
+        Deprecation::notice('5.3.0', 'Use Symfony\Component\HttpFoundation\IpUtils::anonymize() instead');
         $wrappedIPv6 = false;
         if (str_starts_with($ip, '[') && str_ends_with($ip, ']')) {
             $wrappedIPv6 = true;