AbuseIPDB · JSON Structure

Abuseipdb Report Structure

Structure of a single AbuseIPDB abuse report.

Type: object Properties: 7
Anti MalwareBlacklistCyber SecurityIP ReputationNetwork SecurityPublic APIsThreat Intelligence

Report is a JSON Structure definition published by AbuseIPDB, describing 7 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

ip categories comment timestamp reporterId reporterCountryCode reporterCountryName

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑ 
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/abuseipdb/refs/heads/main/json-structure/abuseipdb-report-structure.json",
  "name": "Report",
  "description": "Structure of a single AbuseIPDB abuse report.",
  "type": "object",
  "properties": {
    "ip": { "type": "string", "description": "Reported IPv4 or IPv6 address." },
    "categories": {
      "type": "array",
      "description": "AbuseIPDB category IDs that classify the report.",
      "items": { "type": "int32" }
    },
    "comment": { "type": "string", "description": "Optional description and supporting log evidence." },
    "timestamp": { "type": "string", "description": "ISO 8601 timestamp of the reported abuse event." },
    "reporterId": { "type": "int32", "description": "Identifier of the reporting account (response only)." },
    "reporterCountryCode": { "type": "string", "description": "ISO 3166-1 alpha-2 country code of the reporter." },
    "reporterCountryName": { "type": "string", "description": "Country name of the reporter." }
  }
}