AbuseIPDB

Details
Content
Dependencies
Version History

Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration.

Automations

Name	Description
AbuseIPDBPopulateIndicators	Extracts IP addresses on block lists from AbuseIPDB, and Populates Indicators accordingly.

Integrations

Name	Description
AbuseIPDB	Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration.

Automations

Name	Description
AbuseIPDBPopulateIndicators	Extracts IP addresses on block lists from AbuseIPDB, and Populates Indicators accordingly.

Integrations

Name	Description
AbuseIPDB	Central repository to report and identify IP addresses that have been associated with malicious activity online. Check the Detailed Information section for more information on how to configure the integration.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

1.1.6 - 10935523 (July 12, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.10404775.

Related pull requests:
- 45017

Download

1.1.5 - 10518477 (June 28, 2026)

Integrations

Documentation and metadata improvements.
Updated the Docker image to: demisto/python3:3.12.13.10404775.

Related pull requests:
- 44858

Download

1.1.4 - 10281058 (June 18, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.10116658.

Related pull requests:
- 44716

Download

1.1.3 - 8994397 (May 13, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.8428455.

Related pull requests:
- 44128

Download

1.1.2 - 8158675 (April 9, 2026)

Integrations

AbuseIPDB

Fixed an issue where the integration commands failed when provided with unexpected arguments.

Related pull requests:
- 43789

Download

1.1.1 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.0 - 7405158 (March 2, 2026)

Integrations

AbuseIPDB

Added support for the Abuse.ch Hunting API URL parameter.
Added support for the Abuse.ch Hunting API Key parameter.
Added support for the abuseipdb-get-fplist command that returns a false positive list (fpl) from the abuse.ch file. The list contains indicators (ips and domains) that have been removed from their blocklists.

Related pull requests:
- 43315

Download

1.0.40 - 7175321 (February 16, 2026)

Integrations

AbuseIPDB

Fixed an issue with the handling of proxy configuration.
Updated the Docker image to: demisto/python3:3.12.12.7090913.

Related pull requests:
- 43130

Download

1.0.39 - 6025169 (November 26, 2025)

Integrations

AbuseIPDB

Updated the integrationReliability parameter to optional instead of required.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 42021

Download

1.0.38 - 5717993 (November 3, 2025)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41760

Download

1.0.37 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.0.36 - 4492991 (August 11, 2025)

Integrations

AbuseIPDB

Fixed an issue where the default value for the days argument in the ip command incorrectly overrode the default value of the days parameter.
Updated the Docker image to: demisto/python3:3.12.11.4417419.

Related pull requests:
- 40843

Download

1.1.6 - 10935523 (July 12, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.10404775.

Related pull requests:
- 45017

Download

1.1.5 - 10518477 (June 28, 2026)

Integrations

AbuseIPDB

Documentation and metadata improvements.
Updated the Docker image to: demisto/python3:3.12.13.10404775.

Related pull requests:
- 44858

Download

1.1.4 - 10281058 (June 18, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.10116658.

Related pull requests:
- 44716

Download

1.1.3 - 8994397 (May 13, 2026)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.13.8428455.

Related pull requests:
- 44128

Download

1.1.2 - 8158675 (April 9, 2026)

Integrations

AbuseIPDB

Fixed an issue where the integration commands failed when provided with unexpected arguments.

Related pull requests:
- 43789

Download

1.1.1 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.0 - 7405158 (March 2, 2026)

Integrations

AbuseIPDB

Added support for the Abuse.ch Hunting API URL parameter.
Added support for the Abuse.ch Hunting API Key parameter.
Added support for the abuseipdb-get-fplist command that returns a false positive list (fpl) from the abuse.ch file. The list contains indicators (ips and domains) that have been removed from their blocklists.

Related pull requests:
- 43315

Download

1.0.40 - 7178553 (February 16, 2026)

Integrations

AbuseIPDB

Fixed an issue with the handling of proxy configuration.
Updated the Docker image to: demisto/python3:3.12.12.7090913.

Related pull requests:
- 43130

Download

1.0.39 - 6025169 (November 26, 2025)

Integrations

AbuseIPDB

Updated the integrationReliability parameter to optional instead of required.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 42021

Download

1.0.38 - 5717993 (November 3, 2025)

Scripts

AbuseIPDBPopulateIndicators

Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41760

Download

1.0.37 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.0.36 - 4492991 (August 11, 2025)

Integrations

AbuseIPDB

Fixed an issue where the default value for the days argument in the ip command incorrectly overrode the default value of the days parameter.
Updated the Docker image to: demisto/python3:3.12.11.4417419.

Related pull requests:
- 40843

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	July 12, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.