Exemplo n.º 1
0
def get_asn_for_ip(ip_addr):

    try:
        reader = Reader(
            os.path.join(GEOLOCATION_DATABASE_PATH, GEOLOCATION_DATABASE_ASN))
        return reader.asn(ip_addr)
    except Exception as e:
        logger.warn("Failed retrieving asn info for %s: %s" %
                    (ip_addr, str(e)))
        return None
Exemplo n.º 2
0
def fetch_asn(ip_address):
    # Check if INCLUDE_ASN is True before proceeding
    if not config.INCLUDE_ASN:
        return None

    # Load GeoLite2 ASN database
    geoasn = Reader(path.join(config.MMDB_PATH, "GeoLite2-ASN.mmdb"))

    # Try to fetch data and build response, otherwise return empty
    try:
        data = geoasn.asn(ip_address)
        return {
            "name": data.autonomous_system_organization,
            "id": data.autonomous_system_number
        }
    except AddressNotFoundError:
        return {}
    finally:
        geoasn.close()
Exemplo n.º 3
0
    else:
        result[key] = current
    return result


for message in consumer:
    # message value and key are raw bytes -- decode if necessary!
    # e.g., for unicode: `message.value.decode('utf-8')`
    # print ("%s:%d:%d: key=%s value=%s" % (message.topic, message.partition,
    #                                  message.offset, message.key,
    #                                 message.value))

    data = json.loads(message.value)
    try:
        res = mmdb.city(data['dest_ip'])
        asn = asndb.asn(data['dest_ip'])
        data['dest_latitude'] = res.location.latitude
        data['dest_longitude'] = res.location.longitude
        data['dest_country_name'] = res.country.names['en']
        data['dest_asn'] = asn.autonomous_system_number
        data['dest_autonomous_system'] = asn.autonomous_system_organization
    except:
        data['dest_latitude'] = 0.0
        data['dest_longitude'] = 0.0
        data['dest_country_name'] = 'unknown'
        data['dest_asn'] = 'unknown'
        data['dest_autonomous_system'] = 'unknown'
    try:
        res = mmdb.city(data['src_ip'])
        asn = asndb.asn(data['src_ip'])
        data['src_latitude'] = res.location.latitude