Frequently asked questions

Everything you might wonder about reporting, looking things up and trusting the data on AbuseTrack.

What is AbuseTrack?

AbuseTrack is a community abuse-reporting platform. People and automated systems report bad phone numbers, IP addresses, domains, URLs and email addresses, and anyone can look them up for free. When many reports pile up on the same entity, a clear risk picture emerges from the crowd.

Is AbuseTrack free?

Yes. Looking up phone numbers, IPs, domains and email addresses is free, and so is submitting reports. We offer paid API plans for teams that need higher request limits, but the public database stays open to everyone.

How reliable is the data?

Every report counts as one voice, not the final word. We group all reports for the same entity, weigh how many independent people flagged it and how recent they are, and turn that into a risk level. More reports from more reporters mean a stronger signal, so treat a single report as a hint and a pattern as a warning.

What can I report?

Five things: phone numbers (scam calls, smishing), IP addresses (scanners, brute-force, botnets), domains and URLs (phishing, malware) and email addresses (spam, fraud, impersonation). Pick the type, paste the value and add a short note about what happened.

How do I report something?

Open the report page, choose the type, enter the value and the kind of threat, and add a short description if you can. You can do it through the website or, if you run servers, automate it through our API so tools like fail2ban can report attackers on their own.

Someone reported my number or IP by mistake. What can I do?

Get in touch and tell us which entry it is. Reports reflect what the community experienced, but mistakes and stale entries happen, especially with IP addresses that change hands. We review disputes and remove or correct entries that don't hold up.

Is there an API?

Yes. You can look up entities and submit reports programmatically, which makes AbuseTrack easy to wire into firewalls, fail2ban, SIEMs or your own tooling. The API docs cover authentication, endpoints and rate limits.

Do I need an account, and what about privacy?

Looking things up needs no account. Reporting usually does, so we can keep submissions trustworthy and block fakes. We only store what a report needs and handle personal data in line with the GDPR. See our privacy policy for the details.

Report