HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
ipinfo
cli
Go2021–2025
ipinfo / cli

cli

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)

Command LineMaps & Geospatial
Explore on GitHubRead Hacker News discussions
2Distinct people
7Mentions
1Explicit recommenders
2.2KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

Feel free to check out the IPinfo CLI: https://github.com/ipinfo/cli I highly recommend the following commands: - grepip: extract IP addresses from text. - summarize: The…

reincoder used a recommendation phrase. One indexed comment matches. This is a phrase match, not a verdict.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 11:56:56 AM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year7 dated mentions

Observed mentions: 2021-05-04 20:33:20 UTC to 2025-04-20 16:45:12 UTC.

012342021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 1 mentions; 1 submissions, 0 comments20212022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments20232024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC110
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC101
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC000
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC404
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC101

What Hacker News says

7 sources
reincoder·Apr 20, 2025
I work for IPinfo (a commercial service). We offer a residential proxy detection service, but it costs money. If you are being bombarded by suspicious IP addresses, please consider using our free service and blocking IP addresses by ASN or Country. I think ASN is a common parameter for malicious IP addresses. If you do not have time to explore our services/tools (it is mostly just our CLI: https://github.com/ipinfo/cli), simply paste the IP addresses (or logs) in plain text, send it to me and I will let you know the ASNs and corresponding ranges to block.
In The Web Is Broken – Botnet Part 2
reincoder·Jun 17, 2024
If anyone is looking to run IP metadata based reports on their honeypot, I can suggest IPinfo's CLI (https://github.com/ipinfo/cli). Here is my summary report from Fail2Ban: ``` Summary - Total 1490 - Unique 153 - Anycast 0 - Bogon 0 - Mobile 52 - VPN 91 - Proxy 12 - Hosting 1003 - Tor 0 - Relay 0 Top ASNs - AS132203 Tencent Building, Kejizhongyi Avenue 409 (27.4%) - AS14061 DigitalOcean, LLC 148 (9.9%) - AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED 72 (4.8%) - AS16276 OVH SAS 72 (4.8%) - AS206264 Amarutu Technology Ltd 44 (3.0%) Top Usage Types - Hosting 955 (64.1%) - ISP 418 (28.1%) - Business 49 (3.3%) Top Routes - 43.134.64.0/18 (AS132203) 48 (3.2%) - 183.81.169.0/24 (AS206264) 44 (3.0%) - 43.156.192.0/18 (AS132203)
Read the rest
36 (2.4%) - 43.130.0.0/18 (AS132203) 36 (2.4%) - 43.134.0.0/18 (AS132203) 36 (2.4%) Top Countries - United States 276 (18.5%) - Singapore 221 (14.8%) - China 141 (9.5%) - France 88 (5.9%) - Japan 86 (5.8%) Top Cities - Singapore, Singapore, SG 221 (14.8%) - Santa Clara, California, US 100 (6.7%) - Hong Kong, Hong Kong, HK 80 (5.4%) - Tokyo, Tokyo, JP 61 (4.1%) - Amsterdam, North Holland, NL 50 (3.4%) Top Regions - Singapore, SG 221 (14.8%) - California, US 134 (9.0%) - Tokyo, JP 86 (5.8%) - Hong Kong, HK 80 (5.4%) - New Jersey, US 70 (4.7%) Top Carriers - Africell 12 (0.8%) - Claro 12 (0.8%) - Vivo 12 (0.8%) - WINDTRE 12 (0.8%) - Telekom 4 (0.3%) Top Privacy Services - TunnelBear 36 (2.4%) - Best Proxy Switcher 12 (0.8%) Top Domains - ovh.net 60 (4.0%) - googleusercontent.com 24 (1.6%) - prod-infinitum.com.mx 16 (1.1%) - poneytelecom.eu 12 (0.8%) ``` Here is the command I used: ``` cat /var/log/fail2ban.log | ipinfo grepip -o | ipinfo summarize ``` The CLI is free to use. You can also do `bulk` enrichment. ``` cat /var/log/fail2ban.log | ipinfo grepip -o | ipinfo bulk -c > fail2ban_ips.csv ``` Disclaimer: I work for IPinfo. However, the CLI is free to use, and the bulk feature will usually work within your free tier limits. Ping me if you have any questions
In What You Get After Running an SSH Honeypot for 30 Days
reincoder·Jun 17, 2024
I (DevRel of IPinfo) run Fail2Ban on a VM as well. Protip use the CLI. - The CLI has the `grepip` command that extracts all the IP addresses from a text. You do not have to parse your logs. - Analyze your data. After you have extracted your IP addresses from your logs, pipe them to the `summarize`, `map`, and `bulk` commands on the CLI. - If you are doing bulk enrichment with the `bulk` command, you can use some kind of CSV query tool like CSVtoolkit, DuckDB, or Python-Pandas. - Look into the ASN data. ASN data is always going to be the more interesting IP metadata for honeypots IPs. Summarize the IP addresses with the `summarize` command; it will give you a high-level report. If you want a web-shareable report, make a POST call to that endpoint. Docs: https://ipinfo.io/tools/summarize-ips https://github.com/ipinfo/cli You can always send
Read the rest
your logs to me and ask what I think of them, and if I can find common patterns based on IP metadata. I am running our API and database services 24/7 and enjoy looking at logs. I can suggest firewall configurations based on country and ASN information provided by our free data.
In What You Get After Running an SSH Honeypot for 30 Days
reincoder·Apr 26, 2024Recommendation phrase
Feel free to check out the IPinfo CLI: https://github.com/ipinfo/cli I highly recommend the following commands: - grepip: extract IP addresses from text. - summarize: The command summarizes the IP addresses and provides output in text. It is different than the summary tool I mentioned. - bulk: Bulk/batch enrich IP address. Output can be CSV or JSON. If you need any help or want me to take a look at those IP addresses (or ASNs and organizations), please create a post on the IPinfo community. I can share the code and instructions with you.
In Visualizing malicious IP addresses
coderholic·Jul 31, 2022
For another cli based IP address utility check out IPinfo.io's CLI: https://github.com/ipinfo/cli It doesn't currently support calculations, but it does support conversion of start-end ranges to CIDRs (via `range2cidr` and `cidr2range`) and `grepip`. If you just want to get details for an IP it's gives a great overview, and supports bulk lookup too: $ ipinfo 8.8.8.8 Core - IP 8.8.8.8 - Anycast true - Hostname dns.google - City Mountain View - Region California - Country United States (US) - Location 37.4056,-122.0775 - Organization AS15169 Google LLC - Postal 94043 - Timezone America/Los_Angeles ASN - ID AS15169 - Name Google LLC - Domain google.com - Route 8.8.8.0/24 - Type business Company
Read the rest
- Name Google LLC - Domain google.com - Type business Privacy - VPN false - Proxy false - Tor false - Relay false - Hosting false - Service Abuse - Address US, CA, Mountain View, 1600 Amphitheatre Parkway, 94043 - Country United States (US) - Email network-abuse@google.com - Name Abuse - Network 8.8.8.0/24 - Phone +1-650-253-0000
In Ipcalc – Command line CIDR calculator with IPv6 support
coderholic·May 4, 2021Submission

Show HN: Ipinfo.io CLI

We've just launched an opensource golang `ipinfo` cli that lets you quickly and easily get IP address data from the cli. You can lookup geolocation, isp, carrier & vpn status for a single IP (in much the same way you can by `curl ipinfo.io`) but there's a bunch of additional functionality, including: - bulk lookups of IPs - summarize IPs (so get top ASNs, cities etc from a ton of IPs) - grepip subcommand to grep for IPs (v4, v6 and bogon flags available) - map command to map a bunch of IPs And more! See https://github.com/ipinfo/cli for more details and installation instructions
9 points · Open discussion

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.