Table of contents
Comprehensive IP Abuse Database
AbuseIPDB has a large and continuously updated database of IP addresses associated with abusive behavior, such as spam, hacking attempts, and fraudulent activities. This ensures a broad coverage of potential malicious IPs.
User Contribution Model
The platform allows users from around the world to report abusive IP addresses. This crowdsourced data enhances the database's accuracy and timeliness.
API Access
AbuseIPDB offers API access, allowing developers to integrate IP reputation checks into their applications or systems, facilitating automated monitoring and responses.
Detailed Reports
Each reported IP address comes with detailed reports, including the type of abuse, timestamps, and user comments, which can help in making informed decisions about blocking or monitoring the IP.
Community Engagement
The platform has a community of users who actively contribute and update information, enabling a more dynamic and responsive database.
AbuseIPDB is generally considered a good tool for enhancing security measures by monitoring potential threats from suspicious IP addresses. It is valued for its ease of use, extensive database, and community-driven approach.
We have collected here some useful links to help you find out if AbuseIPDB is good.
Check the traffic stats of AbuseIPDB on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of AbuseIPDB on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of AbuseIPDB's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of AbuseIPDB on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about AbuseIPDB on Reddit. This can help you find out how popualr the product is and what people think about it.
Origin server only shows Cloudflare IP's so I decided to add this UA to my WAF with a Managed Challenge. After roughly 30 minutes and almost 100 hits on it CSR was 0%. Looking at the CF logs for the specific WAF shows IP's and locations from everywhere(US, UK, India, China, Nigeria, etc) and when I check IP's at abuseipdb.com they're all clean but none of them seem to get through the managed challenge. I removed... Source: almost 3 years ago
Switched to Maspik Anti-Spam, with a manually curated list of keywords, and integration with abuseipdb.com and proxycheck.io. But both of those were also causing false positives, especially from my co-worker who uses a virtual machine, so upped the tolerance to 70 on both. Source: about 3 years ago
This install of Docker is only a few days old. Most of the IPs associated are showing "banned" on abuseipdb.com. Source: over 3 years ago
People build lists like OP is all the time, have you seen https://abuseipdb.com/? Source: over 3 years ago
To keep your Synology safe, regularly update list of blocked ip addresses. I'm using this script, which takes list of ip addresses from blocklist.de and abuseipdb.com and add them to my block list. I keep them blocked forever. Source: over 3 years ago
I am seeing the same activity with Rich Client 1.2.7, lots of reports of credential stuffing from the related IP's on abuseipdb.com whenever I check. Source: over 3 years ago
These are the kind of IPs that tries to bruteforce my SSH everyday, go checkout abuseipdb, they are from all over the world, either infected devices or proxy servers. Source: over 3 years ago
Anyone ever use abuseipdb.com before to check on hostnames and ip addresses? I keep seeing mixed reviews on it but seems legit for most part. Source: almost 4 years ago
Firstly I'd enter all suspicious IPs into abuseipdb.com. Source: about 4 years ago
Https://abuseipdb.com/ = legit, free, community-driven. Source: over 4 years ago
Ran a malwarebytes and windows defender scan and both came back fine. I don't see any suspicious processes or anything. Sfc /scannow comes back fine. Checked all connections shown by netstat /ano on abuseipdb.com and they were all non-suspicious seeming ( Microsoft, cloudflare, facebook, google, and akamai IP's ). Used autoruns from sysinternals and checked anything I didn't recognize on virustotal. So hopefully... Source: over 4 years ago
Thanks, H-E-C! I forgot all about the POP relationship. I heard Starlink folks here in Italy are showing up as being in Rome, which is quite ok. Nice tip with abuseipdb.com as well :). Source: over 4 years ago
My current ever expanding list. You all should use fail2ban and abuseipdb. Source: over 5 years ago
Do you know an article comparing AbuseIPDB to other products?
Suggest a link to a post with product alternatives.
Is AbuseIPDB good? This is an informative page that will help you find out. Moreover, you can review and discuss AbuseIPDB here. The primary details have not been verified within the last quarter, and they might be outdated. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
