Abuseipdb Api

AbuseIPDB API v2

Base URL

https://api.abuseipdb.com/api/v2

Authentication

Header: Key: $ABUSEIPDB_API_KEY Also: Accept: application/json

Rate Limits

• Free: 1000 checks/day, 500 reports/day
• Premium: Higher limits

Key Endpoints

Check IP

curl -s "https://api.abuseipdb.com/api/v2/check" \
  -G -d "ipAddress={ip}" -d "maxAgeInDays=90" -d "verbose" \
  -H "Key: $ABUSEIPDB_API_KEY" -H "Accept: application/json"

Useful fields:

• data.abuseConfidenceScore — 0-100 abuse confidence
• data.totalReports — number of abuse reports
• data.numDistinctUsers — unique reporters
• data.lastReportedAt — most recent report
• data.isp — ISP name
• data.usageType — usage type (Data Center, ISP, etc.)
• data.countryCode — country
• data.domain — associated domain
• data.isTor — Tor exit node flag
• data.reports[] — individual reports (with verbose)

Check Network (CIDR)

curl -s "https://api.abuseipdb.com/api/v2/check-block" \
  -G -d "network={cidr}" -d "maxAgeInDays=90" \
  -H "Key: $ABUSEIPDB_API_KEY" -H "Accept: application/json"

Confidence Score Interpretation

| Score | Meaning | |-------|---------| | 0 | No reports, clean | | 1-25 | Low confidence of abuse | | 26-50 | Moderate — some reports | | 51-75 | High — significant abuse reports | | 76-100 | Very high — widely reported as abusive |

Response Summary Format

ip: 
abuse_confidence: 
total_reports: 
distinct_reporters: 
last_reported: 
isp: 
usage_type: 
country: 
is_tor: 
verdict: clean|low-risk|suspicious|malicious

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: Liberty91LTD
• Source: Liberty91LTD/cti-skills
• License: MIT
• Homepage: https://liberty91.com/cti-skills

Install and usage instructions live in the source repository linked above.