Skip to main content

AbuseIPDB-style reputation

Dhal includes an AbuseIPDB-compatible reputation provider.

export ABUSEIPDB_API_KEY="..."
{
  "ip": {
    "reputation": {
      "enabled": true,
      "provider": "abuseipdb",
      "apiKeyEnv": "ABUSEIPDB_API_KEY",
      "minScore": 75,
      "cacheTtlSeconds": 86400,
      "maxAgeInDays": 30,
      "mode": "async",
      "timeoutMs": 750
    }
  }
}

Async mode​

Async mode is preferred for hot-path performance. It avoids blocking every new request on a remote reputation lookup.

Blocking mode​

Blocking mode should only be used after latency and availability testing.

Diagnostics​

npx dhal doctor

The doctor checks whether the configured API key environment variable is present when reputation is enabled.