Blacklist Triage
A 2-step recipe with AbuseIPDB. We can help you get access.
Recipe · 2 steps
Blacklist Triage
with AbuseIPDB · Threat Detection & Response Management
Pull the blacklist, then deep-check its first entry to enrich it before blocking.
- Download the community blacklist at or above the supplied confidence floor and capture the first entry for enrichment.
- Run a verbose single-IP check on the first blacklist entry to pull its full reputation profile and recent reports before it is blocked.
What you'll need to have ready
- apiKey: AbuseIPDB API key supplied via the Key header.
- confidenceMinimum: Minimum abuse confidence score for blacklist entries (25-100).
- limit: Maximum number of blacklist entries to return.
- maxAgeInDays: Restrict reports considered on the enrichment check to the last N days (1-365).
For your developer
Arazzo workflow abuseipdb:blacklist-triage, 2 operations: getBlacklist → checkIp. Specs on APIs.io.