abuseipdb-integration

SysWarden is a host-local security orchestrator combining authoritative nftables policy, HIDS/HIPS telemetry, bounded threat intelligence, out-of-band WAAP log analysis, authenticated high availability and a native terminal dashboard.

A tool (with a simple installer) that monitors UFW firewall logs in real time and reports IP addresses to the AbuseIPDB database.

A Node.js script that automates the reporting of malicious IP addresses detected by Cloudflare WAF to AbuseIPDB ☁️🕵️

AbuseIPDB integration enabling automatic reporting of malicious activity detected by T-Pot honeypots by monitoring logs, analyzing attack attempts, and submitting reports automatically.

Event based threat management tool with autonomus AI assistant (For now just prototype). With integrated ABUSEIP API for bad IP detection and blockage. Feed the FireWall logs and get insights.

StickyPorts the all-in-one Layer 4 honeypot that emulates commonly used Ubuntu services.

FortiGateToAbuseIPDB is a Python script that allows you to read all IPv4/IPv6 addresses from the FortiGate quarantine list, forward the malicious IPs to the AbuseIPDB service, and then clear the list.

Integration tool that analyzes Suricata logs in real time and reports malicious IP addresses to AbuseIPDB.

Automatically reports IPs blocked by Imunify360 (blacklisted with purpose "drop") to AbuseIPDB using their v2 API.

AbuseAI, AI-powered abuse management platform for hosting companies and ISPs.

Export spam comments to a file, extract IPs, generate AbuseIPDB report

A UFW log monitor that reports malicious IPs to AbuseIPDB.

AbuseGuard AI: Intelligent Abuse Management Platform for Hosting & ISPs 2026

Advanced Network Security Monitoring: SentinelShark Intrusion Analysis 2026

Integration scripts for SniffCat & AbuseIPDB.

NetFlare pulls malicious IPs from AbuseIPDB, resolves them to coordinates with MaxMind GeoLite2, and streams them to a React client that plots each hit on an interactive globe. Global attack trends come from the Cloudflare Radar API. Attacks are cached in SQLite and drip-fed over a WebSocket, so the globe stays live without hammering the upstream

Cyber Threat Intelligence framework for managing a Cowrie-based honeypot

🔍 Analyze logs to detect threats, enhance security visibility, and streamline incident response with this automated cybersecurity tool.