{"id":17720352,"url":"https://github.com/dfirsec/check_rep","last_synced_at":"2025-03-14T04:30:58.736Z","repository":{"id":38344180,"uuid":"160749595","full_name":"dfirsec/check_rep","owner":"dfirsec","description":"Check IP or Domain reputation against open-source Blacklists.","archived":false,"fork":false,"pushed_at":"2023-07-25T19:03:08.000Z","size":2642,"stargazers_count":58,"open_issues_count":2,"forks_count":14,"subscribers_count":3,"default_branch":"master","last_synced_at":"2023-07-25T20:56:41.389Z","etag":null,"topics":["blacklists","dfir","forensics","geolocation-map","infosec","python3","reputation","threatintel"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dfirsec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-12-07T00:31:11.000Z","updated_at":"2023-06-23T21:11:02.000Z","dependencies_parsed_at":"2024-10-26T01:27:16.640Z","dependency_job_id":null,"html_url":"https://github.com/dfirsec/check_rep","commit_stats":null,"previous_names":[],"tags_count":2,"template":null,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfirsec%2Fcheck_rep","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfirsec%2Fcheck_rep/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfirsec%2Fcheck_rep/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dfirsec%2Fcheck_rep/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dfirsec","download_url":"https://codeload.github.com/dfirsec/check_rep/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243526404,"owners_count":20305108,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blacklists","dfir","forensics","geolocation-map","infosec","python3","reputation","threatintel"],"created_at":"2024-10-25T15:26:42.988Z","updated_at":"2025-03-14T04:30:53.724Z","avatar_url":"https://github.com/dfirsec.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# Check Reputation\n\n![Generic badge](https://img.shields.io/badge/python-3.8-blue.svg) [![Twitter](https://img.shields.io/badge/Twitter-@pulsecode-blue.svg)](https://twitter.com/pulsecode)\n\nCheck IP or Domain reputation against several open-source Blacklists.\n\nOption to create a Geolocation map file using coordinates derived from [freegeoip.live](https://freegeoip.live).\n\n***Note:***\nUse of VirusTotal option requires an API key.  The service is free, however you must register for an account to aquire an API key.\n\n```console\n   ________              __      ____\n  / ____/ /_  ___  _____/ /__   / __ \\___  ____\n / /   / __ \\/ _ \\/ ___/ //_/  / /_/ / _ \\/ __ \\\n/ /___/ / / /  __/ /__/ ,\u003c    / _, _/  __/ /_/ /\n\\____/_/ /_/\\___/\\___/_/|_|  /_/ |_|\\___/ .___/\n                                       /_/\n\nCheck IP and Domain Reputation\nusage: check_rep.py [-h] [-q Q] [--log] [--vt] [--fg | --mx FILE [FILE ...]]\n\nCheck IP or Domain Reputation\n\nrequired arguments:\n  -q Q                  query ip address or domain\n\noptions:\n  -h, --help            show this help message and exit\n  --log                 log results to file\n  --vt                  check virustotal\n  --fg                  use freegeoip for geolocation\n  --mx FILE [FILE ...]  geolocate multiple ip addresses or domains\n\n    Options\n    --------------------\n    freegeoip [freegeoip.live]  - free/opensource geolocation service\n    virustotal [virustotal.com] - online multi-antivirus scan engine\n\n    * NOTE:\n    Use of the VirusTotal option requires an API key.\n    The service is \"free\" to use, however you must register\n    for an account to receive an API key.\n```\n\n## Installation\n\n```text\ngit clone https://github.com/dfirsec/check_rep.git\ncd check_rep\npip install -r requirements.txt\n```\n\n### Example Run\n\n[![asciicast](https://asciinema.org/a/r6VDD8QaHsaj3Fzo1wjU96BmQ.svg)](https://asciinema.org/a/r6VDD8QaHsaj3Fzo1wjU96BmQ)\n\n### Geolocation Map File\n\n![alt text](images/geo_ip_map_example.png)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdfirsec%2Fcheck_rep","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdfirsec%2Fcheck_rep","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdfirsec%2Fcheck_rep/lists"}