A ruby wrapper for the Project Honeypot's DNS API (forked from https://github.com/cmaxw/project-honeypot )
Go to file
Guillaume DOTT 5585e5d92e Update README 2013-01-14 17:13:07 +01:00
lib Add custom offenses list to determine if safe or not 2013-01-04 17:22:00 +01:00
spec Improve tests rspec syntax 2013-01-14 14:30:07 +01:00
.gitignore Add temporary files (swap, backup) to gitignore 2012-12-21 16:49:19 +01:00
Gemfile Update Gemfile and gemspec file 2012-12-19 15:04:40 +01:00
MIT-LICENSE include base files. MIT License. Create gemspec 2010-10-20 13:32:24 -06:00
README.rdoc Update README 2013-01-14 17:13:07 +01:00
project_honeypot.gemspec Rename project-honeypot to project_honeypot 2013-01-04 11:30:32 +01:00

README.rdoc

= Project Honeypot

Project Honeypot is a programmatic interface to the Project Honeypot HTTP:BL service for identifying suspicious ip addresses.

It is a handy thing to be able to identify spammers, harvesters, and other suspicious IP addresses if you're worried about who might be abusing your service.

== Requirements

This Gem requires that you have an Http:BL API key from Project Honeypot. You can get one at http://projecthhoneypot.org

== Configuration

  ProjectHoneypot.configure do
    @api_key = 'api_key'
    @score = 42
    @last_activity = 10
    @offenses = [:comment_spammer, :suspicious, :harvester]
  end

== Usage

HTTP:BL lookups through Project Honeypot result in a Url object that gives you the risk score, last activity, and types of offenses the ip address is listed for.

The score is worse the higher it is and the last_activity is in days.

=== Example #1: Suspicious IP Address

Given an api key of "abcdefghijkl"

  @listing = ProjectHoneypot.lookup("abcdefghijkl", "192.168.1.1")
  @listing.safe?
  # => false

  @listing.safe?(score: 64, last_activity: 10, offenses: [:comment_spammer])
  # => true

  @listing.ip_address
  # => "192.168.1.1"

  @listing.score
  # => 63

  @listing.last_activity
  # => 1

  @listing.offenses
  # => [:comment_spammer, :suspicious]

  @listing.comment_spammer?
  # => true

  @listing.suspicious?
  # => true

  @listing.harvester?
  # => false

  @listing.search_engine?
  # => false

=== Example #2: Safe IP Address

  @listing = ProjectHoneypot.lookup("192.168.1.1")
  @listing.safe?
  # => true

  @listing.ip_address
  # => "192.168.1.1"

  @listing.score
  # => 0

  @listing.last_activity
  # => nil

  @listing.offenses
  # => []

  @listing.comment_spammer?
  # => false

  @listing.suspicious?
  # => false

  @listing.harvester?
  # => false