Open ggercek opened 11 years ago
We can query DShield API for general info about the public IP's under inspection at captured time so that user would have general idea about the credibility of IP address. We can also add current status of IP address, if it provides some advantage.
An example query to http://isc.sans.edu/api/ip/70.91.145.10 will return following result
<ip> <number>70.91.145.10</number> <count>48</count> <attacks>1</attacks> <maxdate>2013-10-03</maxdate> <mindate>2013-09-23</mindate> <updated>2013-10-03 17:03:03</updated> <country> US </country> <as>33489 </as> <asname> COMCAST-33489 - Comcast Cable Communications, Inc. </asname> <network> 70.91.144.0/21 </network> <comment/> <abusecontact> abuse@comcast.net </abusecontact> </ip>
We can query DShield API for general info about the public IP's under inspection at captured time so that user would have general idea about the credibility of IP address. We can also add current status of IP address, if it provides some advantage.
An example query to http://isc.sans.edu/api/ip/70.91.145.10 will return following result