Introduction

The IPAbuse API gives you programmatic access to our community-powered IP reputation database — covering abuse reports, risk scoring, blocklists, and more. It is the same API that powers ipabuse.org.

Base URL

All requests are made to:

https://api.ipabuse.org

Authentication

Every request must include your API key in the X-API-Key header (or as a JWT bearer token for user-scoped operations). See the Authentication guide for full details.

Response format

All responses are JSON. Successful responses wrap data in a data field. Errors return a top-level error string. See Errors for codes.

// Success
{ "success": true, "data": { ... } }

// Error
{ "error": "Unauthorized", "details": "Missing X-API-Key header" }

Versioning

The current stable version is v1. All v1 endpoints are prefixed with /v1/. We follow semantic versioning and will give at least 6 months deprecation notice before removing an endpoint.

Next steps