intelmq.bots.experts.cymru_whois package

Submodules

intelmq.bots.experts.cymru_whois.expert module

intelmq.bots.experts.cymru_whois.expert.BOT

alias of intelmq.bots.experts.cymru_whois.expert.CymruExpertBot

class intelmq.bots.experts.cymru_whois.expert.CymruExpertBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: bool = None)

Bases: intelmq.lib.bot.Bot

init()
process()

intelmq.bots.experts.cymru_whois.lib module

Reference: https://team-cymru.com/community-services/ip-asn-mapping/#dns

If the query returns more than one network, we select the more specific one. See https://github.com/certtools/intelmq/issues/543

class intelmq.bots.experts.cymru_whois.lib.Cymru

Bases: object

static _Cymru__asn_query(asn)

Queries ASN to get CC, registry, AS-name.

Returns string object of first result in case of success or None if there’s no result.

TODO: Handle multiple results See https://github.com/certtools/intelmq/issues/543

static _Cymru__asn_query_parse(text)

Example: “23028 | US | arin | 2002-01-04 | TEAM-CYMRU - Team Cymru Inc.,US” Exception: “1930 | EU | ripencc | | RCCN Rede Ciencia Tecnologia e Sociedade (RCTS),PT”

static _Cymru__ip_query_parse(text)

Example:

"1930       | 193.136.0.0/15  | PT | ripencc |"

Exception:

"9395 17431 | 219.234.80.0/20 | CN | apnic   | 2002-04-17"
static query(ip)

Module contents