---
title: "AbuseIPDB integration for LuumenAI"
url: "https://www.luumen.ai/integrations/abuseipdb/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# AbuseIPDB integration for LuumenAI

Check IP reputation during an incident, and report abuse when you have evidence

## What LuumenAI can do with AbuseIPDB

LuumenAI connects to AbuseIPDB with an API token and exposes 6 tools (4 read-only · 1 write · 1 destructive). For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

## Key facts

- Authentication: API token
- Tools available: 6 tools (4 read-only · 1 write · 1 destructive)
- Deployment: scoped as part of your Pilot, Platform, or Managed rollout
- Category: Identity & security

## About AbuseIPDB with LuumenAI

Connect AbuseIPDB and Luumen can look up any address you see in a log line — its abuse confidence score, the countries and categories it has been reported under, and the individual reports behind the number. Ranges work too, so you can score a whole CIDR block before you write a firewall rule. Reporting back is a held, approved step.

## Example tools

Read-only (4 in total):

- `ABUSELPDB_BLACKLIST` — Retrieves a list of the most reported malicious IP addresses from AbuseIPDB's database.
- `ABUSELPDB_CHECK_BLOCK` — Check the reputation of all IP addresses in a CIDR range.
- `ABUSELPDB_CHECK_IP` — Check the reputation of an IP address.
- `ABUSELPDB_GET_REPORTS` — Retrieve abuse reports for a specific IP address from AbuseIPDB.

Write and destructive (2 in total, subject to configured approval policy):

- `ABUSELPDB_BULK_REPORT` — Submit multiple IP abuse reports to AbuseIPDB in bulk via CSV upload.
- `ABUSELPDB_CLEAR_ADDRESS` — Remove all reports associated with a specific IP address.

## Frequently asked questions

### How does LuumenAI connect to AbuseIPDB?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in AbuseIPDB on its own?

For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

### Is there an audit trail?

Every call to AbuseIPDB — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/abuseipdb/