splunk-misc Miscellaneous resources worth looking into IP to ASN lookups via DNS! http://www.team-cymru.org/IP-ASN-mapping.html#dns https://gist.github.com/hosom/eb0821775c7626e8dd84 IP to ASN Splunk app https://splunkbase.splunk.com/app/3022/ Team Cymru stuff in general http://www.team-cymru.org/services.html DNS Sinkholes https://github.com/jimdigriz/network-layer-protection https://bitbucket.org/SPLServices/