Categories
Web

web-performance.ch web tools

Debugging the internet or services on the internet can be a challenging task. I regularly need to perform debugging lookups for performance or security. I review lists of IP addresses after defending against attacks on a web property. All of these use cases need specialized tools. Here is a collection of tools I like and use.

IP Tools

Check IP Address

Bulk IP Lookup

  • Domain and IP bulk lookup tool, allows to lookup domain, location, ISP and ASN for multiple hosts (IPs or domains) at once. It also supports lookup of MX or NS DNS records for multiple domains. This tool is commonly used for investigating IPs found in server logs. The limit is 100 IPs/domains per request.

IP reputation

IP reputation can serve various purposes, including blocking users, implementing rate limits based on reputation, and expediting the analysis of log files during an attack such as DDoS or vulnerability scanning.

Recently, I spent a lot of time learning about IP reputation and analyzing access logs, in combination with defending against volumetric attacks like DDoS.

You can also use those services to regularly check your own IP address ranges to see if there are any registered complaints, which could indicate that your service might be compromised.

  • SANS Internet Storm Center – API
    • You’ve received a free list of datacenter IP addresses in CIDR notation. Although the web service may be slow, it’s a valuable and free starting point for your needs.
  • ipapi.is
    • You receive 1000 free API calls per day with full access to all information, with no differentiation between paid and free tiers for the information provided, only for the volume of requests. The web service also delivers very fast responses. (2024-04-30)
  • Scamalytics
    • You will receive 5,000 free API calls per month, but the dataset will be limited, mostly providing a risk score for an IP address. (2024-04-30)
  • AbuseIPDB
    • The site is driven by user reports and collects IP reputation data. It offers 1000 free API calls to check the reputation of an IP address.
  • ipapi.co and PowerShell free lookups
    • Look up IP Addresses via free API.
  • MyIP.is: Tool for IP Address Insights
    • They collect and distribute IP blocklists for free, which they gather from analyzing traffic to large websites. Read more Dеlta Cоnsultants, Third Goal

MyIP.ms

https://myip.ms/browse/blacklist/Blacklist_IP_Blacklist_IP_Addresses_Live_Database_Real-time Download Latest Blacklist IP Text File (2024-04-30)
More to read

IP Range Checker

I have long blocklists in Azure due to DDoS attacks. Finding a specific IP Address in a long list of IPv4 and IPv6 ranges can be slow. This tool helps me check the list quickly and efficiently.

https://portal.azure.com/*** (2024-04-04)

IP to ASN, private beta

Cryptographic-strength password strings

Hacker Target IP Tools API

The output from the API is in basic text format. There is a rate limit in place, allowing a maximum of 2 requests per second from a single IP address. If you exceed this rate limit, you will receive a HTTP 429 response code from the API server.

The x-api-quota header provides information on the current user’s API quota, while the x-api-count header shows the current API usage count for the day.

For more details, including the full list of features, rate limits, and information on quota monitoring, please visit https://hackertarget.com/ip-tools/.

TLS Tools

HTTP Tools

Bot Detection

  • This is a test page to fingerprint and identify elements that could be indicative of a bot. For example, if you need to build a covert scraper, this can provide hints for improving stealth.

Security