
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
geoip-country2
Advanced tools
Less memory usage version of geoip-lite, by supporting only country lookup.
!!! The difference with original version is removed redundant "colors" package !!!
Less memory usage version of geoip-lite by limiting to country information. This product includes GeoLite2 ipv4 and ipv6 country data which created by MaxMind, available from https://www.maxmind.com. The database of this product updates weekly.
You should read this README and the LICENSE and EULA files carefully before deciding to use this product.
After v4, LICENSE for the database was changed. If you need to use this product with previous LICENSE, please use v3.
var geoip = require('geoip-country');
var ip = "207.97.227.239";
var geo = geoip.lookup(ip);
console.log(geo);
{ range: [ 3479299040, 3479299071 ],
country: 'US'}
$ npm install geoip-country
$ npm run-script updatedb --license_key=YOUR_GEOLITE2_LICENSE_KEY
or
$ GEOLITE2_LICENSE_KEY=YOUR_GEOLITE2_LICENSE_KEY node scripts/updatedb.js
YOUR_GEOLITE2_LICENSE_KEY should be replaced by a valid GeoLite2 license key. Please follow instructions provided by MaxMind to obtain a license key.
geoip-country is completely synchronous. There are no callbacks involved. All blocking file IO is done at startup time, so all runtime calls are executed in-memory and are fast. Startup may take up to 20ms while it reads into memory and indexes data files.
If you have an IP address in dotted quad notation, IPv6 colon notation, or a 32 bit unsigned integer (treated
as an IPv4 address), pass it to the lookup
method. Note that you should remove any [
and ]
around an
IPv6 address before passing it to this method.
var geo = geoip.lookup(ip);
If the IP address was found, the lookup
method returns an object with the following structure:
{
range: [ <low bound of IP block>, <high bound of IP block> ],
country: 'XX' // 2 letter ISO-3166-1 country code
}
The actual values for the range
array depend on whether the IP is IPv4 or IPv6 and should be
considered internal to geoip-country
. To get a human readable format, pass them to geoip.pretty()
If the IP address was not found, the lookup
returns null
You can update country database with updateDatabase
method.
geoip.updateDatabase(license_key, callback);
license_key
is a license key which provided by MaxMind. You can get GeoLite2 license key as instructions.
If you have a 32 bit unsigned integer, or a number returned as part of the range
array from the lookup
method,
the pretty
method can be used to turn it into a human readable string.
console.log("The IP is %s", geoip.pretty(ip));
This method returns a string if the input was in a format that geoip-country
can recognize, else it returns the
input itself.
This package contains an update script that can pull the files from MaxMind and handle the conversion from CSV. A npm script alias has been setup to make this process easy. Please keep in mind this requires internet and MaxMind rate limits that amount of downloads on their servers.
npm run-script updatedb --license_key=YOUR_GEOLITE2_LICENSE_KEY
or
GEOLITE2_LICENSE_KEY=YOUR_GEOLITE2_LICENSE_KEY node scripts/updatedb.js
YOUR_GEOLITE2_LICENSE_KEY should be replaced by a valid GeoLite2 license key. Please follow instructions provided by MaxMind to obtain a license key.
You can store the database files in custom directory with the environment variable GEODATADIR
or CLI parameter --geodatadir=XXXXX
.
For creating or updating the database files in custom directory, you need to run built-in updater as documented above with setting the environment variable GEODATADIR
or CLI parameter --geodatadir=XXXXX
.
If you have no write-access to the geoip-country
directory, it would be better to set the environment GEOTMPDATADIR
or CLI parameter --geotmpdatadir=YYYYY
for temporary directory when updating the database files.
Please carefully read the LICENSE and EULA files. This package comes with certain restrictions and obligations, most notably:
You can read the latest version of GeoLite2 EULA.
FAQs
Less memory usage version of geoip-lite, by supporting only country lookup.
The npm package geoip-country2 receives a total of 0 weekly downloads. As such, geoip-country2 popularity was classified as not popular.
We found that geoip-country2 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.