criminalip: use quotes
joshhighet opened this issue · comments
a query of ip:"1.1.1.1" returns nothing while a query for ip:1.1.1.1 will return data
however a search for port:53 and port:"53" will return the same results
the current no-quote ip address query means you will receive search errors
https://www.criminalip.io/en/mypage/support/647
space separators unclear
i.e this does not work
title:"PaperCut" country:"NZ"
but this does
title: PaperCut country: "NZ"
The use of double quotation marks is a feature used to search for exact or partial matches for a search query. However, in the case of IP filters, this feature is not provided, and the search results may not appear because the string "1.1.1.1" is searched as it is, which does not match the IP format.
However, we are currently adjusting the query writing method to enable users to write more intuitive search queries within the organization, and we plan to apply a more intuitive search method soon.