Free IP reputation API
isipsafe has a free REST API for IP reputation. You can look up 400 addresses per 24 hours without a key, or 10,000 with a free account, which is also used to report attacks and download the blacklist.
Check an address
curl -s "https://isipsafe.com/api/v1/check?ip=203.0.113.7"The response includes these fields, among others:
| Field | Meaning |
|---|---|
abuseConfidenceScore | The score, from 0 to 100 |
totalReports | Number of reports |
categories | The reported attack types |
isTor | Whether it is a Tor exit |
countryCode, asn, isp | Location and network |
Report an attack
This needs a free key:
curl "https://isipsafe.com/api/v1/report?key=YOUR_KEY" -d ip=203.0.113.7 -d categories=ssh,brute-force -d comment="sshd brute force"Download the blacklist
curl -s "https://isipsafe.com/api/v1/blocklist?key=YOUR_KEY&format=txt&confidenceMinimum=90"In your language
There are examples for Python, Node.js, Go, PHP, Java, .NET and Rust. The API reference has every endpoint, and /api/v2 follows AbuseIPDB's API for easier switching.
What the free plan is for
Free use covers protecting systems you own or run for your employer or clients. Building the data into your own product or reselling it needs an Enterprise licence.