Investigate IP
A 2-step recipe with AbuseIPDB. We can help you get access.
Recipe · 2 steps
Investigate IP
with AbuseIPDB · Threat Detection & Response Management
Check an IP and list its reports when the abuse confidence score is high enough.
- Look up the IP's abuse confidence score to decide whether its full report history is worth retrieving.
- Retrieve the first page of recent reports for the IP so the supporting evidence behind its high score can be reviewed.
What you'll need to have ready
- apiKey: AbuseIPDB API key supplied via the Key header.
- ipAddress: The IPv4 or IPv6 address to investigate.
- scoreThreshold: Pull the report history only when the abuse confidence score is at or above this value.
- maxAgeInDays: Restrict reports considered to the last N days (1-365).
- perPage: Number of reports to return per page when listing report history.
For your developer
Arazzo workflow abuseipdb:investigate-ip, 2 operations: checkIp → listReports. Specs on APIs.io.