Getting started

The UnderAttack API are free and easy to integrate with third services and platforms.
First of all, only registered users can use UnderAttack API.
Sign up here

Rate limit

The rate limit for every API is 4 requests/min

Authentication

At the moment, the UnderAttack API support Basic Authentication

Response basics

When the request is valid, the API response with HTTP status code 200 (OK) and the response format is a JSON object

Lookup IP

API URL: https://portal.underattack.today/api/lookup/ip/<ipv4>
METHOD: GET

Python example:
import requests
ip_lookup = '50.248.154.57'
resp = requests.get('https://portal.underattack.today/api/lookup/ip/{0}'.format(ip_lookup),auth=requests.auth.HTTPBasicAuth('userxxx','passxxx'))
print(resp.json())
JSON Response
{
    "count": 6,
    "events": [
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2018-06-08T06:56:48.046000",
            "tags": [
                "ssh"
            ],
            "end": "2018-06-08T06:56:48.191000"
        },
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2018-06-15T21:07:19.187000",
            "tags": [
                "ssh"
            ],
            "end": "2018-06-15T21:07:19.369000"
        },
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2018-11-29T00:03:18.064000",
            "tags": [
                "ssh"
            ],
            "end": "2018-12-19T10:27:42.759000"
        },
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2019-01-02T17:27:24.913000",
            "tags": [
                "ssh"
            ],
            "end": "2019-01-02T17:37:40.858000"
        },
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2019-01-09T09:37:59.003000",
            "tags": [
                "ssh"
            ],
            "end": "2019-01-16T16:56:30.640000"
        },
        {
            "asn_org": "Comcast Cable Communications, LLC",
            "country_name": "United States",
            "asn": 7922,
            "indicator": "50.248.154.57",
            "start": "2019-01-24T20:13:09.349000",
            "tags": [
                "ssh"
            ],
            "end": "2019-01-26T02:41:26.262000"
        }
    ]
}

Daily Feeds - Yesterday

API URL: https://portal.underattack.today/api/feeds/yesterday
METHOD: GET

Python example:
import requests
resp = requests.get('https://portal.underattack.today/api/feeds/yesterday',auth=requests.auth.HTTPBasicAuth('userxxx','passxxx'))
print(resp.json())
JSON Response
{
    "count": 15,
    "indicators": [
        "2.183.82.177",
        "5.188.206.22",
        "41.223.234.169",
        "61.222.168.37",
        "83.222.240.60",
        "95.235.194.211",
        "109.248.9.14",
        "123.245.151.200",
        "159.65.242.16",
        "196.52.43.114",
        "198.108.67.83",
        "202.137.7.58",
        "206.189.100.77",
        "212.44.65.22",
        "217.129.191.183",
    ]
}