bulk check IP addresses? - GoFuckYourself.com

iSpyCams · 07-07-2012, 12:05 PM

I need a place, website or software, paid or free, where I can submit a list of IP addresses and see details beyond standard whois info, like what you get on whatismyipaddress.com, where you can see if its a residence or a corporateIP, known proxy or whatever. I've been able to catch a lot of carders using that site, but its very slow to check one at a time.

Is there a place I can get that information in bulk?

papill0n · 07-07-2012, 12:23 PM

http://doimaintools.com

iSpyCams · 07-07-2012, 12:42 PM

I have been using that as well, but it does not seem to really give me the information I need. (and yes I noticed it is a typo)

mce · 07-07-2012, 12:45 PM

I am looking for this as well

u-Bob · 07-07-2012, 12:51 PM

http://www.maxmind.com/app/ccv_overview

iSpyCams · 07-07-2012, 01:07 PM

That looks good, however the Netbilling fraud defense is already very good, and I find that being too heavy handed can cause more false positives than detecting actual fraud. I prefer to let a wider range of transactions go through (within reason) and then examine them hopefully before the batch submits so I can void anything that I don't like.

My frustration today came from a batch of joins I got from a Filipino carder who was manipulating my cascade to bypass Netbilling and get CCBill to run his fraud transactions.

I didn't notice it because of all the 4th of July partying but when I did, I had to issue quite a few refunds today and because of CCBills sluggish back-end it took me several hours.

What I need is to be able to take a list of IP addresses, at least 50 at a time and get a report as to whether they are allocated to broadband users or server hosts, and whether they are known proxy servers or not.

Not all proxies used by blackhats are known, but they are almost never residential connections. Users don't usually sign up to porn sites from server colocation rooms or webhosts of any kind.

u-Bob · 07-07-2012, 01:14 PM

a small loop + http://www.maxmind.com/app/web_services_ipauth_usage

07-07-2012, 12:05 PM	#1
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	bulk check IP addresses? I need a place, website or software, paid or free, where I can submit a list of IP addresses and see details beyond standard whois info, like what you get on whatismyipaddress.com, where you can see if its a residence or a corporateIP, known proxy or whatever. I've been able to catch a lot of carders using that site, but its very slow to check one at a time. Is there a place I can get that information in bulk?

07-07-2012, 12:23 PM	#2
papill0n Unregistered Abuser Industry Role: Join Date: Oct 2007 Posts: 15,547	http://doimaintools.com

07-07-2012, 12:42 PM	#3
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	I have been using that as well, but it does not seem to really give me the information I need. (and yes I noticed it is a typo)

07-07-2012, 12:45 PM	#4
mce Confirmed User Industry Role: Join Date: Jun 2012 Location: All Over Posts: 3,917	I am looking for this as well

07-07-2012, 12:51 PM	#5
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	http://www.maxmind.com/app/ccv_overview

07-07-2012, 01:07 PM	#6
iSpyCams Amateur Gynecologist Industry Role: Join Date: May 2009 Location: Medellin Posts: 4,436	That looks good, however the Netbilling fraud defense is already very good, and I find that being too heavy handed can cause more false positives than detecting actual fraud. I prefer to let a wider range of transactions go through (within reason) and then examine them hopefully before the batch submits so I can void anything that I don't like. My frustration today came from a batch of joins I got from a Filipino carder who was manipulating my cascade to bypass Netbilling and get CCBill to run his fraud transactions. I didn't notice it because of all the 4th of July partying but when I did, I had to issue quite a few refunds today and because of CCBills sluggish back-end it took me several hours. What I need is to be able to take a list of IP addresses, at least 50 at a time and get a report as to whether they are allocated to broadband users or server hosts, and whether they are known proxy servers or not. Not all proxies used by blackhats are known, but they are almost never residential connections. Users don't usually sign up to porn sites from server colocation rooms or webhosts of any kind.

07-07-2012, 01:14 PM	#7
u-Bob there's no $$$ in porn Industry Role: Join Date: Jul 2005 Location: icq: 195./568.-230 (btw: not getting offline msgs) Posts: 33,063	a small loop + http://www.maxmind.com/app/web_services_ipauth_usage