Enrichment Control Center

Every enrichment/resolution stage in one place. Each runner is resumable and auto-continuing — open it and leave the tab, or schedule the cron block below for fully hands-off enrichment. Fastest path to "everything enriched": 2 → 3 (load netblocks, resolve locally) fills ASN/org/country for millions of IPs with no API; then 5 (OTX is keyless) adds threat context.

Pipeline Stages

Enrich Everything on Cron (paste into cPanel → Cron Jobs)

# Collect feeds every 30 min
*/30 * * * * php /home/zaptf0zdggll/public_html/threats/collect.php >/dev/null 2>&1
# Pull daily WhoisXML netblocks delta + import + resolve (fills ASN/org/country)
30 4 * * * php /home/zaptf0zdggll/public_html/threats/fetch-ipdata.php which=netblock variant=daily >/dev/null 2>&1
45 4 * * * php /home/zaptf0zdggll/public_html/threats/resolve-local.php >/dev/null 2>&1
# ASN abuse contacts hourly
0 * * * * php /home/zaptf0zdggll/public_html/threats/resolve-asn-abuse.php >/dev/null 2>&1
# API enrichment (OTX keyless) every 15 min; add other providers as keys allow
*/15 * * * * php /home/zaptf0zdggll/public_html/threats/enrich-run.php provider=alienvault >/dev/null 2>&1
# DNS audit hourly
15 * * * * php /home/zaptf0zdggll/public_html/threats/dns-audit.php bulk=run >/dev/null 2>&1

Each job is resumable and idempotent — safe to run repeatedly. For the initial full backfill, run stages 1–6 once from the buttons above (leave each tab open until it reports complete).