logo

Enhancing dnsdbq Output With Geolocation Data

ID: 5982eceb-b141-51bc-9076-f3082c9e087e

STIX ID: report--5982eceb-b141-51bc-9076-f3082c9e087e

Feed Name: DomainTools

Date Published: 2026-04-01

Date Updated: 2026-04-27

Author: domaintools.com

...
...

This blog-style report demonstrates how to enhance Farsight DNSDB (dnsdbq) A/AAAA record outputs with ASN and geolocation data by using a local DB-IP Lite MMDB, the geoip2 Python library, and a provided script (enhance_json_2). It covers required files (~/.location and ~/.geo-database-location), filtering non-global IPs with a pytricia prefix tree, distance calculation via the Haversine formula, installation steps, performance notes, sample JSON Lines input/output, and the full Python implementation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.