How and when do I report IP abuse?
If you run a network, website, or have a device connected to the internet that is getting attacked from an IP address or multiple IP addresses, how do you report IP abuse.
Chances are the IP address that you are seeing abusing your connection, isn't that of the hacker/malware that is attempting to compromise your network/website. Often times the owner of the IP address isn't aware that their computer is being used as a host to scan/attack other networks, devices, or websites. So, if you find the IP address of the attacker by doing an IP Address Lookup, don't assume that's the person attacking you. You should consider the fact that they've been hacked and their device is being used without their knowledge.
Here's what you should do:
- Review your logs to find the IP address or addresses you feel are attempting to compromise your connection.
- Use our IP Whois Lookup tool to find out more about the network to which the IP address(es) are assigned.
- Within the IP Whois Lookup returned results there will be an email address of the assignee of the IP address. Usually this email is [email protected][networkdomain.com/.net]
- Use the email address provided to report your findings. The more detail you can provide, the better.
REMEMBER, the IP address you find most likely DOES NOT belong to the abuser themselves. So be kind in your email. The person controlling the devices doing the attacking will most likely thank you for alerting them and close the connection and secure their device. They in turn will review their logs to find where the connection came from and report abuse to the point of contact for the offending IP address(es).