Skip to content
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
.github first commit Feb 26, 2019
LICENSE.txt first commit Feb 26, 2019

This is the official repository for the Underattack.Today Python module.


Underattack is a free security intelligence platform.

For more information please visit


Underattack provides a free API described here:

To use it you should register to the portal, it's free :)

The Python module

The module can be both imported in your own project or used as a command line tool.

As a module
>>> import underattack
>>> u = underattack.UnderattackAPIConnector('user', 'password')
>>> print(u.get_daily_feeds_yesterday())
{'count': 1203, 'indicators': ['', '', ... ]}
>>> print(u.lookup_ip('')
{'count': 31, 'events': [{'asn_org': 'Leibniz-Rechenzentrum', 'country_name': 'Germany', 'end': '2018-08-21T22:34:20.534000', 'tags': ['http/https'], 'indicator': '', 'start': '2018-08-21T22:34:20.534000', 'asn': 12816}, ...]}
As a tool
user@localhost:~$ ./ -h
usage: [-h] [--version] --username USERNAME --password PASSWORD
                      [--file-name FILE_NAME | --stdout] [--debug | --quiet]
                      (--lookup-ip LOOKUP_IP | --feeds-yesterday)

Underattack.Today API Client. Visit

optional arguments:
  -h, --help            show this help message and exit
  --version, -v         show program's version number and exit
  --file-name FILE_NAME, -f FILE_NAME
                        path of log file
  --stdout, -s          log in stdout
  --debug, -d           show more verbose logging
  --quiet, -q           disable logging
  --lookup-ip LOOKUP_IP, -ip LOOKUP_IP
                        get information about an IP
  --feeds-yesterday, -fy
                        get yesterday's feeds

  --username USERNAME, -u USERNAME
  --password PASSWORD, -p PASSWORD

Lookup IP

user@localhost:~$ ./ -u user -p password -ip
    "count": 31,
    "events": [
            "asn": 12816,
            "asn_org": "Leibniz-Rechenzentrum",
            "country_name": "Germany",
            "end": "2018-08-21T22:34:20.534000",
            "indicator": "",
            "start": "2018-08-21T22:34:20.534000",
            "tags": [

Daily feeds

user@localhost:~$ ./ -u user -p password -fy
    "count": 1197,
    "indicators": [
You can’t perform that action at this time.