geoip-lookup

• Lookup the IP address in the opened MaxMind DB

Usage

Usage: geoip-lookup [OPTIONS] --file <FILE>

Options:
  -d, --db-path <DIR>  MaxMind DBs directory path(GeoLite2-ASN.mmdb/GeoLite2-City.mmdb/GeoLite2-Country.mmdb)
  -f, --file <FILE>    IP file path(only one column)
  -h, --help           Print help
  -V, --version        Print version

Pre-requisites

1. Get maxmind db following three files from MAXMIND Web site.(Login account required)
   • GeoLite2-ASN.mmdb
   • GeoLite2-City.mmdb
   • GeoLite2-Country.mmdb
2. Put the above 3 files in same directory(e.g. ./db)
3. Create a file with only one column of IP addresses you want to enrich(e.g. ip.csv)

How to use(from release)

geoip-lookup -d ./db -f ip.csv

How to use(from source)

1. Install Rust.
   • You need c++ build tool(on windows).
2. Run following command.

cargo run -- -d ./db -f ip.csv

Input

A file with one column of IP addresses as below

192.168.0.1
192.168.0.2
192.168.0.3
...

Output(stdout)

Then IPs are enriched by MaxMind DB

192.168.0.1,Hogehoge Internet Ltd,United Kingdom,Kendal
192.168.0.2,Hello-CAROLINAS,United States,Jacksonville
192.168.0.3,ADB01,Jamaica,Kingston

Acknowledgements

• maxminddb-rust library by @oschwald
• hayabusa by @Yamato-Security, @hitenkoku