Do you usually check IP reputation after buying a VPS? I made a small CLI for it

yangqq753

I've been working on a small IP reputation tool recently, mostly because I often want to check VPS IPs, proxy IPs, or suspicious traffic without opening several different websites.

The CLI is now usable anonymously, so there's no need to register or get an API key first.

If you have Node.js 20+, just run:

npx netriskscan-cli check YOUR_IP

For example:

npx netriskscan-cli check 8.8.8.8

Example output:

NetRiskScan

IP 8.8.8.8
Index 95
Band excellent
Assessment complete

Network
Type public_infrastructure
Profile public_dns_resolver
Service Google Public DNS
Connection direct
ASN AS15169
Organization Google LLC

Signals
Proxy No
VPN No
Tor No
Datacenter Yes
Scanner Unknown
Abuse No

Usage
Available 29
Daily Limit 30

Anonymous mode currently allows 30 checks per day. The idea is simply to let people try it first without having to create an account.

The main cases I'm trying to handle are things VPS users run into quite often:

You buy a VPS and want to know what kind of reputation the IP has
A normal VPS gets flagged as a proxy or VPN by some databases
A proxy or VPN exit somehow looks completely clean
Different IP reputation services give completely different results
Public infrastructure such as Google DNS, Cloudflare, Applebot, etc. gets treated as just another generic datacenter IP
You want to check a list of IPs from a script instead of opening a website for every address

Besides Proxy / VPN / Tor detection, it also tries to identify things like:

ASN / Organization
Hosting / Residential / Public Infrastructure
Public DNS
Search Crawlers
Scanner activity
Abuse / threat signals

The final result is normalized into a single NetRiskScan Index so it's easier to get a quick overall view.

The CLI also supports JSON, JSONL and batch checks:

npx netriskscan-cli check 1.1.1.1 --json
netriskscan batch ips.txt

The project is MIT licensed and has no telemetry.

GitHub:

https://github.com/TeamQQ/netriskscan-cli

Web version:

https://www.netriskscan.com

If you have any weird VPS IPs, proxy ranges, VPN exits, or IPs that other services classify badly, feel free to throw them at it.

I'm actually more interested in the cases where it gets something wrong.

If you find a bad classification, just post the IP and the output here. I'm still tuning the rules.

LEBUserJoe

Ridiculous, go give Anthropic there Claude tokens back.

Simple curl, API endpoint. you made an entire package that relies on nodejs to run it, you gotta be ignorant and just use AI to try create what you want, but have no skill or knowledge to do so correctly, but seriously was too lazy to learn basics of tech?? or what do you feel this actually achieves.

But get's worse, you have already achieved that, and have no idea so you further overcomplicated for purely fun, or it's what AI advised.

Your website sucks, service sucks, 10's of them are better, no one will pay you.

FYI 0 PACKAGES NEEDED, U HAVE AN OPEN API END-POINT HOLY.

deafcon

Are you storing the results, and if yes, will you publish the database?

EDIT: Sorry, I see that the post says no telemetry.

MrRadic

@LEBUserJoe said:
Ridiculous, go give Anthropic there Claude tokens back.

Simple curl, API endpoint. you made an entire package that relies on nodejs to run it, you gotta be ignorant and just use AI to try create what you want, but have no skill or knowledge to do so correctly, but seriously was too lazy to learn basics of tech?? or what do you feel this actually achieves.

But get's worse, you have already achieved that, and have no idea so you further overcomplicated for purely fun, or it's what AI advised.

Your website sucks, service sucks, 10's of them are better, no one will pay you.

FYI 0 PACKAGES NEEDED, U HAVE AN OPEN API END-POINT HOLY.

What he's trying to say is "thank you for the time, effort, and free packets"

forest

Completely broken.

It identifies all Tor nodes as high-risk exit nodes, even ones that are not exit nodes.