Skill guides · 2 min read
IP abuse history
Review attributed public abuse observations for an IP address.
When to use it
Use this to review attributed abuse reports for a specific IP address and understand what was observed over time. Copy the exact address from your evidence so similarly formatted addresses do not become part of the same investigation by mistake.
Before you start
Available on Agency. Fill every required field. Example values below illustrate the form; replace them with your intended subject.
| Field | Required | What to enter |
|---|---|---|
| IP address | Required | The exact IP address to investigate. |
Run the Skill
- In Skill library, find IP abuse history and select Use template.
- Fill in the template fields using your subject’s details, then check the Preview.
- Select Insert into chat to load the prepared request into the investigation composer.
- Check the intended case and send the unchanged request to run this Skill. To change its inputs, return to the template and insert it again.
IP address: 192.0.2.1
Read the results
Check the report category, observation date, attribution, and confidence before interpreting a pattern. Multiple reports can describe repeated observations without identifying an operator or proving an allegation. Compare the dates with the period you are investigating, because network assignments can change. Missing reports do not establish a clean history; they only describe the coverage available to this lookup.