diff --git a/objects/abuseipdb/definition.json b/objects/abuseipdb/definition.json new file mode 100644 index 0000000..da5030e --- /dev/null +++ b/objects/abuseipdb/definition.json @@ -0,0 +1,29 @@ +{ + "attributes": { + "abuse-confidence-score": { + "description": "Rating (0-100) of how confident AbuseIPDB is that an IP address is entirely malicious", + "misp-attribute": "counter", + "ui-priority": 0 + }, + "is-public": { + "description": "If an IP is public", + "misp-attribute": "boolean", + "ui-priority": 0 + }, + "is-tor": { + "description": "If Tor (The Onion Router) was used", + "misp-attribute": "boolean", + "ui-priority": 0 + }, + "is-whitelisted": { + "description": "If an IP is spotted in any of AbuseIPDB's whitelists", + "misp-attribute": "boolean", + "ui-priority": 0 + } + }, + "description": "AbuseIPDB checks an ip address, domain name, or subnet against a central blacklist", + "meta-category": "network", + "name": "abuseipdb", + "uuid": "cccdaaf6-c140-461c-8d1c-aa79bbd029e0", + "version": 1 +} \ No newline at end of file