Skip to Content
ReferenceAPI referenceAbuseIPDB

List the IPs on AbuseIPDB's blacklist

GET
/api/v1/abuseipdb/blacklist

Returns GeoMetrikks' copy of AbuseIPDB's blacklist, which the scheduler downloads every ABUSEIPDB_BLACKLIST_REFRESH_HOURS hours, 24 by default, or reads from ABUSEIPDB_BLACKLIST_FILE. Read from the local database; nothing leaves the server. ips is empty and both times are null with ABUSEIPDB_BLACKLIST_ENABLED=false, before the first download, and when the list is more than 72 hours old. With a file, refreshedAt is when the file was last written. The list is for your own use, and AbuseIPDB forbids republishing it.

Authorization

cookiesession<token>

Session cookie authentication.

Response Body

Request fulfilled, document follows

application/json
  1. response

The IPs on AbuseIPDB's blacklist, as of the last download or file read.

generatedAt*|

When AbuseIPDB generated the list, as ISO 8601 in UTC. For a plaintext ABUSEIPDB_BLACKLIST_FILE, when the file was last written. Null when ips is empty.

ips*array<string>

The listed IPs in their canonical spelling.

refreshedAt*|

When GeoMetrikks downloaded the list, as ISO 8601 in UTC. With ABUSEIPDB_BLACKLIST_FILE, when the file was last written. Null when ips is empty.

Example Request
curl -X GET 'https://geometrikks.example.com/api/v1/abuseipdb/blacklist'
Example Response
{  "generatedAt": "2019-08-24T14:15:22Z",  "ips": [    "string"  ],  "refreshedAt": "2019-08-24T14:15:22Z"}