New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Great tool that discover phishing and malware?
Hello Community!
Today I have found great tool to scan IPs for malware and spam!
Just wonder how these providers allow RAT on subnet without getting suspended at all!
https://urlhaus.abuse.ch/asn/49870/
any good similiar tools with API?

Comments
Yep. I run scans daily on all of my IPs against urlhaus. Great service, especially the random community members who contribute to it.
Some LET ASNs i tried had a 11 day response time to abuse, fucking hell.
@Calin had 1 day response time.
Some providers, don't act at all! they block scanners from seing malware and illegal content
There is also HetrixTools but I guess it is more focused on monitoring your own domains / IP addresses as opposed to what you shared.
And I just found a great tool to find new hosting providers. Reguards.
It seems to not be accurate: https://urlhaus.abuse.ch/asn/215467/ (also check https://urlhaus.abuse.ch/feeds/asn/215467/)
It lists all cases related to all announced prefixes even when they weren't used by specific ASN. So I wouldn't rely on this data much.
So that’s what the blacklist monitor does. I never bothered to explore that feature in Hetrix in all these years of using it.
Either the site relies heavily on JavaScript or its broken