All integrationsSecurity

AbuseIPDB

Check IP addresses against AbuseIPDB, the shared database of addresses seen attacking servers: get an abuse confidence score, see who reported an address and why, check a whole network, pull the blacklist of the most-reported addresses, and report attackers yourself.

actions
7

Actions

Steps a workflow can run in AbuseIPDB.

  • Check IP addressFind out how likely an IP address is to be abusive: its abuse confidence score from 0 to 100, how often it was reported, and who runs it (company, kind of network and country). An address nobody reported is an answer, not an error: its score is 0.
  • List reportsGet the reports filed against an IP address, newest first: when, what for, and what each reporter saw.
  • Check networkFind every reported IP address in a network, such as 203.0.113.0/24, with each one's abuse confidence score. Give a single IP address to check the /24 network around it. The free plan checks networks up to /24, going back up to 30 days.
  • Get blacklistGet AbuseIPDB's blacklist: the most-reported IP addresses, most certain and most recently reported first. Use it to keep a firewall or blocklist up to date.
  • Report IP addressReport an IP address that attacked you, and get back its updated abuse confidence score. AbuseIPDB takes one report of an address from your account every 15 minutes: a second one comes back with 'reported' false instead of stopping the run.
  • Report IP addresses in bulkReport up to 9,999 IP addresses at once, all with the same categories and comment. Addresses that can't be reported (not an IP address, or a duplicate) are listed with the reason, and the rest are still reported.
  • Delete my reportsDelete every report your account made of an IP address, for example one reported by mistake. Other users' reports stay.

Automate AbuseIPDB with Lodol.

Connect AbuseIPDB and ask your AI for your first workflow.

Free plan, no credit card