# Abuseipdb Api

> AbuseIPDB API reference. IP reputation and abuse report lookups.

- **Type:** Skill
- **Install:** `agentstack add skill-liberty91ltd-cti-skills-abuseipdb-api`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Liberty91LTD](https://agentstack.voostack.com/s/liberty91ltd)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Liberty91LTD](https://github.com/Liberty91LTD)
- **Source:** https://github.com/Liberty91LTD/cti-skills/tree/main/skills/abuseipdb-api
- **Website:** https://liberty91.com/cti-skills

## Install

```sh
agentstack add skill-liberty91ltd-cti-skills-abuseipdb-api
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# AbuseIPDB API v2

## Base URL
`https://api.abuseipdb.com/api/v2`

## Authentication
Header: `Key: $ABUSEIPDB_API_KEY`
Also: `Accept: application/json`

## Rate Limits
- Free: 1000 checks/day, 500 reports/day
- Premium: Higher limits

## Key Endpoints

### Check IP
```bash
curl -s "https://api.abuseipdb.com/api/v2/check" \
  -G -d "ipAddress={ip}" -d "maxAgeInDays=90" -d "verbose" \
  -H "Key: $ABUSEIPDB_API_KEY" -H "Accept: application/json"
```
**Useful fields:**
- `data.abuseConfidenceScore` — 0-100 abuse confidence
- `data.totalReports` — number of abuse reports
- `data.numDistinctUsers` — unique reporters
- `data.lastReportedAt` — most recent report
- `data.isp` — ISP name
- `data.usageType` — usage type (Data Center, ISP, etc.)
- `data.countryCode` — country
- `data.domain` — associated domain
- `data.isTor` — Tor exit node flag
- `data.reports[]` — individual reports (with `verbose`)

### Check Network (CIDR)
```bash
curl -s "https://api.abuseipdb.com/api/v2/check-block" \
  -G -d "network={cidr}" -d "maxAgeInDays=90" \
  -H "Key: $ABUSEIPDB_API_KEY" -H "Accept: application/json"
```

## Confidence Score Interpretation
| Score | Meaning |
|-------|---------|
| 0 | No reports, clean |
| 1-25 | Low confidence of abuse |
| 26-50 | Moderate — some reports |
| 51-75 | High — significant abuse reports |
| 76-100 | Very high — widely reported as abusive |

## Response Summary Format
```yaml
ip: 
abuse_confidence: 
total_reports: 
distinct_reporters: 
last_reported: 
isp: 
usage_type: 
country: 
is_tor: 
verdict: clean|low-risk|suspicious|malicious
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Liberty91LTD](https://github.com/Liberty91LTD)
- **Source:** [Liberty91LTD/cti-skills](https://github.com/Liberty91LTD/cti-skills)
- **License:** MIT
- **Homepage:** https://liberty91.com/cti-skills

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-liberty91ltd-cti-skills-abuseipdb-api
- Seller: https://agentstack.voostack.com/s/liberty91ltd
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.