greatapis

Anti-Malware — entry 001 of 15

AbuseIPDB

Verified Jul 2026

AbuseIPDB is a crowdsourced IP, domain, and URL reputation database where network operators report malicious activity like brute-force attempts, spam, and port scans. A live GET against the real gateway, api.abuseipdb.com/api/v2/check, returned a 401 with an invalid key rather than a CORS-enabled response, reconfirming API-key auth over HTTPS and resolving cors to no. A free Individual tier allows 1,000 checks a day forever with no card required, while paid Basic/Premium/Enterprise plans raise the daily ceiling for high-volume users.

ip-reputationthreat-intelligenceabuse-reportingsecurityapi-key
Visit docs.abuseipdb.com ↗Status ↗More Anti-Malware
AuthenticationAPI KeySign up with the provider to obtain credentials.
HTTPSSupportedTraffic is encrypted in transit.
CORSDisabledBrowser calls need a server-side proxy.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score61out of 100
Authentication15/25API key required
Pricing17/20Freemium tier available
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 61 on greatapis.com
<a href="https://greatapis.com/api/abuseipdb/"><img src="https://greatapis.com/badge/abuseipdb.svg" alt="Scored 61 on greatapis.com"></a>

Auth quickstart

  1. Sign up with the provider to get an API key.
  2. Send it on every request as a headerAuthorization: <key>
  3. The exact header isn't documented — Authorization is a common default; confirm in the provider's docs.
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.

Developer reference

Rate limit

1,000 requests/day free (Individual tier); higher on paid Basic/Premium/Enterprise plans

People comparing AbuseIPDB also look at…

All 15 →

AbuseIPDB vs Google Safe Browsing

Google Safe Browsing supports CORS, while AbuseIPDB doesn't — pick Google Safe Browsing for direct browser calls.

Compare →

AbuseIPDB vs AlienVault Open Threat Exchange (OTX)

AlienVault Open Threat Exchange (OTX) supports CORS, while AbuseIPDB doesn't — pick AlienVault Open Threat Exchange (OTX) for direct browser calls.

Compare →

AbuseIPDB vs CAPEsandbox

CAPE (Config And Payload Extraction) is an open-source malware sandbox, forked from Cuckoo, that detonates submitted files and URLs to extract IOCs, dropped payloads, and decrypted configuration data through a REST API. Its docs point to a free public community instance at capesandbox.com; a live POST and OPTIONS preflight against its real apiv2/api-token-auth endpoint both returned no Access-Control-Allow-Origin header, resolving cors to no, and confirmed the instance issues a DRF token from a username/password exchange rather than a bare API key. Self-hosting the open-source project or registering on the community instance is free.

Compare →

AbuseIPDB vs MalShare

MalShare supports 2 response formats, while AbuseIPDB offers fewer — pick MalShare for more integration flexibility.

Compare →

AbuseIPDB vs MalDatabase

MalDatabase supports 2 response formats, while AbuseIPDB offers fewer — pick MalDatabase for more integration flexibility.

Compare →

AbuseIPDB vs NoPhishy

NoPhishy supports CORS, while AbuseIPDB doesn't — pick NoPhishy for direct browser calls.

Compare →

Scanii

Simple REST API that can scan submitted documents/files for the presence of threats

Basic Auth · CORS

URLScan.io

Scan and Analyse URLs

API Key · CORS

MalwareBazaar

Collect and share malware samples

API Key

URLhaus

Bulk queries and Download Malware Samples

API Key

VirusTotal

VirusTotal File/URL Analysis

API Key

Web of Trust

IP/domain/URL reputation

API Key · CORS