search

atredispartners / flamingo

Flamingo captures credentials sprayed across the network by various IT and security products.
BSD 2-Clause "Simplified" License
451 stars 46 forks source link

Feature: Lookup ASN for IP addresses #11

Open stoege opened 4 years ago

stoege commented 4 years ago

hi there, cool stuff you're dooing here ... thx ! i don't have an issue, but an feature request. could you add the AS Number to the response field if possible ? that would make it much easier to build some stats ...

2020-05-11 23:15 Top 250 of 1961 attacking IP's *** Source: https://publicpuffy.nolink.ch/stats/topip.txt

1276 218.92.0.200 AS4134 | CN | CHINANET-BACKBONE
316 218.92.0.207 AS4134 | CN | CHINANET-BACKBONE
199 112.85.42.173 AS4837 | CN | CHINA169-BACKBONE
149 112.85.42.178 AS4837 | CN | CHINA169-BACKBONE
132 218.92.0.204 AS4134 | CN | CHINANET-BACKBONE
127 222.186.180.17 AS23650 | CN | CHINANET-JS-AS-AP

many thanks

hdm commented 4 years ago

The use case is mostly for internal networks, but if there is an easy package we can integrate that doesn't require network lookups, this might be doable.

stoege commented 4 years ago

as far as i know, there is no free and offline service available which would map the ip to as numbers ... :( thx anyway, got a lot of fun with flamingo :)