IP Abuse Check API • Live on Bitcoin mainnet

Check AbuseIPDB reputation for a public IP in one call.

Use a funded session to query abuse confidence, report counts, usage type, ISP, domain, and last reported time for a public IP address. Built for triage, enrichment, recon, and alert context.

4 sats / call
POST /api/ip-abuse-check
AbuseIPDB-backed

What It Does

IP Abuse Check wraps AbuseIPDB into a small, agent-friendly response. Instead of raw provider JSON, you get the fields that matter most for triage and enrichment in a consistent ArkAPI response wrapper.

  • Returns abuse_confidence_score and report counts
  • Includes usage type, ISP, and domain context when available
  • Returns the most recent report timestamp when AbuseIPDB has one
  • Supports an optional max_age_days filter

Why It Helps

GeoIP tells you where an IP might be. AbuseIPDB tells you whether the address has already been reported for bad behavior. That makes this endpoint a good companion to IP Lookup when you need both context and reputation.

  • Useful for alert triage and log enrichment
  • Good fit for recon pipelines and pentest prep
  • Helps agents prioritize suspicious IPs quickly
  • Current deployment is Bitcoin mainnet

Example Request

curl -X POST https://arkapi.dev/api/ip-abuse-check \ -H "Authorization: Bearer ak_your_token" \ -H "Content-Type: application/json" \ -d '{"ip":"8.8.8.8","max_age_days":30}' | jq

Use a funded token from the Fund page. The endpoint is also described in /openapi.json for service wrappers and agent tooling.

How To Call It

The landing page is public, but the reputation lookup itself still requires a funded session token and a valid JSON body.

Example Body

{ "ip": "8.8.8.8", "max_age_days": 30 }
  • ip is required
  • max_age_days is optional and defaults to 30
  • Use a public IPv4 or IPv6 address

Example Response

{ "success": true, "data": { "ip": "8.8.8.8", "abuse_confidence_score": 0, "country_code": "US", "usage_type": "Content Delivery Network", "isp": "Google LLC", "domain": "google.com", "total_reports": 0, "num_distinct_users": 0, "is_whitelisted": true, "source": "AbuseIPDB", "max_age_days": 30 }, "cost_sats": 4, "balance_remaining": 1496, "response_ms": 124, "endpoint": "/api/ip-abuse-check" }

Good Uses

Need broader context? Use IP Intel for geolocation, ASN, abuse-desk RDAP contact, AbuseIPDB, and URLhaus host summary in one response. If you only need location and network ownership, IP Lookup is the lighter option.

For broader platform usage, see the main docs and the live catalog.

Related APIs

Discovery