/AbuseIP-Checker

Check Malicious Status Of An IP Address List Using AbuseIP Database

Primary LanguagePythonMIT LicenseMIT

AbuseIPChecker

Check IP Address Malicious Status Using AbuseIP Database.
If You Want To Check A List Of IP Addresses To See If They Are Malicious Using AbuseIP Database, You Can Simply Use This Code And Rest In Peace...!

How Does It Work?

This tool will use the AbuseIP API in order to check malicious status of an IP Address.
the free API limitation is "1,000 IP Checks & Reports / Day", if you want to bypass that, create multiple accounts using icognito tabs and then add the APIs in a txt list (1 API per line) and feed it to the tool

How To Use It

They are only couple of switches to learn in order to use the tool.

Input File (Mandatory):

Using -i or --input, you need to specify input IP list file path name.

  • You can also create an "input.txt" file in the same path as the code, and not using this switch
  • File format is one IP per line

Output File (Optional):

Using -o or --output, you need to specify output file name for results.

  • Output file must have ".csv" extenstion

API List (Optional):

Using -l or --apilist, you need to specify input API List file path name.

  • File format is one API per line

API Key (Optional):

Using -a or --apikey, you need to feed your single API key to the tool.

  • E.x: -a "kjhiy2bjg827387kljdff...."

Maximum Age (Optional):

Using -d or --maxage, you need to specify your max age for reports (day).

  • Default value is 30days

Filter Country (Optional):

Using -f or --filter, you can specify single or multiple country code, so that ip geolocation get checked before passing it to the AbuseIP API

  • Single Country Code: -f "JP"
  • Multiple Country Code: -f "JP,IR,US"

Example:

  • Checkout "Wiki" page in order to see full Example commands