IP Reputation
The IPAbuse reputation system aggregates community-submitted abuse reports, network intelligence, and automated verification to produce a single reputation score (0–100) for every IPv4 and IPv6 address.
Reputation score
A score of 100 means the IP has never been associated with abuse. A score of 0 means it has been repeatedly and recently verified as malicious.
| Score range | Risk level | Recommended action |
|---|---|---|
| 76–100 | LOW | Allow — monitor optional |
| 51–75 | MEDIUM | Allow with increased logging |
| 26–50 | HIGH | Challenge (CAPTCHA / 2FA) or block |
| 0–25 | CRITICAL | Block |
Abuse categories
Reports are categorised into the following types:
- SPAM — email or comment spam
- SSH_BRUTE_FORCE — repeated failed SSH logins
- WEB_ATTACK — SQL injection, XSS, directory traversal
- PORT_SCAN — systematic port scanning
- BOTNET — command-and-control or bot activity
- CRYPTOMINING — unauthorised mining
- IOT_ATTACK — attacks targeting IoT devices
- PHISHING — phishing or credential harvesting
Next steps
- Quickstart — make your first lookup.
- API Reference — full endpoint spec.