AbuseIPDB
This module connects your Drupal site to the AbuseIPDB database, allowing you to check IP addresses for malicious activity and report suspicious traffic. It can help protect your site by identifying and optionally banning abusive IPs.
What is AbuseIPDB?
AbuseIPDB module is a security project that checks and reports malicious IP addresses across the web. From AbuseIPDB.com website:
AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.
Our mission is to help make Web safer by providing a central blacklist for webmasters, system administrators, and other interested parties to report and find IP addresses that have been associated with malicious activity online.
This module is a connection to the AbuseIPDB database. It can take a request IP address and check it against the AbuseIPDB database giving the site owner information about "how abusive" the IP address is across the Internet. The module can also send a report to AbuseIPDB to log suspicious and malicious activity to warn others. Optionally the module will log an IP address with Core's Ban module to prevent future traffic from that address.
Features
This module includes a few features to help secure Drupal from malicious actors:
- Protect Drupal from receiving form submissions.
- Check known request Paths and report crawlers and bot traffic.
- Manually report IP addresses to the AbuseIPDB and ban.
A live testing will start on a high traffic site: http://adsoftheworld.com Based on our experiences, we will decide, how to move forward in this topic.
Usage
- Get an api key here.
- Install module as usual.
- Go to admin/config/services/abuseipdb
Development
- 3.x - New features and development on here.
- 2.x - Copy of 8.x-1.x branch with support up to Drupal 11.