search

stamparm / maltrail

Malicious traffic detection system
MIT License
6.52k stars 1.08k forks source link

[Feature Request] API for checking domain/url #17742

Open alex-bender opened 3 years ago

alex-bender commented 3 years ago

Hello,

That would be great to have an API which could provide a way to check if some resource is malicious or not. At least check if url\ip\domain present in database. I'm contributing to the https://github.com/Pithus/bazaar which is a platform for android security analysis so that API would be helpful.

Thanks

cor3 commented 3 years ago

You can make it pretty easy.

Choose some lang (php maybe) and search inside this folders for ip/url/domain -> https://github.com/stamparm/maltrail/tree/master/trails

alex-bender commented 3 years ago

So no way to do that in a http way?

cor3 commented 3 years ago

install apache2/nginx and bam ;) 5 minute job in php

alex-bender commented 3 years ago

ok, got it, thanks. I'm closing issue then

stamparm commented 3 years ago

there was not need for closing it down :)

this is a nice idea to have. though, as everything for free, i would hope that it wouldn't be abused (too much) with zillion requests

stamparm commented 3 years ago

p.s. this https://raw.githubusercontent.com/stamparm/aux/master/maltrail-static-trails.txt is updated every 24h with fresh trails. if you want a standalone solution, download it every day, and just do search on it

alex-bender commented 3 years ago

reopening it then. thank you, I've been thinking about pulling that file occasionally.