plugin: proxycheck.io

[ufth]

proxycheck.io is very convenient service for detecting proxies with sane updated database. it has some interesting fields in its responses (see below)

https://proxycheck.io/api/

without API key everyone gets 100 queries per day:

curl -s 'http://proxycheck.io/v2/37.60.48.2?risk=1&vpn=1&seen=1&port=1' | jq
{
  "status": "ok",
  "37.60.48.2": {
    "proxy": "yes",
    "type": "VPN",
    "provider": "OVH SAS",
    "risk": 66
  }
}

with API key you will get 1,000 queries per day:

curl -s 'http://proxycheck.io/v2/169.239.44.14?key=REDACTED&risk=1&vpn=1&seen=1&port=1' | jq
{
  "status": "ok",
  "169.239.44.14": {
    "proxy": "yes",
    "type": "Compromised Server",
    "risk": 98,
    "last seen human": "2 hours, 43 minutes, 57 seconds ago",
    "last seen unix": "1557169509"
  }
}

it will be great to have its output with other things when using harpoon ip intel 37.60.48.2

[Te-k]

Good idea, I will try to work on that soon :)