xby-ip-query
Run the following command in DeepSeek Harness:
dsh plugin install xby-skill/xby-ip-query
Paste the following prompt into your AI chat to install this plugin:
Run dsh plugin install xby-skill/xby-ip-query in DeepSeek Harness; the plugin source is hosted at https://github.com/xby-skill/xby-ip-query, and IP intelligence query becomes available in chat once installed.
About this plugin
In day-to-day admin or security work with DSH, running into a suspicious IP usually means leaving the terminal, opening a browser, and logging into a separate threat-intel platform. xby-ip-query collapses that fragmented workflow into the conversation itself, so you can complete the investigation right where you are.
Backed by a global honeypot network and the Chaitin threat-intelligence dataset, the plugin returns geolocation, ASN, and historical malicious-behavior records for any IP address you query. A single set_xby_apikey call persists your API key across restarts, eliminating the need to reconfigure every session.
It is aimed at DSH users who regularly handle IP-related security events: triaging alerts, tracing unfamiliar source addresses in logs, or pulling everyday threat-intel lookups. The plugin lets them finish the job in one step without bouncing between tools.
Use Cases
- After receiving a security alert in DSH, query a suspicious IP's geolocation and malicious history right in the conversation
- Investigate an unfamiliar source address in logs and instantly retrieve its ASN and threat-intel profile
- During an on-call security shift, confirm in one step whether an IP is a known malicious node
Best For
- DSH admins responsible for security alert triage and incident response
- Security engineers who routinely look up IP threat intel and trace suspicious sources
- Ops personnel who want to fold threat-intel queries into a conversational workflow
Related Plugins
A network security red-team benchmark plugin for DeepSeek-V4.1/Flash featuring dual-layer kernel injection and zero-tool architecture for controlled model safety assessment.
A security red-team prompt plugin for DeepSeek-V4 that uses code-formal mapping and zero-trigger system prompts to enable unconditional output, intended for authorized testing and research only.
Adds an Auto approval mode on the official workspace-write sandbox, classifying semantic risks, asking when ambiguous, and denying destructive operations.
Undo/rollback system for DSH: config & plugin snapshots, one-click undo/redo/restore, message-level revert, secret masking, safe mode, and offline WebUI/GUI/CLI rescue tools for when DSH won't start.