GreedyBear icon indicating copy to clipboard operation
GreedyBear copied to clipboard

Add GeoIP information to each IP address

Open mlodic opened this issue 6 months ago • 2 comments

By using Maxmind free DB, we can enrich IP addresses with this info. In particular, the country is important and the Maxmind DB should be updated each day

mlodic avatar Jun 05 '25 10:06 mlodic

Can't we just use the GeoIP information already present in TPot?

regulartim avatar Jun 05 '25 20:06 regulartim

sure!

A really strong interest would be in knowing the country where the sensor (tpot) has been installed too so that this goal (https://github.com/intelowlproject/GreedyBear/issues/525) could be solved

mlodic avatar Jun 07 '25 12:06 mlodic