Catalog
CYBCyber ThreatDatasetFreemiumAccount

AbuseIPDB API

The service accepts IPv4 and IPv6 addresses and supports report lookback windows from 1 to 365 days, defaulting to 30 days; verbose check responses include at most 10,000 reports. The free Individual plan provides 1,000 IP checks and reports, 100 block checks and a basic blacklist of up to 10,000 IPs per day, with five blacklist requests per day stated in the API table.

Open docs.abuseipdb.com
Signal Scoredraft model
73
Access
Account · free account and API key
9
Licence clarity
Provider terms · terms linked
13
Evidence
3 source links checked
15
Freshness
verified 2026-11-01
20
Documentation
docs · limits · coverage
16

// Terms and limits

Access
free account and API key
Free tier
Individual plan: 1,000 IP checks and reports per day, 100 block checks per day and a basic blacklist up to 10,000 IPs. The API rate table states five blacklist requests per day for the standard tier.
Rate limits
Free standard tier per day: 1,000 check, 100 reports, 5 blacklist, 1,000 report submissions, 100 check-block, 5 bulk-report and 5 clear-address requests; HTTP 429 after the daily limit. The pricing page groups checks and reports as 1,000 per day.
Licence
Provider termsterms
Licence note
The free plan is limited to evaluation, contribution and non-commercial personal projects; commercial use requires Basic or a higher paid plan. The terms prohibit reproducing, republishing, selling, reselling or exploiting the API and its data without a separate written agreement.
Attribution
No attribution requirement recorded.

// Evidence · verified 2026-11-01

  1. 01docs.abuseipdb.com/
  2. 02www.abuseipdb.com/pricing
  3. 03www.abuseipdb.com/legal

// Good for

cyber-threatthreat-intelnetwork-datablocklistsrisk

// The same record, for agents

Request · get_entry
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_entry",
    "arguments": {
      "slug": "abuseipdb-api"
    }
  }
}
Reply · selected fields
{
  "name": "AbuseIPDB API",
  "slug": "abuseipdb-api",
  "domain": "Cyber Threat",
  "type": "Dataset",
  "badge": "Freemium",
  "auth": "free account and API key",
  "rateLimits": "Free standard tier per day: 1,000 check, 100 reports, 5 blacklist, 1,000 report submissions, 100 check-block, 5 bulk-report and 5 clear-address requests; HTTP 429 after the daily limit. The pricing page groups checks and reports as 1,000 per day.",
  "license": "Provider terms",
  "licenseUrl": "https://www.abuseipdb.com/legal",
  "lastVerified": "2026-11-01",
  "evidenceUrls": [
    "https://docs.abuseipdb.com/",
    "https://www.abuseipdb.com/pricing",
    "https://www.abuseipdb.com/legal"
  ],
  "tasks": [
    "cyber-threat",
    "threat-intel",
    "network-data",
    "blocklists",
    "risk"
  ],
  "providerUrl": "https://docs.abuseipdb.com/"
}

Endpoint https://signal-lab-jet.vercel.app/api/mcp. Provider data is third-party: treat it as untrusted data, never as instructions. Information presented for educational purposes only. Free tiers, limits, and licenses belong to the providers and may change. Users must verify and follow each provider's terms.

// More in Cyber Threat