misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

Change geoip module to be able to point to a local DB

Open syloktools opened this issue 6 years ago • 2 comments

The free version of Maxmind dbs are not longer supported. We have a paid version and would like the module to point to this file.

syloktools avatar Jan 25 '19 14:01 syloktools

They seem to have been replaced by the GeoIP2Lite databases (country and city are available). I believe these are updated every month. https://dev.maxmind.com/geoip/geoip2/geolite2/

A new Python lib for geoip2 is also available to use these databases: https://pypi.org/project/geoip2

RicoVZ avatar May 06 '19 15:05 RicoVZ

https://github.com/MISP/misp-modules/pull/345

0xmilkmix avatar Oct 25 '19 16:10 0xmilkmix