Skip to Content
ReferenceAPI referenceAbuseIPDB

Check an IP on AbuseIPDB

GET
/api/v1/abuseipdb/check

Asks AbuseIPDB what it knows about the IP: its confidence score, report counts, usage type and ISP. Only the IP leaves the server, and each answer is cached for 15 minutes, so a repeat check spends nothing from the daily quota. A private or reserved address gets a 400 without a request.

Authorization

cookiesession<token>

Session cookie authentication.

Query Parameters

ipAddress*string

The IP, IPv4 or IPv6. A private, reserved or malformed address gets a 400.

Response Body

Request fulfilled, document follows

application/json
  1. response

What AbuseIPDB knows about an IP.

abuseConfidenceScore*integer

AbuseIPDB's confidence from 0 to 100 that it is abusive.

countryCode*|

The ISO 3166-1 alpha-2 country code AbuseIPDB names.

domain*|

The domain AbuseIPDB ties to the IP.

ipAddress*string

The checked IP.

isTor*boolean

True when the IP is a Tor exit node.

isWhitelisted*|

True when AbuseIPDB whitelists the IP. Null when AbuseIPDB does not say.

isp*|

The ISP AbuseIPDB names.

lastReportedAt*|

The newest report, as ISO 8601 in UTC. Null if none.

numDistinctUsers*integer

Distinct AbuseIPDB users behind those reports.

totalReports*integer

Reports on the IP in the last 30 days.

usageType*|

AbuseIPDB's usage type, such as Data Center/Web Hosting/Transit.

Example Request
curl -X GET 'https://geometrikks.example.com/api/v1/abuseipdb/check?ipAddress=string'
Example Response
{  "abuseConfidenceScore": 0,  "countryCode": "string",  "domain": "string",  "ipAddress": "string",  "isTor": true,  "isWhitelisted": true,  "isp": "string",  "lastReportedAt": "2019-08-24T14:15:22Z",  "numDistinctUsers": 0,  "totalReports": 0,  "usageType": "string"}