AbuseIPDB + Stream Deck
security-&-identity-tools · 0 triggers · 6 actions
AbuseIPDB is a project dedicated to helping make the internet safer by providing a central repository for reporting and checking IP addresses associated with malicious activities. Add AbuseIPDB to your Stream Deck workflows with guided setup for the connection details it needs.
- No code
- Free tier
- One Stream Deck press
- Pairs with OBS & Elgato tools
- OAuth & keys handled in-builder
Popular ways to use AbuseIPDB
Add AbuseIPDB to a workflow and pair it with a Stream Deck button to run it in one press — handy for security-&-identity-tools tasks. Combine it with OBS, your Elgato tools, or any other app you connect to build a routine that fits how you work.
Browse all templatesTriggers & actions
Steps your workflow can perform in AbuseIPDB.
Check IP Reputation
Tool to check the reputation of an IP address. Use when you need to determine if an IP address has been reported for abusive activity within a specified look-back period. Example: CheckIp(ipAddress='8.8.8.8', maxAgeInDays=90).
Get Abuse Reports
Retrieve abuse reports for a specific IP address from AbuseIPDB. Use this tool to view the history of abuse complaints filed against an IP address, including the reported abuse categories, reporter details, and timestamps. Supports pagination for IPs with many reports.
Bulk Report
Submit multiple IP abuse reports to AbuseIPDB in bulk via CSV upload. Use this when you need to report many malicious IPs at once instead of one-by-one. Returns the count of successfully saved reports and details about any invalid entries.
Check Block
Tool to check the reputation of all IP addresses in a CIDR range. Use when you need aggregated abuse data for a network block.
Clear Address Reports
Tool to remove all reports associated with a specific IP address. Use when you need to purge your own abuse records after verifying control of the IP.
Retrieve IP Blacklist
Retrieves a list of the most reported malicious IP addresses from AbuseIPDB's database. Use this tool to build dynamic blocklists, threat intelligence feeds, or firewall rules. The blacklist is updated hourly and contains IPs with high abuse confidence scores. Free accounts receive up to 10,000 IPs. Paid subscriptions unlock filtering options (confidenceMinimum, country filters) and higher limits (up to 500,000 IPs).
About AbuseIPDB
AbuseIPDB is a project dedicated to helping make the internet safer by providing a central repository for reporting and checking IP addresses associated with malicious activities.
security-&-identity-tools
How to connect
1
Sign up for free
Create your Conductor Deck account: no credit card required.
2
Connect AbuseIPDB
Follow the setup prompts for AbuseIPDB. Conductor Deck handles the app authorization or required connection details inside the workflow builder.
3
Build a workflow
Add an AbuseIPDB action to your visual workflow canvas. Configure the options you need, then connect it to other steps.
4
Assign to Stream Deck
Sync your workflow to any Stream Deck button. Press once to trigger the entire sequence.
Frequently asked questions
- How do I connect AbuseIPDB?
- Sign up for Conductor Deck, then add a AbuseIPDB step to a workflow on the visual canvas. The builder walks you through the connection it needs — an account authorization or the required keys — right inside the step. No separate setup or code.
- Is it free?
- Yes — Conductor Deck has a free tier you can build and run workflows on, with no credit card required. Paid plans raise the monthly run limits and add advanced features when you need them.
- What's the difference between a trigger and an action?
- A trigger is the event that starts a workflow — for example, a Stream Deck button press or an incoming event from a connected app. An action is a step the workflow performs once it runs. A workflow is one trigger followed by one or more actions.
Automate AbuseIPDB with your Stream Deck
Sign up for free and start building AbuseIPDB workflows in minutes.