[GH-ISSUE #4] [FEATURE] VirusTotal IP address scan #4

New issue

Closed

opened 2026-03-02 02:59:18 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 02:59:18 +03:00

Owner

Originally created by @fl0ppy-d1sk on GitHub (May 6, 2022).
Original GitHub issue: https://github.com/bunkerity/bunkerweb-plugins/issues/4

Plugin(s)
VirusTotal

What's needed and why ?
In addition to files, VirusTotal can also "scan" IP addresses (sample report : https://www.virustotal.com/gui/ip-address/1.2.3.4). We can use it to deny access if the IP of a client is detected as malicious by some vendors.

The following settings can be implemented :

SCAN_IP_ADDRESS=yes/no : enable/disable scan of IP address
IP_MALICIOUS_COUNT : Minimum number of "malicious" detections to consider the IP as rogue.
IP_SUSPICIOUS_COUNT : Minimum number of "suspicious" detections to consider the IP as rogue.

Implementations ideas (optional)
https://developers.virustotal.com/reference/ip-info

Originally created by @fl0ppy-d1sk on GitHub (May 6, 2022). Original GitHub issue: https://github.com/bunkerity/bunkerweb-plugins/issues/4 **Plugin(s)** VirusTotal **What's needed and why ?** In addition to files, VirusTotal can also "scan" IP addresses (sample report : https://www.virustotal.com/gui/ip-address/1.2.3.4). We can use it to deny access if the IP of a client is detected as malicious by some vendors. The following settings can be implemented : * `SCAN_IP_ADDRESS=yes/no` : enable/disable scan of IP address * `IP_MALICIOUS_COUNT` : Minimum number of "malicious" detections to consider the IP as rogue. * `IP_SUSPICIOUS_COUNT` : Minimum number of "suspicious" detections to consider the IP as rogue. **Implementations ideas (optional)** https://developers.virustotal.com/reference/ip-info