diff --git a/Getipinfo.py b/Getipinfo.py
index add0eba..a202cf1 100644
--- a/Getipinfo.py
+++ b/Getipinfo.py
@@ -1,11 +1,35 @@
 #!/usr/bin/python3
 
 import sys
+import os
 print ('**************** start *********************')
 measurement_name = (sys.argv[5]) # get measurement from argv
 print ('Measurement-name: '+measurement_name) 
 
-# argv1 = outsideip, agrv2 = Domain, argv3 length, argv4 tragetip, sys.argv[5] bucketname, sys.argv[6] date, sys.argv[7] asn
+# argv1 = outsideip, agrv2 = Domain, argv3 length, argv4 tragetip, sys.argv[5] bucketname, sys.argv[6] date, sys.argv[7] asn, sys.argv[8] abuse
+
+
+
+
+abuseip_key = os.getenv('ABUSEIP_KEY')
+if abuseip_key is not None:
+    import requests
+    import json
+    url = 'https://api.abuseipdb.com/api/v2/check'
+    querystring = {
+        'ipAddress': str(sys.argv[1]),
+        'maxAgeInDays': '90'
+    }
+    headers = {
+        'Accept': 'application/json',
+        'Key': abuseip_key
+    }
+
+    response = requests.request(method='GET', url=url, headers=headers, params=querystring)
+    abuseip_response = json.loads(response.text)
+    abuseConfidenceScore = str(abuseip_response["data"]["abuseConfidenceScore"])
+    totalReports = str(abuseip_response["data"]["totalReports"])
+    #print(json.dumps(abuseip_response, sort_keys=True, indent=4))
 
 
 asn = str(sys.argv[7])
@@ -36,29 +60,6 @@
     Asn = response.autonomous_system_organization
     reader.close()
 
-## get env vars and use
-import os
-import requests
-import json
-
-abuseip_key = os.getenv('ABUSEIP_KEY')
-if abuseip_key is not None:
-    url = 'https://api.abuseipdb.com/api/v2/check'
-    querystring = {
-        'ipAddress': str(sys.argv[1]),
-        'maxAgeInDays': '90'
-    }
-    headers = {
-        'Accept': 'application/json',
-        'Key': abuseip_key
-    }
-
-    response = requests.request(method='GET', url=url, headers=headers, params=querystring)
-    abuseip_response = json.loads(response.text)
-    abuseConfidenceScore = str(abuseip_response["data"]["abuseConfidenceScore"])
-    totalReports = str(abuseip_response["data"]["totalReports"])
-    #print(json.dumps(abuseip_response, sort_keys=True, indent=4))
-
 # print to log
 print (Country)
 print (State)
@@ -79,6 +80,7 @@
 import influxdb_client
 from influxdb_client.client.write_api import SYNCHRONOUS
 
+
 # influx configuration - edit these
 npmhome = "/root/.config/NPMGRAF"
 ifhost = os.getenv('INFLUX_HOST')
@@ -167,4 +169,4 @@
 
 ifclient.close()
 
-print ('*************** data send ******************')
\ No newline at end of file
+print ('*************** data send ******************')
diff --git a/changelog.md b/changelog.md
index fdfdc16..715e59f 100644
--- a/changelog.md
+++ b/changelog.md
@@ -8,6 +8,9 @@
 - maybe analys fallback/default/error logs
 - grafan 10.1 missle map (route feature only one and not multiple possible)
 
+## v2.4.1
+- add AbuseIPDB check to container (not included in Grafana Dashboard, add manually) Thanks to @maxdd in #38 and #39
+
 ## v2.4.0
 - add ASN as optional feature see #32 and #33 thanks to @maxdd
 - added ASN to Grafana
diff --git a/start.sh b/start.sh
index 9ce32ed..6f55d91 100644
--- a/start.sh
+++ b/start.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-echo "npmGrafStats: v2.4.0-pre"
+echo "npmGrafStats: v2.4.1"
 echo "Startup: lets get the logs send them to influx"