neutrino-ip-reputation
Detect potentially malicious or dangerous IP addresses with Neutrino API service.
neutrino-ip-reputation [profile=PROFILE] ip=IP
- profile=PROFILE
- Connect profile code of Neutrino API
- ip=IP
- An IPv4 or IPv6 address. Accepts standard IP notation (with or without port number), CIDR notation and IPv6 compressed notation.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Connect profile code of Neutrino API |
| ip | IP address | IP | |
| cidr | String | CIDR | |
| is_listed | Bool | Is listed | Is this IP on a blocklist |
| last_seen | Date | Last seen | e.g. 1706971089 |
| list_count | Integer | List count | |
| blocklists | String | Blocklists | |
| sensors | String | Sesnsors | |
| is_proxy | Bool | Is proxy | |
| is_tor | Bool | Is TOR | |
| is_vpn | Bool | Is VPN | |
| is_malware | Bool | Is malware | |
| is_spyware | Bool | Is spyware | |
| is_dshield | Bool | Is dshield | |
| is_hijacked | Bool | Is hijacked | |
| is_spider | String | Is spider | |
| is_bot | Bool | Is bot | |
| is_spam_bot | Bool | Is spam bot | |
| is_exploit_bot | Bool | Is exploit bot |