Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The AbuseIPDB module enriches IP addresses and domains. To use this expansion module, you need to add the API key (Free to make an account for AbuseIPDB) and set the max_age_in_days value (How far in the past you want to look for that IP or domain). The module will return if the IP was found in AbuseIPDB's whitelists (is-whitelist), if it is related to Tor (is-tor), if it is public (is-public) and the abuse confidence score (abuse-confidence-score) which is a rating (scaled 0-100) of how confident AbuseIPDB is that an IP address is entirely malicious.
The module needs a new MISP object template (MISP/misp-objects#397)