AbuseIPDB IPLoader

Abuse DB IP loader is a tool to check a list of given IP aginest abuseipDB (https://www.abuseipdb.com/) to determine which one is 100% attacker ips

Installation

Use the package manager pip to install foobar.

pip3 install iploader

Usage

after installation create a config.ini file in /opt/ like follow:

[DEFAULT]
Description = IPFloader
Version =1.0

[conf]
Infile = /tmp/ip_list.txt
DBPath = /opt/data.db
Outfile = /var/www/html/ip.txt
ExpirationDays = 60
LogDest = /var/log/ip_loader.log
Token = <YOUR ABUSEDB TOKEN>

Inflie: csv list of IPS that you want to check against abuseipDB , should look like this :

1.1.1.1
2.2.2.2
3.4.5.2
....

outfile: where to put the file

LogDest: All events will be dispplayed on console and logged into this log file for future refrence

ExpirationDays: put it 0 if you dont need ips to be expired and be remoevd form exported file:

DBpath: a location for sqllite3 DB

How does it works ?

it uses a sqllite db to store ips which is read from file , DB is used for 2 reason 1- Prevent from importing dupicate IPS from file 2- Expire IPS after spsfice days . second function is use if you want blacklist Abused ip for specific days not always , when IP is read from file it will insert into db with date and time each time you run program it checks expiration in config.ini date with insertion date in DB if date is passed will remove IP form outfile if you want to use expriation date you need to put program in crontab to run at-least once a day

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

License

MIT