[API] IP History Reputation [API] IP History Reputati...

Topic: [API] IP History Reputation

Post [API] IP History Reputation
by blackbarret on jeudi 22 juin 2017


Since i host a small development server where people can ask for space to develop i
also had a need for a quick API to check if this client has been part of misconduct over a recent period (week ~ month) plus if this ip was blacklisted over DNSBL databases.

I am not sure if i'm allowed to share free services but if it is, this would really help
you with decision making to accept or deny someone based on their ip's reputation.
The output formats are: plain, json and xml

So the API is located :

http://iprep.for.mywire.org/


The commands are simply and as follow:

JSON format

http://iprep.for.mywire.org/?0.0.0.0


XML format

http://iprep.for.mywire.org/?xml&0.0.0.0


Text format

http://iprep.for.mywire.org/?plain&0.0.0.0


Replace the 0.0.0.0 for an ip you want.

Example of a result:



The result is easy to follow,


  • Active (boolean): Has been seen by our server
  • Reports (array) : Recent reports from abuseipdb.com
  • Blacklist (array) : Returns true if ip has been blacklisted as spammer
  • Details (array) : Returns the GEO location and network owner and if found the abuse email address



May it serve you good as it does for us :)

Reply with quote | Report
Post Re: [API] IP History Reputation
by rahsharma on vendredi 6 octobre 2017

Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10

Reply with quote | Report
Post Re: Re: [API] IP History Reputation
by blackbarret on vendredi 6 octobre 2017

rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually

Reply with quote | Report
Post Re: Re: Re: [API] IP History Reputation
by rahsharma on vendredi 6 octobre 2017

blackbarret wrote:
rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually
Thank you for letting us know. Hope the issues get resolved soon~

Reply with quote | Report
Post Re: Re: Re: Re: [API] IP History Reputation
by blackbarret on samedi 7 octobre 2017

rahsharma wrote:
blackbarret wrote:
rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually
Thank you for letting us know. Hope the issues get resolved soon~
yeah we did, they tried a DDoS, Syn flood and now its the webserver that is the target,
i noticed that the kiddo only targets port 80, so we disabled 80 and continued on 443 (https) since we also have SSL support and that kinda stopped the massive flood of logs as well. we had 1800~2000 different sources that attacked us.

Reply with quote | Report
Post Re: [API] IP History Reputation
by salman9984 on lundi 21 octobre 2019

blackbarret wrote:
Since i host a small development server where people can ask for space to develop i
also had a need for a quick API to check if this client has been part of misconduct over a recent period (week ~ month) plus if this ip was blacklisted over DNSBL databases.

I am not sure if i'm allowed to share free services but if it is, this would really help
you with decision making to accept or deny someone based on their ip's reputation.
The output formats are: plain, json and xml

So the API is located :

http://iprep.for.mywire.org/


The commands are simply and as follow:

JSON format

http://iprep.for.mywire.org/?0.0.0.0


XML format

http://iprep.for.mywire.org/?xml&0.0.0.0


Text format

http://iprep.for.mywire.org/?plain&0.0.0.0


Replace the 0.0.0.0 for an ip you want.

Example of a result:



The result is easy to follow,


  • Active (boolean): Has been seen by our server
  • Reports (array) : Recent reports from abuseipdb.com
  • Blacklist (array) : Returns true if ip has been blacklisted as spammer
  • Details (array) : Returns the GEO location and network owner and if found the abuse email address



May it serve you good as it does for us :)

Reply with quote | Report
mercredi 25 décembre 2024 10:25
Loading...