misp-modules
misp-modules copied to clipboard
Change geoip module to be able to point to a local DB
The free version of Maxmind dbs are not longer supported. We have a paid version and would like the module to point to this file.
They seem to have been replaced by the GeoIP2Lite databases (country and city are available). I believe these are updated every month. https://dev.maxmind.com/geoip/geoip2/geolite2/
A new Python lib for geoip2 is also available to use these databases: https://pypi.org/project/geoip2
https://github.com/MISP/misp-modules/pull/345