Skip to main content
You connect AbuseIPDB once at the MSP level, with an API key.

​
1. Create an API key

1

Sign in to AbuseIPDB

Sign in at abuseipdb.com, or create a free account there.
2

Create the key

Open Account → API and click Create Key. Name it “Neo” and copy it. Use an APIv2 key; an old APIv1 key does not work.

​
2. Add the key in Neo

1

Open Integrations

Open Integrations → AbuseIPDB in the Neo Dashboard. The card is under Security.
2

Save the key

Paste the API Key and click Save. Neo checks the key with AbuseIPDB before it saves, so a wrong key is rejected straight away. The check uses one of your daily IP checks.

​
3. Turn AbuseIPDB on per agent

Open the agent from Agents, go to the Integrations section, and configure the AbuseIPDB block. To check alert IPs, IP Reputation Lookups at Read Only is enough. Give Abuse Reports Read / Write only to an agent that should report confirmed attackers. AbuseIPDB lets an account report only after it approves it: request reporting privilege on abuseipdb.com/report first, or every report fails. Reports are public, so the Helpdesk and IT Admin profiles ask a technician before each one. To use the result in a SaaS Alerts investigation, give the same agent the SaaS Alerts integration, and name the check in its instructions, for example: “For every alert with an IP address, check the IP with AbuseIPDB and include the score and report categories in your note.” See AbuseIPDB API for what each profile does.