Report an IP address

Something attacked your server? Tell us which address and what it did. It takes about twenty seconds.

Sign in to report

Reports come from signed-in accounts only. It keeps the list trustworthy: every report can be traced to a real reporter, and nobody can flood it anonymously. Signing in is free and takes one email, with no password.

Before you send

Report what you saw yourself, from your own logs.
One report per incident is enough. We ignore repeats from you for 15 minutes.
Check the address is the real source and not your proxy, CDN or load balancer.
Never report someone to settle a score. See the acceptable use policy.

Doing this a lot?

Let your server do it. One line in fail2ban or a cron job and every banned address gets reported automatically.

curl -s "https://isipsafe.com/api/v1/report?key=YOUR_KEY" \
  -d ip=203.0.113.50 -d categories=ssh,brute-force

Integration recipes →