Frequently asked questions

AbuseTrack is a community IP abuse-reporting platform. People and automated systems report malicious IPv4 and IPv6 addresses, and anyone can look them up for free. When lots of reports land on the same address, you can see at a glance how risky it is.

Yes. Looking up IP addresses is free, and so is submitting reports. We offer paid API plans for teams that need higher request limits, but the public database stays open to everyone.

We group every report for the same address, look at how many different people flagged it and how recently, and turn that into a risk level. A single report is just a hint. When lots of different people flag the same thing, that is worth taking seriously.

Malicious IP addresses, both IPv4 and IPv6 - scanners, brute-force attackers, botnet nodes, spam senders, DDoS sources and malware-distributing hosts. Paste the address, pick the threat type and add a short note about what happened.

Open the report page, enter the IP address and the kind of threat, and add a short description if you can. You can do it through the website or, if you run servers, automate it through our API so tools like fail2ban can report attackers on their own.

Get in touch and tell us which entry it is. Reports reflect what the community experienced, but mistakes and stale entries happen, especially with IP addresses that change hands. We review disputes and remove or correct entries that don't hold up.

Yes. You can look up entities and submit reports programmatically, which makes AbuseTrack easy to wire into firewalls, fail2ban, SIEMs or your own tooling. The API docs cover authentication, endpoints and rate limits.

Looking things up needs no account. Reporting usually does, so we can keep submissions trustworthy and block fakes. We only store what a report needs and handle personal data in line with the GDPR. See our privacy policy for the details.