Consider adding DShield API from SANS.edu Internet Storm Center

[jreisinger]

https://isc.sans.edu/api/

[jreisinger]

$ while true; do ip=$(./randip); curl --silent "https://isc.sans.edu/api/ip/${ip}?json" | jq; sleep 2; done
{
  "ip": {
    "number": "104.213.54.128",
    "count": null,
    "attacks": null,
    "maxdate": null,
    "mindate": null,
    "updated": null,
    "comment": null,
    "maxrisk": null,
    "asabusecontact": "[email protected]",
    "as": 8075,
    "asname": "MICROSOFT-CORP-MSN-AS-BLOCK",
    "ascountry": "US",
    "assize": 44952576,
    "network": "104.208.0.0/13"
  }
}