↳ GitHub sourceSolution

AbuseIPDB

Description

The [AbuseIPDB](https://www.abuseipdb.com/about) solution for Microsoft Sentinel allows you to check the reputation of IP addresses in log data and perform automated actions like enriching a Microsoft Sentinel incident by IP reputation information, add blacklisted IP addresses to ThreatIntelligenceIndicator table and reporting IPs to Abuse IPDB based on a user response in Teams.

Version: 3.0.2
Declared author / publisher: Microsoft - support@microsoft.com
Support tier: Microsoft

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/AbuseIPDB/Data/Solution_AbuseIPDB.json ↗
Commit: 7ca9800 ↗
Source identifier: azure-sentinel-solution-abuseipdb

Additional source files 2

Solutions/AbuseIPDB/Data/Solution_AbuseIPDB.jsonsolution-manifest ↗Solutions/AbuseIPDB/SolutionMetadata.jsonsolution-metadata ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.