Frequently asked questions

AbuseTrack is a community abuse-reporting platform. People and automated systems report bad phone numbers, IP addresses, domains, URLs and email addresses, and anyone can look them up for free. When lots of reports land on the same number or address, you can see at a glance how risky it is.

Yes. Looking up phone numbers, IPs, domains and email addresses is free, and so is submitting reports. We offer paid API plans for teams that need higher request limits, but the public database stays open to everyone.

We group every report for the same number or address, look at how many different people flagged it and how recently, and turn that into a risk level. A single report is just a hint. When lots of different people flag the same thing, that is worth taking seriously.

Five things: phone numbers (scam calls, smishing), IP addresses (scanners, brute-force, botnets), domains and URLs (phishing, malware) and email addresses (spam, fraud, impersonation). Pick the type, paste the value and add a short note about what happened.

Open the report page, choose the type, enter the value and the kind of threat, and add a short description if you can. You can do it through the website or, if you run servers, automate it through our API so tools like fail2ban can report attackers on their own.

Get in touch and tell us which entry it is. Reports reflect what the community experienced, but mistakes and stale entries happen, especially with IP addresses that change hands. We review disputes and remove or correct entries that don't hold up.

Yes. You can look up entities and submit reports programmatically, which makes AbuseTrack easy to wire into firewalls, fail2ban, SIEMs or your own tooling. The API docs cover authentication, endpoints and rate limits.

Looking things up needs no account. Reporting usually does, so we can keep submissions trustworthy and block fakes. We only store what a report needs and handle personal data in line with the GDPR. See our privacy policy for the details.