1. AbuseIPDB
  2. Range Alerts Tutorial

Range Alerts Tutorial

Range Alerts is a powerful feature designed to help you monitor specific IP address ranges and receive a notification whenever reports are filed against any IP within those ranges. This tutorial will walk you through the process of enabling and managing Range Alerts—no coding required. This tool informs you about potential security threats and reports made against IPs you control, which is ideal for businesses, helping you maintain network integrity and respond proactively.

Why Use Range Alerts?

Range Alerts is essential for organizations that need to maintain visibility and control over their IP address space. Here is how it can benefit you:

  • Proactively address security incidents: Quickly identify and respond to potential threats or abuse originating from your IP range.
  • Maintain network integrity: Ensure your IP addresses are not misused, which could lead to blacklisting.
  • Simplify monitoring: Automate IP activity tracking to streamline oversight and eliminate the inefficiencies of manual monitoring, significantly reducing time and resource demands.
  • Enhance collaboration: Implement a centralized ticketing system that integrates alerts, making it easy for teams to share information and respond faster.

How to Set Up Range Alerts

Follow these steps to configure and manage Range Alerts:

Step 1: Navigate to the Range Alerts tab

  1. Log in to your account.
  2. Navigate to your account section.
  3. Click on the Range Alerts tab to get started.

Step 2: Add a new CIDR range

  1. In the Range Alerts tab, locate the text area labeled "CIDR Prefix(es)".
  2. Enter one or more valid CIDR values.
    (CIDR is a combination of an IP address and its associated subnet mask.) Example of a valid CIDR value: 127.0.0.0/24 . Here 127.0.0.0 would be the IP address and /24 would be the subnet mask.
  3. Click the button to save the CIDR range for tracking.
  4. Tracked ranges will appear under the "Current Ranges Tracked" section.

Step 3: Disable, enable or remove tracked range

  1. Scroll to the Enabled/Disabled Ranges tables. Enabled table displays your tracked ranges, where you can see how many reports have been made against the range and the last time a report was made against it.
  2. To disable a range, click and drag the left handle on the enabled range and move it to the "Disabled Ranges" table. A confirmation message will be displayed in the top right corner. A disabled range does not count towards your limit, but you will not receive alerts for reports made within that range.
  3. To re-enable a disabled range, drag it back to the "Enabled Ranges" table.
  4. To permanently remove a range, click the button.
  5. To fetch the latest data, (e.g., report counts), click the button.

Range Alerts: Basic vs. Premium Comparison

Features Basic Premium
Tracked Ranges Limit 5 25
Alert Frequency Daily Hourly, Daily, Weekly, Monthly
Grouped Email Alerts ✓ ✓

What to Expect in Your Alerts

Once you have set up Range Alerts, you will receive email notifications based on the frequency and type you have selected. Here are examples of what these notifications look like:

Single range email example

Individual Email Example

Grouped ranges email example

Grouped Email Example

Best Practices for Using Range Alerts

To maximize the effectiveness of Range Alerts, consider the following tips:

  • Keep your IP ranges updated: Regularly review and update your tracked ranges to reflect changes in your network.
  • Collaborate with your team: Share alerts with IT and security teams to ensure timely resolutions of issues.