Enricher - RIPEstat Whois


This article describes the specific configuration options to set up the enricher.
To configure the general options for the enricher, see Configure the general options.

Specifications

Enricher name

RIPEstat Whois

Input

IP addresses (Ipv4 and ipv6).

Output

Whois information from the RIPEstat web-based interface (Whois REST API), including inet number, name, organization, country, city, street, and telephone.

API endpoint

https://stat.ripe.net/data/whois/ (Whois)

Description

The RIPEstat Whois enricher provides whois information related to the queried IP addresses.

Configure the enricher parameters

  1. Edit the enricher.

  2. From the Observable types drop-down menu, select one or more observable types you want to enrich with data retrieved through the RIPEstat Whois enricher.

  3. The API URL field is automatically filled in with the default domain for the endpoint.
    You can add a proxy or set up ports according to your needs.
    Default value: https://stat.ripe.net/data.

  4. To store your changes, click Save; to discard them, click Cancel.

See also