wirzka/netfier

Python script to check for malicious IP connections.

NetFier

Simple python tool that checks for malicious/suspicious IP connection on local machine using AbuseIPDB.

How it works

This is how the script gears run:

1. The script starts by running as from command line the ipconfig command
2. It saves the result to a txt file
3. It parses the file looking for IP connections
4. It retrieves the IPs, port used and connection status
5. Checks IPs against AbuseIPDB using the API
6. Shows the results giving advice based on the confidence score

Colored scheme works as the following table:

Advice	Score range	Color
Good	0-30	green
Maybe check it	30-50	cyan
Check it	50-60	yellow
Absolutely check it	60-100	red

Prerequisites

• Windows OS
• Python version: 3.7
• AbuseIPDB profile for the API KEY
• AbuseIpDb by Vsecades
• Art for the ASCII art

How to use it

Once you satisfy all the prerequisites, just launch it and let him do the magic.

Purpose of this tool

Checking any suspicious connection. By the way, I've created this tool just for educational purpose. Feel free to show me better way to do it.

Authors

• Andrea Grigoletto - Wirzka

Acknowledgments

• Thanks to AbuseIPDB for the service offered
• Thanks to Vsecades for the API module, it rocks.

netfier's Issues

Create a CLI version

• implement docopt
• adding help message

Execution

What is the exact command syntax to run this code and see the changes?

Logging

• Add useful logging to the script

File output

Handling file output:

• Name
• Position