n8n-nodes-abuseipdb

This is an n8n community node for interacting with the AbuseIPDB API.

AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.

Installation

Follow the installation guide in the n8n community nodes documentation.

Operations

Check IP

Check if an IP address has been reported for malicious activity.

• IP Address: The IPv4 or IPv6 address to check (e.g., 8.8.8.8 or ::1)
• Days (optional): Check for reports in the last N days (default: 30)
• Verbose (optional): Include comments and reporter user ID

Check CIDR

Check a network block for reported IP addresses.

• CIDR Network: IPv4 address block in CIDR notation (e.g., 207.126.144.0/20)
• Days (optional): Check for reports in the last N days (default: 30)
• Verbose (optional): Include comments and reporter user ID

Report IP

Report an IP address for malicious activity.

• IP Address: The IPv4 or IPv6 address to report
• Categories: One or more abuse categories
• Comment (optional): Description of the malicious activity

Credentials

You need an AbuseIPDB API key to use this node. Get one at https://www.abuseipdb.com/account/api

Abuse Categories

| ID | Category | |----|----------| | 1 | DNS Compromise | | 2 | DNS Poisoning | | 3 | Fraud Orders | | 4 | DDoS Attack | | 5 | FTP Brute-Force | | 6 | Ping of Death | | 7 | Phishing | | 8 | Fraud VoIP | | 9 | Open Proxy | | 10 | Web Spam | | 11 | Email Spam | | 12 | Blog Spam | | 13 | VPN IP | | 14 | Port Scan | | 15 | Hacking | | 16 | SQL Injection | | 17 | Spoofing | | 18 | Brute-Force | | 19 | Bad Web Bot | | 20 | Exploited Host | | 21 | Web App Attack | | 22 | SSH | | 23 | IoT Targeted |

Testing

Use private IP addresses for testing (e.g., 127.0.0.1).

License

MIT