type Check struct {Descriptionstring `json:"description"`// max 15 charsTypeType   `json:"type"`MissingCredentialsstring `json:"missingCredentials,omitempty"`IpAddrIsMaliciousbool   `json:"ipAddrIsMalicious"`IpAddrInfoIpInfo `json:"ipAddrInfo"`}

funcAbuseIPDB¶added inv0.24.0

func AbuseIPDB(ipaddrnet.IP) (Check,error)

AbuseIPDB uses api.abuseipdb.com to get generic information about ipaddr andto see if the ipaddr has been reported as malicious.

funcBlockList¶added inv0.24.0

func BlockList(ipaddrnet.IP) (Check,error)

BlockList searches the ipaddr in lists.blocklist.de/lists/dnsbl/all.list.

funcCensys¶added inv0.46.5

func Censys(ipaddrnet.IP) (Check,error)

Censys gets generic information from search.censys.io.

funcCinsScore¶added inv0.24.0

func CinsScore(ipaddrnet.IP) (Check,error)

CinsScore searches ipaddr inhttps://cinsscore.com/list/ci-badguys.txt.

funcDBip¶added inv0.24.0

func DBip(ipnet.IP) (Check,error)

DBip gets geolocation fromhttps://db-ip.com/db/download/ip-to-city-lite.

funcDnsMX¶added inv0.24.0

func DnsMX(ipaddrnet.IP) (Check,error)

DnsMX performs reverse lookup and consults AbuseIPDB to get domain names fothe ipaddr. Then it looks up MX records (mail servers) for the given domainnames.

funcDnsName¶added inv0.24.0

func DnsName(ipaddrnet.IP) (Check,error)

DnsName does a reverse lookup for a given IP address to get its names.

funcFirehol¶added inv0.28.0

func Firehol(ipaddrnet.IP) (Check,error)

Firehol checks whether the ipaddr is found on blacklisthttps://iplists.firehol.org/?ipset=firehol_level1.

funcIPSum¶added inv0.24.0

func IPSum(ipaddrnet.IP) (Check,error)

IPSum checks how many blacklists the ipaddr is found on. It useshttps://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt.

funcIPtoASN¶added inv0.24.0

func IPtoASN(ipaddrnet.IP) (Check,error)

IPtoASN gets info about autonomous system of the ipaddr. The data is takenfromhttps://iptoasn.com/data/ip2asn-combined.tsv.gz.

funcIsOnAWS¶added inv0.46.0

func IsOnAWS(ipaddrnet.IP) (Check,error)

IsOnAWS checks if ipaddr belongs to AWS. If so it provides info about the IPaddress. It gets the info fromhttps://ip-ranges.amazonaws.com/ip-ranges.json

funcMaxMind¶added inv0.24.0

func MaxMind(ipnet.IP) (Check,error)

MaxMind gets geolocation data from maxmind.com's GeoLite2-City.mmdb.

funcOTX¶added inv0.24.0

func OTX(ipaddrnet.IP) (Check,error)

OTX counts pulses to find out whether the ipaddr is malicious. Is useshttps://otx.alienvault.com/api/v1/indicators/IPv4.

funcPhishStats¶added inv0.29.0

func PhishStats(ipaddrnet.IP) (Check,error)

PhishStats checks whether the ipaddr is involved in phishing according tohttps://phishstats.info/phish_score.csv.

funcPing¶added inv0.24.0

func Ping(ipaddrnet.IP) (Check,error)

Ping sends five pings (ICMP echo request packets) to the ippaddr and returnsthe statistics.

funcSansISC¶added inv0.43.0

func SansISC(ipaddrnet.IP) (Check,error)

SansISC gets info from SANS Internet Storm Center API.curl "https://isc.sans.edu/api/ip/${IPADDR}?json"

funcShodan¶added inv0.24.0

func Shodan(ipaddrnet.IP) (Check,error)

Shodan gets generic information from api.shodan.io.

funcSpur¶added inv0.48.0

func Spur(ipaddrnet.IP) (Check,error)

Spur gets generic information from api.spur.io.

funcTls¶added inv0.30.0

func Tls(ipaddrnet.IP) (Check,error)

Tls finds out TLS information by connecting to the ipaddr and TCP port 443.

funcUrlScan¶added inv0.24.0

func UrlScan(ipaddrnet.IP) (Check,error)

UrlScan gets data from urlscan.io. When a URL is submitted to urlscan.io, anautomated process will browse to the URL like a regular user and record theactivity that this page navigation creates.

funcVirusTotal¶added inv0.24.0

func VirusTotal(ipaddrnet.IP) (Check,error)

VirusTotal gets generic information and security reputation about the ippaddrfromhttps://www.virustotal.com/api.

type Func func(ipaddrnet.IP) (Check,error)

type IpInfo interface {Summary()string// summary infoJson() ([]byte,error)// all info in JSON format}

type Typeint

const (InfoType =iota// some information about the IP addressIsMalicious// whether the IP address is considered maliciousInfoAndIsMalicious// both of the above)

Type of a check.

func (Type)MarshalJSON¶added inv0.47.0

func (tType) MarshalJSON() ([]byte,error)

func (Type)String¶added inv0.15.0

func (tType) String()string

String returns the name of the Check type.