Plugin
Updated
Gravity Forms AbuseIPDB Add-On
This is a Gravity Forms add-on made by Gravity Forms that checks the IP address behind each form submission against AbuseIPDB, a database of reported abusive IPs. Submissions from IPs with a poor reputation can be blocked or marked as spam, which cuts down on junk entries.
- Version
- 1.1.0
- Released
- Oct 1, 2026
- Developer
- Gravity Forms
- Type
- WordPress plugin
- Licence
- GPL
- Included in
- Every plan, or $1.03 on its own
What’s new in Gravity Forms AbuseIPDB Add-On 1.1.0
Version 1.1.0 · Oct 1, 2026
Latest
- NewAdded a local IP blocklist setting to cover AbuseIPDB reporting delays.
- NewAdded support for marking submissions from Tor exit nodes as spam.
- ImprovedUpdated the add-on settings page to display a message when the daily API request limit has been reached.
- ImprovedUpdated to add a note to the entry when the IP is not evaluated (on submission) or reported (on mark as spam) because the daily API request limit has been reached.
- ImprovedUpdated the user-agent used for the API requests.
- FixedFixed an issue on new installs causing the Mark Tor Submissions as Spam setting to not be enabled as expected.
- FixedFixed an issue where the AbuseIPDB entry meta values are lost on entry edit when the daily API request limit has been reached.
- FixedFixed an issue on new installs where checking an IP fails with a 422 status code if the settings are not resaved after initially saving a valid key.
What it does
Spam and abusive submissions often come from IP addresses that other site owners have already reported. This add-on looks up the submitter's IP in AbuseIPDB when a form is sent and uses that reputation data to decide how to treat the entry. You set the severity threshold yourself, so you can choose how strict the filtering should be and keep legitimate visitors from being caught by mistake.
It works across all the Gravity Forms on your site and is managed from the WordPress dashboard without any coding. Beyond the AbuseIPDB lookup, you can keep a local IP blocklist to cover gaps while new reports reach the database, and mark submissions from Tor exit nodes as spam. When the daily API request limit is reached, the settings page tells you, and affected entries get a note explaining that the IP was not evaluated or reported.
Best for
- WordPress sites using Gravity Forms that receive frequent spam
- Agencies managing contact and lead forms for clients
- Blogs, shops and membership sites with public forms
Features
Automatic IP checks
Each form submission's IP address is checked against AbuseIPDB's database of reported addresses, so known abusive sources can be stopped before the entry is accepted.
Configurable blocking threshold
Set the severity level at which an IP gets blocked, balancing how strict the filter is against the chance of turning away real visitors.
Local IP blocklist
Add your own list of IP addresses to block, which helps cover delays before fresh abuse reports show up in AbuseIPDB.
Tor exit node handling
Choose to mark submissions coming from Tor exit nodes as spam, giving you another way to filter anonymous traffic on your forms.
Logs of blocked attempts
Review logs of blocked submissions and related data from the dashboard to see which IPs were stopped and spot patterns in unwanted traffic.
Coverage for multiple forms
Protection applies to all Gravity Forms on your site at once, so you do not need to set up each form separately.
API limit notices
The settings page shows a message when the daily API request limit is reached, and entries get a note when an IP was not checked or reported.
Gravity Forms AbuseIPDB Add-On older versions
- 1.0.0.2Aug 20
Members and buyers of this product can download older versions.
Questions about Gravity Forms AbuseIPDB Add-On
Do I need Gravity Forms to use this add-on?
Yes. It is built specifically for Gravity Forms and works with the forms you create in it. It checks submissions made through those forms and protects all of them on your site at the same time.
Can I control how aggressive the blocking is?
Yes. You can configure the severity threshold used to decide when an IP should be blocked. A lower threshold filters more traffic, while a higher one is more forgiving, so you can pick a level that suits your audience.
What happens if AbuseIPDB has not yet received reports about an IP?
You can add addresses to a local IP blocklist in the settings. This lets you block specific IPs right away while reports about them are still making their way into the AbuseIPDB database.
What if my daily AbuseIPDB API request limit runs out?
The add-on displays a message on its settings page when the daily limit is reached. Entries submitted or marked as spam during that time get a note saying the IP was not evaluated or reported, so you know which ones were skipped.
Is Gravity Forms AbuseIPDB Add-On free?
The code of Gravity Forms AbuseIPDB Add-On is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of Gravity Forms AbuseIPDB Add-On is this?
Version 1.1.0, released Oct 1, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update Gravity Forms AbuseIPDB Add-On?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of Gravity Forms AbuseIPDB Add-On automatically and keeps a backup, so you can roll back.
More from Gravity Forms
