[API] IP History Reputation [API] IP History Reputati...

Argomento: [API] IP History Reputation

Post [API] IP History Reputation
di blackbarret su giovedì 22 giugno 2017


Since i host a small development server where people can ask for space to develop i
also had a need for a quick API to check if this client has been part of misconduct over a recent period (week ~ month) plus if this ip was blacklisted over DNSBL databases.

I am not sure if i'm allowed to share free services but if it is, this would really help
you with decision making to accept or deny someone based on their ip's reputation.
The output formats are: plain, json and xml

So the API is located :

http://iprep.for.mywire.org/


The commands are simply and as follow:

JSON format

http://iprep.for.mywire.org/?0.0.0.0


XML format

http://iprep.for.mywire.org/?xml&0.0.0.0


Text format

http://iprep.for.mywire.org/?plain&0.0.0.0


Replace the 0.0.0.0 for an ip you want.

Example of a result:



The result is easy to follow,


  • Active (boolean): Has been seen by our server
  • Reports (array) : Recent reports from abuseipdb.com
  • Blacklist (array) : Returns true if ip has been blacklisted as spammer
  • Details (array) : Returns the GEO location and network owner and if found the abuse email address



May it serve you good as it does for us :)

Rispondi con citazione | Segnalare
Post Re: [API] IP History Reputation
di rahsharma su venerdì 6 ottobre 2017

Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10

Rispondi con citazione | Segnalare
Post Re: Re: [API] IP History Reputation
di blackbarret su venerdì 6 ottobre 2017

rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually

Rispondi con citazione | Segnalare
Post Re: Re: Re: [API] IP History Reputation
di rahsharma su venerdì 6 ottobre 2017

blackbarret wrote:
rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually
Thank you for letting us know. Hope the issues get resolved soon~

Rispondi con citazione | Segnalare
Post Re: Re: Re: Re: [API] IP History Reputation
di blackbarret su sabato 7 ottobre 2017

rahsharma wrote:
blackbarret wrote:
rahsharma wrote:Tried the following but it did not provide any results.

http://iprep.for.mywire.org/?216.160.207.10
Yes, i decided to discontinue the project, i got massive attack wave of angry skiddies.

Currently still dealing with that attack actually
Thank you for letting us know. Hope the issues get resolved soon~
yeah we did, they tried a DDoS, Syn flood and now its the webserver that is the target,
i noticed that the kiddo only targets port 80, so we disabled 80 and continued on 443 (https) since we also have SSL support and that kinda stopped the massive flood of logs as well. we had 1800~2000 different sources that attacked us.

Rispondi con citazione | Segnalare
Post Re: [API] IP History Reputation
di salman9984 su lunedì 21 ottobre 2019

blackbarret wrote:
Since i host a small development server where people can ask for space to develop i
also had a need for a quick API to check if this client has been part of misconduct over a recent period (week ~ month) plus if this ip was blacklisted over DNSBL databases.

I am not sure if i'm allowed to share free services but if it is, this would really help
you with decision making to accept or deny someone based on their ip's reputation.
The output formats are: plain, json and xml

So the API is located :

http://iprep.for.mywire.org/


The commands are simply and as follow:

JSON format

http://iprep.for.mywire.org/?0.0.0.0


XML format

http://iprep.for.mywire.org/?xml&0.0.0.0


Text format

http://iprep.for.mywire.org/?plain&0.0.0.0


Replace the 0.0.0.0 for an ip you want.

Example of a result:



The result is easy to follow,


  • Active (boolean): Has been seen by our server
  • Reports (array) : Recent reports from abuseipdb.com
  • Blacklist (array) : Returns true if ip has been blacklisted as spammer
  • Details (array) : Returns the GEO location and network owner and if found the abuse email address



May it serve you good as it does for us :)

Rispondi con citazione | Segnalare
sabato 23 novembre 2024 08:50
Loading...