Is this IP known for abuse? Neo checks before it decides.
Neo checks the IP addresses in your security alerts against AbuseIPDB's abuse reports.
What Neo does with AbuseIPDB.
IP reputation
Neo reads an IP's abuse confidence score, reports, ISP, usage type and Tor flag.
Network check
Neo checks a whole subnet for reported addresses.
Report attackers
Neo files an abuse report on an IP, with the categories and a clean comment.
Concrete work Neo handles in AbuseIPDB.
Sign-in alert from an odd IP
Neo checks the IP's abuse score before it calls the alert noise or a threat.
SOC triage with evidence
Neo adds the IP's reputation and recent report categories to the ticket note.
Confirmed attacker
Neo reports the IP to AbuseIPDB once a technician confirms the attack.
Set it up with Neo.
Connect AbuseIPDB
Enter the credentials the AbuseIPDB card on Neo's Integrations page asks for. The setup guide shows where to find each one.
Start from a use case
Open the AbuseIPDB card's "What Neo can do" tab and press Set up with Neo on the job you want.
Build it with Neo Support
Neo Support picks the tools and the AbuseIPDB access the job needs, and builds the agent with you.
Questions about the AbuseIPDB integration.
What does Neo need to connect to AbuseIPDB?+
The credentials the AbuseIPDB card on Neo's Integrations page asks for, from your AbuseIPDB account. The setup guide shows where to find each one.
How do I set up one of these use cases?+
Connect AbuseIPDB, open its "What Neo can do" tab in the Neo dashboard and press Set up with Neo on the use case. Neo Support builds the agent with you.