AbuseIPDB

description

AbuseIPDB is a project dedicated to helping make the internet safer by providing a central repository for reporting and checking IP addresses associated with malicious activities.

what casper can do

• Retrieve IP Blacklist — Tool to retrieve a list of the most reported ip addresses. use when building dynamic blocklists or threat intelligence feeds.
• Bulk Report — Tool to submit multiple ip abuse reports in bulk. use when you need to report a large set of ips at once by uploading a csv file with required headers. csv must include columns: ip, categories, reportdate, comment.
• Check Block — Tool to check the reputation of all ip addresses in a cidr range. use when you need aggregated abuse data for a network block.
• Check IP Reputation — Tool to check the reputation of an ip address. use when you need to determine if an ip address has been reported for abusive activity within a specified look-back period. example: checkip(ipaddress='8.8.8.8', maxageindays=90).
• Clear Address Reports — Tool to remove all reports associated with a specific ip address. use when you need to purge your own abuse records after verifying control of the ip.
• Get Abuse Reports — Tool to retrieve a list of abuse reports for a specific ip address. use when you need to fetch historic reports with optional filtering by status, date range, reporter, and pagination.