n8n

Check and report addresses in n8n workflows with the HTTP Request node.

n8n-nodes-isipsafe

Install the Community Node

1. In your n8n dashboard, open Settings › Community Nodes.
2. Click Install a community node.
3. Enter n8n-nodes-isipsafe and confirm.
4. In any workflow, search for isIPsafe to add check IP, report abuse, or download blocklist actions!

Alternative: Using raw HTTP Request nodes

n8n's HTTP Request node talks to the API directly. Store the key once as a credential and use it in any workflow: enrich alerts, triage tickets, or report addresses from a form or a SIEM webhook.

Store the key

In Credentials › Add credential, choose Header Auth. Set Name to Authorization and Value to Bearer sl_your_key_here. Call it isIPsafe.

Check an address

Add an HTTP Request node:

• Method: GET; URL: https://isipsafe.com/api/v1/check
• Authentication: Generic Credential Type › Header Auth › isIPsafe
• Send Query Parameters: on; ip = {{ $json.ip }} (or wherever the address is in your item), maxAgeInDays = 90

The score is then at {{ $json.data.abuseConfidenceScore }}. Follow with an If node (number, larger or equal, 75) to branch on it.

Report an address

Another HTTP Request node with the same credential:

• Method: POST; URL: https://isipsafe.com/api/v1/report
• Send Body: on; Body Content Type: Form Urlencoded
• Fields ip, categories (for example ssh,brute-force) and comment

Under Options › Response, turn on Never Error if the same address can come through twice within 15 minutes; the API answers 429 for repeats.

Coming from an AbuseIPDB node or workflow? Point its URL at https://isipsafe.com/api/v2 and keep the Key header: the v2 API takes the same requests.

Need a hand?

If something here does not work with your version of n8n, or you have improved it, tell us. We update these pages with what people send.

n8n and its logo are trademarks of their respective owners. isipsafe is not affiliated with or endorsed by them.