Geolocation needs fixing

NinjaJc01 / ssh-honeypot

SSH Honeypot that gathers creds and attempted commands

MIT License

19 stars 4 forks source link

Geolocation needs fixing #4

Open NinjaJc01 opened 4 years ago

NinjaJc01 commented 4 years ago

With the switch to SQLite, IP addresses cannot be geolocated as easily and the schema has changed. The solution would probably be either:

Geolocate from the honeypot OR
have a script to geolocate and add this data to a new table.

NinjaJc01 commented 4 years ago

Currently, the geolocation script uses https://ip-api.com/ to retrieve information about an IP address. As it can determine whether the IP belongs to a hosting provider, I quite like this API. That data is quite relevant for honeypots.