Networking Models

[vorburger]

Models (some of these are Datatype, and some Class):

• Ethernet MAC Address
• IP v4 & V6 Address & Range; opt. with Geo
• Hostname
• ProtocolL4: UDP, TCP, QUICK, ...
• ProtocolL7: HTTPS, HTTP, SMTP, ...
• Port
• SocketAddressEndpoint
• IP Subnet (Mask, Gateway, DNS?)
• DNS DNS #880
• ASN (?)

Connectors:

• nmap!
• Geo
  • https://country.is
  • https://www.findip.net
  • https://ipinfo.io
  • https://github.com/topics/geolocation-database
  • ...

[abdullahdevrel]

Hey @vorburger, random passerby from IPinfo. I do not know much about the project or this issue, but if you have any questions about IPinfo, let me know. Just guestimating here.

ASN

In our free API service, you can find ASN information for an IP address in the org field. However, you will need to split the text by the first space to obtain both the ASN and the ASN organization name.

{
    "ip": "126.238.217.75",
    "hostname": "ai126238217075.19.access-internet.ne.jp",
    "city": "Chiba",
    "region": "Chiba",
    "country": "JP",
    "loc": "35.6000,140.1167",
    "org": "AS17676 SoftBank Corp.",
    "postal": "260-0014",
    "timezone": "Asia/Tokyo",
    "readme": "https://ipinfo.io/missingauth"
}

geolocation-database

We have a pretty good free geolocation database if you want to test it out:
https://ipinfo.io/products/free-ip-database

The default file format for IP address databases, in general, is MMDB. For more context, visit:
https://ipinfo.io/blog/ipinfo-database-formats