Enhancing dnsdbq Output With Geolocation Data
ID: 5982eceb-b141-51bc-9076-f3082c9e087e
STIX ID: report--5982eceb-b141-51bc-9076-f3082c9e087e
Feed Name: DomainTools
This blog-style report demonstrates how to enhance Farsight DNSDB (dnsdbq) A/AAAA record outputs with ASN and geolocation data by using a local DB-IP Lite MMDB, the geoip2 Python library, and a provided script (enhance_json_2). It covers required files (~/.location and ~/.geo-database-location), filtering non-global IPs with a pytricia prefix tree, distance calculation via the Haversine formula, installation steps, performance notes, sample JSON Lines input/output, and the full Python implementation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
