# Reports returned is incorrect about bulkcheck HOT 3 CLOSED

This might be because the script does not set the "maxAgeInDays" parameter when querying the API. So the API uses the default "maxAgeInDays" value of 30 days, see https://docs.abuseipdb.com/#check-endpoint

This could be the reason the script always returns less reports, because it only counts reports made in the last 30 days.

from bulkcheck.

Thanks for jumping in here @bastiaan-deltics. Yes, the discrepancy between MaxAgeInDays (which by default is 30 for API calls) and lookups through a web browser at abuseipdb.com (which go further back) are likely why this is happening. An adjustable MaxAgeInDays value is something that I would like to implement in a future version of the script.

from bulkcheck.

I modified line 317 to this:
Invoke-WebRequest -Uri ("https://api.abuseipdb.com/api/v2/check?ipAddress=$($_.IP)&maxAgeInDays=365") -Headers @{'Accept' = 'application/json'; 'Key' = $ApiKey} -usebasicparsing | add-content -path $jsonTempPath

The max # of days the API can return is 365 (unlike the AbuseIPDB web site, where a single IP query goes back to day #1).. its the best that I could do. I recommend modifying the script's readme file to inform users that it returns only the past 30 days though...

from bulkcheck.