Generates XARF reports from multiple sources.
Explore the docs »
Report Bug
·
Request Feature
Table of Contents
XARF Report Generator is a command line tool that generates XARF reports from multiple sources, and can automatically report them to the abuse contact listed in the WHOIS record of the IP using the RIPE API. Currently it supports the following sources:
- Windows EventViewer (Failed Logon Attempts)
- IPBan (Recent Bans)
Get logs between two dates:
xarf-report-generator -s 2022-04-09T00:00:00Z -e 2022-04-08T00:00:00Z
Filter by IP list file:
xarf-report-generator -f ip-list.txt
Change output path:
xarf-report-generator -o /path/to/output/dir
For more examples, please refer to the Wiki
- (Maybe) Automatically report to AbuseIPDB.com
- IIS Logs collector
See the open issues for a full list of proposed features (and known issues).
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!
- Fork the Project
- Create your Feature Branch (
git checkout -b feature/AmazingFeature) - Commit your Changes (
git commit -m 'Add some AmazingFeature') - Push to the Branch (
git push origin feature/AmazingFeature) - Open a Pull Request
Distributed under the GNU AFFERO GENERAL PUBLIC LICENSE v3. See LICENSE for more information.
IT-Hock - info@it-hock.de
Project Link: https://github.com/IT-Hock/xarf-report-generator
- IT-Hock (Developer)
- Abusix (Author of XARF)
- IP-API.com (IP Lookup)
- AbuseIPDB.com (Auto IP Reporting)
- Amazon (Idea for the project - by requesting a XARF Report from us)
- IPBan.com (Developer of IPBan - Great Software for banning IPs)
- RIPE (Provider of the WHOIS API for the IPs)