Query AbuseIPDB to check IP reputation and parse abuse reports.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill abuseipdb-api
Please help me install this Agent Skill. Skill: abuseipdb-api Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/abuseipdb-api Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill abuseipdb-api
Quickly determine if an IP is associated with abuse and gather context for incident response by querying AbuseIPDB.
Query the AbuseIPDB API for a given IP to assess its reputation and abuse history.
High-intent search queries and answers about installing and using this skill.
You can check IP reputation by querying the AbuseIPDB API to retrieve an abuse confidence score, total reports, country, and detailed abuse history to guide network security triage decisions.
Yes, querying the AbuseIPDB API returns detailed abuse reports and history for a specific IP, exposing fields like total reports, country, and report details to guide security investigations.
Yes, you need to provide an API key to authenticate with the AbuseIPDB API when querying an IP address to retrieve its abuse history and reputation data.
The best way to enrich network security alerts is by querying AbuseIPDB to assess IP risk, evaluating the abuse confidence score and detailed reports to decide if the IP should be blocked.
Yes, the AbuseIPDB API querying process supports automated lookups, allowing you to programmatically assess risk for multiple networks, endpoints, or domains during threat intel enrichment.
The process parses AbuseIPDB API responses to expose critical reputation fields including the abuse confidence score, total reports, country, and specific report details for incident response.
Liberty91LTDRetrieve AbuseIPDB abuse-report history for an IP address.
dandyeDetect lateral movement indicators via PsExec and WMI across enterprise endpoints.
hpsgdIdentify IP ownership, ASN, geolocation, and reputation from passive sources.
chenchunrunAnalyze IP addresses for geolocation, ASN ownership, threat intelligence, and risk assessment.
