MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #397 from GeekWeekSteph/abuseipdb 

Added AbuseIPDB object template for the AbuseIPDB expansion module
pull/400/head
Alexandre Dulaunoy 2023-07-10 21:54:57 +02:00 committed by GitHub
parent e6864eb745 1374b0c7f0
commit a9c0447be8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
objects/abuseipdb/definition.json Normal file
View File

@ -0,0 +1,29 @@
{
"attributes": {
"abuse-confidence-score": {
"description": "Rating (0-100) of how confident AbuseIPDB is that an IP address is entirely malicious",
"misp-attribute": "counter",
"ui-priority": 0
},
"is-public": {
"description": "If an IP is public",
"misp-attribute": "boolean",
"ui-priority": 0
},
"is-tor": {
"description": "If Tor (The Onion Router) was used",
"misp-attribute": "boolean",
"ui-priority": 0
},
"is-whitelisted": {
"description": "If an IP is spotted in any of AbuseIPDB's whitelists",
"misp-attribute": "boolean",
"ui-priority": 0
}
},
"description": "AbuseIPDB checks an ip address, domain name, or subnet against a central blacklist",
"meta-category": "network",
"name": "abuseipdb",
"uuid": "cccdaaf6-c140-461c-8d1c-aa79bbd029e0",
"version": 1
}