Invalid IP in abuse-ch-threatfox

Question

Invalid IP in abuse-ch-threatfox

Closed this issue 2 years ago · 2 comments

This is an invalid IP: https://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds/blob/master/abuse-ch-threatfox-ip.intel#L18

Answer 1 · 2022-07-19T12:06:53.000Z

Working on a filter routine for the Abuse-CH feeds now.

Answer 2 · 2022-07-19T12:35:40.000Z

The invalid IP of "143.404.146.87" is part of the source feed from Abuse-CH. However, it has been removed and will be filtered as we continue to pull the Threatfox feed each hour. Thank you for letting me know!