IP abuse reports and a free server blocklist
Look up any IP, CIDR or ASN in community abuse reports, or connect your server: it reports what it catches and blocks what everyone else caught.
- Reports
- 248,592
- Reports, last 24 h
- 1,193
- IPs tracked
- 27,632
- Active sensors
- 31
- reported in the last 7 days
One command. Your server reports and blocks.
Install a sensor next to the tools you already run. It reports the attackers your server catches and loads the IPs everyone else caught into your firewall. Servers that report get the full real-time list.
- 01
Your server catches an attacker
fail2ban or CrowdSec bans an IP, for example after repeated failed SSH logins.
- 02
The IP is reported automatically
The sensor reports the IP and threat type to AbuseTrack through the API.
- 03
Every connected firewall drops it
Your firewall loads the community blocklist and refreshes it every 30 minutes.
Install the fail2ban sensor and firewall blocklist:
curl -fsSL https://abusetrack.io/integrations/fail2ban/install.sh | AT_API_KEY=your_key bash
fail2ban
CrowdSec
UniFiCommunity reports as they come in
The latest entries reported across the network, straight from the database.
| IP address | Threat |
|---|---|
 176.53.159.197 | Brute Force |
 92.118.39.71 | Brute Force |
| 92.118.39.77 | Brute Force |
| 176.53.159.198 | Brute Force |
 193.46.255.86 | Brute Force |
 171.211.84.116 | Brute Force |
| 222.210.35.197 | Brute Force |
| 92.118.39.77 | Brute Force |
Threat distribution
- Brute Force236,75995%
- Port Scan9,0504%
- Malware1,7301%
- Data Theft1,0520%
- Spam10%
Why AbuseTrack exists
Online abuse moves faster than any single company can keep up with. Scanning hosts, brute-force attackers and botnet nodes pop up by the thousands every day, and vanish just as fast.
AbuseTrack.io flips that around. Instead of a handful of analysts, the whole community pitches in. When you report a malicious IP, that signal helps everyone else stay ahead. The mission is simple: make the internet safer, together.
Community-powered
Every report comes from real people and real servers. Collective vigilance scales far beyond any single vendor.
Real-time
New abuse is ingested and surfaced live, so the data reflects what's happening right now.
Free & open
Reporting and lookups are free. Keeping the internet safe shouldn't sit behind a paywall.
Privacy-first
Report anonymously. We track abusive infrastructure, not the people reporting it.
Protect your first server in a minute.
Create a free account, copy your API key, run one command. Nothing else to configure.