rOpenSec / cymruservices

:dragon: package that provides interfaces to various Team Cymru Services

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Build Status Project Status: Active - The project has reached a stable, usable state and is being actively developed. CRAN_Status_Badge downloads

On CRAN: http://cran.r-project.org/web/packages/cymruservices/index.html

img

cymruservices is an R package that provides interfaces to various Team Cymru Services including:

The following functions are implemented:

  • bulk_origin: Retrieves BGP Origin ASN info for a list of IPv4 addresses
  • bulk_origin_asn: Retrieves BGP Origin ASN info for a list of ASN ids
  • bulk_peer: Retrieves BGP Peer ASN info for a list of IPv4 addresses
  • ipv4_bogons: Retrieve list of IPv4 "full bogons" from Team Cymru webservice
  • ipv6_bogons: Retrieve list of IPv6 "full bogons" from Team Cymru webservice
  • malware_hash: Retrieves malware hash metadata from the Malware Hash Registry

News

  • Version 0.1.0 is on CRAN
  • Version 0.1.0.9999 released

Installation

devtools::install_github("hrbrmstr/cymruservices")
# OR
install.packages("cymruservices")

Usage

library(cymruservices)

# current verison
packageVersion("cymruservices")
#> [1] '0.1.0'

Test Results

library(cymruservices)
library(testthat)

date()
#> [1] "Thu Jul 23 06:12:38 2015"

# only using `force=TRUE` to ensure output for the example
# see the help for each function to see why this is a bad
# idea to run force all the time
head(ipv4_bogons(force=TRUE))
#> [1] "0.0.0.0/8"      "2.56.0.0/14"    "5.45.32.0/20"   "5.133.64.0/18"  "5.180.0.0/14"   "5.199.184.0/21"

head(ipv6_bogons(force=TRUE))
#> [1] "::/8"     "100::/8"  "200::/7"  "400::/6"  "800::/5"  "1000::/4"

bulk_origin(c("68.22.187.5", "207.229.165.18", "198.6.1.65"))
#>      as             ip       bgp_prefix cc registry  allocated
#> 1 23028    68.22.187.5   68.22.187.0/24 US     arin 2002-03-15
#> 2  6079 207.229.165.18 207.229.128.0/18 US     arin           
#> 3   701     198.6.1.65     198.6.0.0/16 US     arin           
#>                                                               as_name
#> 1                                     TEAM-CYMRU - Team Cymru Inc.,US
#> 2                                                     RCN-AS - RCN,US
#> 3 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US

bulk_peer(c("68.22.187.5", "207.229.165.18", "198.6.1.65"))
#>    peer_as             ip       bgp_prefix cc registry  allocated                                   peer_as_name
#> 1    22822    68.22.187.5   68.22.187.0/24 US     arin 2002-03-15             LLNW - Limelight Networks, Inc.,US
#> 2     1273 207.229.165.18 207.229.128.0/18 US     arin                    CW Cable and Wireless Worldwide plc,GB
#> 3     2381 207.229.165.18 207.229.128.0/18 US     arin                                  WISCNET1-AS - WiscNet,US
#> 4     2603 207.229.165.18 207.229.128.0/18 US     arin                                      NORDUNET NORDUnet,NO
#> 5     2914 207.229.165.18 207.229.128.0/18 US     arin            NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US
#> 6     3257 207.229.165.18 207.229.128.0/18 US     arin                               TINET-BACKBONE Tinet SpA,DE
#> 7     3356 207.229.165.18 207.229.128.0/18 US     arin                  LEVEL3 - Level 3 Communications, Inc.,US
#> 8    11164 207.229.165.18 207.229.128.0/18 US     arin                  INTERNET2-TRANSITRAIL-CPS - Internet2,US
#> 9      174     198.6.1.65     198.6.0.0/16 US     arin                     COGENT-174 - Cogent Communications,US
#> 10     286     198.6.1.65     198.6.0.0/16 US     arin                  KPN KPN International / KPN Eurorings,NL
#> 11    1299     198.6.1.65     198.6.0.0/16 US     arin                                TELIANET TeliaSonera AB,SE
#> 12    2914     198.6.1.65     198.6.0.0/16 US     arin            NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US
#> 13    3257     198.6.1.65     198.6.0.0/16 US     arin                               TINET-BACKBONE Tinet SpA,DE
#> 14    3356     198.6.1.65     198.6.0.0/16 US     arin                  LEVEL3 - Level 3 Communications, Inc.,US
#> 15    3549     198.6.1.65     198.6.0.0/16 US     arin               LVLT-3549 - Level 3 Communications, Inc.,US
#> 16   22822     198.6.1.65     198.6.0.0/16 US     arin                        LLNW - Limelight Networks, Inc.,US

bulk_origin_asn(c(22822, 1273, 2381, 2603, 2914, 3257, 3356, 11164,
                  174, 286, 1299, 2914, 3257, 3356, 3549, 22822))
#>       as cc registry  allocated                                        as_name
#> 1  22822 US     arin 2001-11-28             LLNW - Limelight Networks, Inc.,US
#> 2   1273 EU  ripencc                    CW Cable and Wireless Worldwide plc,GB
#> 3   2381 US     arin                                  WISCNET1-AS - WiscNet,US
#> 4   2603 NO  ripencc                                      NORDUNET NORDUnet,NO
#> 5   2914 US     arin            NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US
#> 6   3257 DE  ripencc                               TINET-BACKBONE Tinet SpA,DE
#> 7   3356 US     arin 2000-03-10       LEVEL3 - Level 3 Communications, Inc.,US
#> 8  11164 US     arin 2014-07-11       INTERNET2-TRANSITRAIL-CPS - Internet2,US
#> 9    174 US     arin                     COGENT-174 - Cogent Communications,US
#> 10   286 EU  ripencc                  KPN KPN International / KPN Eurorings,NL
#> 11  1299 EU  ripencc                                TELIANET TeliaSonera AB,SE
#> 12  2914 US     arin            NTT-COMMUNICATIONS-2914 - NTT America, Inc.,US
#> 13  3257 DE  ripencc                               TINET-BACKBONE Tinet SpA,DE
#> 14  3356 US     arin 2000-03-10       LEVEL3 - Level 3 Communications, Inc.,US
#> 15  3549 US     arin 2000-03-21    LVLT-3549 - Level 3 Communications, Inc.,US
#> 16 22822 US     arin 2001-11-28             LLNW - Limelight Networks, Inc.,US

malware_hash(c("1250ac278944a0737707cf40a0fbecd4b5a17c9d",
              "7697561ccbbdd1661c25c86762117613",
              "cbed16069043a0bf3c92fff9a99cccdc",
              "e6dc4f4d5061299bc5e76f5cd8d16610",
              "e1112134b6dcc8bed54e0e34d8ac272795e73d74"))
#>                                   sha1_md5 last_known_timestamp detection_pct
#> 1 1250ac278944a0737707cf40a0fbecd4b5a17c9d  2015-07-23 10:12:42            NA
#> 2         7697561ccbbdd1661c25c86762117613  2015-07-23 10:12:42            NA
#> 3         cbed16069043a0bf3c92fff9a99cccdc  2010-04-25 00:04:03          0.71
#> 4         e6dc4f4d5061299bc5e76f5cd8d16610  2015-07-23 10:12:42            NA
#> 5 e1112134b6dcc8bed54e0e34d8ac272795e73d74  2010-06-22 15:52:26          0.79

test_dir("tests/")
#> testthat results ========================================================================================================
#> OK: 6 SKIPPED: 0 FAILED: 0
#> 
#> DONE

Code of Conduct

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

About

:dragon: package that provides interfaces to various Team Cymru Services

License:Other


Languages

Language:R 100.0%