db_check.py

""" 
    The program when run, detects the use of anonymizing services in a test dataset
    
    Copyright (C) <year>  <name of author>

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as
    published by the Free Software Foundation, either version 3 of the
    License, or (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU Affero General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this program.  If not, see <https://www.gnu.org/licenses/>.
"""
import requests
import tkinter as tk
import tkinter.simpledialog as simpledialog
from toolTipText import *
import re #regular expression
from cryptography.fernet import Fernet

HEIGHT = 300
WIDTH = 500

def update_ui():
	root.update_idletasks()
	root.update()

#utility method for ip validation
def is_ipv4(i):
	try:
		return str(int(i)) == i and 0<=int(i)<=255
	except:
		return False

#method to validate ip address
def validate_ip(ip):
	if ip.count(".")==3 and all(is_ipv4(i) for i in ip.split(".")):
		return True
	return False

#method to validate domain name
def validate_domain(domain):
	regex = "^((?!-)[A-Za-z0-9]" + "{1,63}(?<!-)\\.)" + "+[A-Za-z]{2,6}" #regex to validate domain name
	p = re.compile(regex) #compile regex
	if re.search(p,domain):
		return True
	return False

#method to validate input for tor check
def validate_input(input):
	return validate_ip(input) or validate_domain(input)

#check IP address in RBL
def ip_check():
	ip_addr = simpledialog.askstring(title="IP Address", prompt="Enter the IP address to check: ")
	if ip_addr is None:
		return
	if not validate_ip(ip_addr):
		tk.messagebox.showerror("Invalid IP", "The IP address entered is not a valid IP address")
		return

	#open file having encrypted data needed for RBL API call
	f = open("encryptedData_rbl","r")
	key = bytes(f.readline(),"utf-8")
	encoded_api = bytes(f.readline(),"utf-8")
	f.close()
	cipher_suite = Fernet(key)
	api_key = cipher_suite.decrypt(encoded_api).decode("utf-8")

	#api call to check ip address
	url = "https://api.hetrixtools.com/v2/" + api_key + "/blacklist-check/ipv4/" + ip_addr + "/"
	status_label['text'] = "Checking..."
	update_ui()
	response = requests.get(url)
	result = response.json()
	status_label['text'] = ""
	update_ui()
	tk.messagebox.showinfo("Result", format_rbl_response(result))

#check domain name in RBL
def domain_check():
	domain_name = simpledialog.askstring(title="Domain", prompt="Enter the domain name to check: ")
	if domain_name is None:
		return
	if not validate_domain(domain_name):
		tk.messagebox.showerror("Invalid Domain Name", "The domain name entered is not a valid domain name")
		return
	
	#open file having encrypted data needed for RBL API call
	f = open("encryptedData_rbl","r")
	key = bytes(f.readline(),"utf-8")
	encoded_api = bytes(f.readline(),"utf-8")
	f.close()
	cipher_suite = Fernet(key)
	api_key = cipher_suite.decrypt(encoded_api).decode("utf-8")

	#api call to check domain name
	url = "https://api.hetrixtools.com/v2/" + api_key + "/blacklist-check/domain/" + domain_name + "/"
	status_label['text'] = "Checking..."
	update_ui()
	response = requests.get(url)
	result = response.json()
	status_label['text'] = ""
	update_ui()
	tk.messagebox.showinfo("Result", format_rbl_response(result))

#check IP or domain for Tor (also checks for VPN or Proxy)
def tor_check():
	ip_or_domain = simpledialog.askstring(title="IP/Domain", prompt="Enter the IP address or domain name to check: ")
	if ip_or_domain is None:
		return
	
	if not validate_input(ip_or_domain):
		tk.messagebox.showerror("Invalid IP or domain", "Please enter a valid IP address or domain name.")
		return

	#open file having encrypted data needed for Tor API call
	f = open("encryptedData_tor","r")
	key = bytes(f.readline(),"utf-8")
	encoded_api = bytes(f.readline(),"utf-8")
	f.close()
	cipher_suite = Fernet(key)
	api_key = cipher_suite.decrypt(encoded_api).decode("utf-8")
	#api call to check ip address
	url = "https://ipqualityscore.com/api/json/ip/" + api_key + "/" + ip_or_domain
	status_label['text'] = "Checking..."
	update_ui()
	response = requests.get(url)
	result = response.json()
	status_label['text'] = ""
	update_ui()
	tk.messagebox.showinfo("Result", format_tor_response(result))

#method to format the RBL API json result into response string 
def format_rbl_response(result):
	try:
		status = result['status']
		calls_left = result['api_calls_left']
		credits_left = result['blacklist_check_credits_left']
		blacklist_count = result['blacklisted_count']
		listings = ""
		if blacklist_count>0:
			listings = "Listed on:\n"
			for rbl in result['blacklisted_on']:
				listings += ">" + rbl['rbl'] + "\n" #+ rbl['delist'] + "\n"
		formatted_response = "Status: %s\nBlacklisted on %s databases\n%s" % (status,blacklist_count,listings)
	except Exception as e:
		formatted_response = "Formatting error: " + e
	return formatted_response

#method to format the Tor API json result into response string
def format_tor_response(result):
	try:
		formatted_response = ""
		if result['success']==False:
			formatted_response = "Error: " + str(result['message'])
			return formatted_response
		vpn = str(result['vpn'])
		active_vpn = str(result['active_vpn'])
		proxy = str(result['proxy'])
		tor = str(result['tor'])
		active_tor = str(result['active_tor'])
		
		formatted_response = "VPN: %s\nActive VPN: %s\nProxy: %s\nTor: %s\nActive Tor: %s" % (vpn,active_vpn,proxy,tor,active_tor)
	except Exception as e:
		formatted_response = "Formatting error: " + str(e)
	return formatted_response

root = tk.Tk()
root.title("Real-time Blacklist Check")
root.option_add('*Dialog.msg.font', 'Helvetica 12') #change font of popup messages

canvas = tk.Canvas(root, height=HEIGHT, width=WIDTH)
canvas.pack()

#adding background image
bg_img = tk.PhotoImage(file='images/blacklist.png')
bg_label = tk.Label(root, image=bg_img)
bg_label.place(relwidth=1,relheight=1)

#creating frame for buttons
frame = tk.Frame(root, bg='black', bd=5)
frame.place(relx=0.5,rely=0.1,relwidth=0.90,relheight=0.7,anchor='n')

ipCheckButton = tk.Button(frame, text="Check IP (RBL)", font=('Courier',12), bg='gray', command=lambda: ip_check())
ipCheckButton.place(relx=0.03, rely=0.1, relwidth=0.45, relheight=0.25)
CreateToolTip(ipCheckButton, text="Check if an IP address is blacklisted in RBL databases")

domainCheckButton = tk.Button(frame, text="Check Domain (RBL)", font=('Courier',12), bg='gray', command=lambda: domain_check())
domainCheckButton.place(relx=0.52, rely=0.1, relwidth=0.45, relheight=0.25)
CreateToolTip(domainCheckButton, text="Check if a domain is blacklisted in RBL databases")

torCheckButton = tk.Button(frame, text="Tor Check", font=('Courier',12), bg='gray', command=lambda: tor_check())
torCheckButton.place(relx=0.15, rely=0.5, relwidth=0.7, relheight=0.25)
CreateToolTip(torCheckButton, text="Check if an IP or domain for VPN/Proxy/Tor endpoint")

status_label = tk.Label(frame, font=('Courier',12), anchor='s', justify='left', bd=1)
status_label.place(relx=0.3, rely=0.8, relwidth=0.3, relheight=0.1)
status_label.config(bg='black', foreground='white')

root.mainloop()
#rbl_api_key = '186634fde8f72bb688f0f95f952f66e1'
#tor_api_key = 'aoHshnEqWxnpYwX3XrC27NGOvGEhJ7HM'
#sample tor endpoints
'''
Exit nodes:
101.100.146.147
101.98.27.141	
101.99.90.171
'''