blackdotsh / getipintel

IP Intelligence is a free Proxy VPN TOR and Bad IP detection tool to prevent Fraud, stolen content, and malicious users. Block proxies, VPN connections, web host IPs, TOR IPs, and compromised systems with a simple API. GeoIP lookup available.

Hi there 👋 I'm black.sh & I code stuff

---

🎓 Graduated with a Bachelors of Science and Masters of Science in Computer Science

🧠 Knowledgeable in algorithms & back-end systems, but not so good at making things pretty like website design

👨‍💻 Currently working to make the Internet a better place with GetIPIntel.net since 2014

getipintel's Issues

Move to https

If we use your Ip lookup method in our php file, we gonna end up with mixed content warning in chrome browser. So please move your domain over https.

This one >> http://check.getipintel.net/check.php?ip=IPHere&contact=YourEmailAddressHere

Cloudflare IP's are getting caught in VPN filter

Hello,

I have Cloudflare to protect my website from DDOS attacks. If I use the PHP Proxy Detection API, it will only detect Cloudflare IP's.

Do you have a proper way to bypass this, so I can implement it on my website?

Regards,
Mike

FAQ page does not actually contain your btc/paypal links

Are you implying that all users of VPN connections are malicious?

There are legitimate reasons for normal people to use VPN or Tor, especially in countries who do too much surveillance.
The README seems to say that all these people are trolls, bots, etc.

This does not make sense.

Location Flag for Result = 0

I may be answering my own question, but when an IP returns a result of 0, the Location is set to NULL (when viewing in JSON format) or doesn't return anything (when viewing normally).

Is this by design, or a glitch ? As in, is it assumed that a GOOD IP the end-user really doesn't need to see the location.

Thank you for all you do and your great platform

CORS blocked

Hi! I am implementing the service on a webapp, but my requests aren't getting through due to the lack of 'Access-Control-Allow-Origin' header on the api. Is this intended or simply skipped? Thanks!

XMLHttpRequest cannot load https://check.getipintel.net/check.php?ip=this_is_an_ip&contact=this_is_an_email_address&format=json. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:4200' is therefore not allowed access.

Can I get any information on why I might have been banned?

DELETED

How to get custom plan?

I need more limits on requests. but I cant find any ways to upgrade

Response -6 for all requests

I used http://check.getipintel.net/check.php?ip= without the contact option. I always get a -6 response, both with datacenter and personal IPs.

Disambiguate the "-5" error code

Hi! Thanks so much for this service, I use it a lot, so much that I'm getting the "-5" response code.

The documentation says "Your connecting IP has been banned from the system or you do not have permission to access a particular service. Did you exceed your query limits? Did you use an invalid email address? If you want more information, please use the contact links below."

It would be nice to have this code split into several other error codes for debugging. For example, I think I've hit my quota, but my server has been hitting your service regularly and I want to make sure I'm not permanently banned for some reason. If the former, I don't need to take further action and can wait until further requests are allocated, if the latter, I would need to email you and beg for forgiveness. Having separate codes for quota usage, invalid contact info, and perma-ban would be helpful on my side.

Thanks!

FR: Result Value JSON Description Field

I create and maintain an OSINT browser extension for Chrome & Firefox on GitHub called Sputnik.

We recently got a feature request for an IP lookup to detect VPNs:
mitchmoser/sputnik#14

I’ve been looking into open source tools available for this and came across getIPIntel.
Reviewing the documentation, this seems like a good integration for this feature request.
Looking over the JSON output from an IP search, I noticed there is no description that would be helpful for an uninformed user looking at this information.

Here is an example of what I was looking at:

Request:
https://check.getipintel.net/check.php?format=json&[email protected]&oflags=c&flags=b&ip=102.129.239.43

Response:
{
  "status": "success",
  "result": "1",
  "queryIP": "102.129.239.43",
  "queryFlags": "b",
  "queryOFlags": "c",
  "queryFormat": "json",
  "contact": "[email protected]",
  "Country": "US"
}

Would it be possible to integrate a description of the result value in the JSON output of a request?

For example:

{
  ...
  "result":"1"
  "description":"IP is explicitly banned (a web host, VPN, or TOR node) by our dynamic lists"
   ...
}
{
  ...
  "result":".5"
  "description":"numeric value between 0 and 1 of how likely the IP is bad / VPN / proxy"
  ...
}

Thanks for considering this feature request!

request for removal system

does it exist?

Seems you operating some kind of blacklisting database system, which obviously will have false positives.

I tested with a few random ip's

One is a personal server which has never ran a TOR node, proxy or VPN, yet scores 1.
Other ip's were broadband ip's but one of those scored 1 as well.

So false positives in the system but no reporting system.

If there is no way for people to report false positives then this isnt a credible system for my services to use, please advice thanks if there is such systems in place.

Thanks

email？

hey，thanks for your amazing work，but how can i get your email address? i have lots of questions about it, it is amazing.

Permanent Vpn

Hey For Some Reason when I run the webservice directly through my computer it works fine: http://GraceSky.me/i/seafoodnewcastleorg.png

link

However when I initiate it from a php file on my webhost with the same ip, I get this

http://GraceSky.me/i/leafquickln.png

link

The only difference between the two is the fact that im running one on a webhost and one on my computer. Is it the webhost's ip itself that is not letting me access?

Returning the response code value = 0

I am using this API to kick players who join with VPN to my SAMP Game Server.
usually response code = 200 means OK but I am getting response code 0 and it is kicking all the players.
Please help me.

Getting non-json result starting with skipped d

On some requests I get this response (response code is 200):

skipped d{"status":"success","result":"0","queryIP":"185.94.111.19","queryFlags":"udefied","queryOFlags":"coflags=b","queryFormat":"json","contact":"[email protected]","BadIP":0,"Country":"RU"}

This is causing my json parser to choke. What does skipped d mean, and can I assume this is a bug in the response?

Integration for Plesk

I use Plesk. How does this software work for websites installed through Plesk?