mirror of https://github.com/MISP/misp-modules
11 lines
825 B
JSON
11 lines
825 B
JSON
{
|
|
"description": "A hover and expansion module to enrich an ip with geolocation and ASN information from an mmdb server instance, such as CIRCL's ip.circl.lu.",
|
|
"logo": "circl.png",
|
|
"input": "An IP address attribute (for example ip-src or ip-src|port).",
|
|
"output": "Geolocation and asn objects.",
|
|
"references": [
|
|
"https://data.public.lu/fr/datasets/geo-open-ip-address-geolocation-per-country-in-mmdb-format/",
|
|
"https://github.com/adulau/mmdb-server"
|
|
],
|
|
"features": "The module takes an IP address related attribute as input.\n It queries the public CIRCL.lu mmdb-server instance, available at ip.circl.lu, by default. The module can be configured with a custom mmdb server url if required.\n It is also possible to filter results on 1 db_source by configuring db_source_filter."
|
|
} |