teler-sh/teler

[FEATURE] Add integration with abuseipdb

Closed this issue · 3 comments

JustHumanz commented

Is your feature request related to a problem? Please describe.
I know teler was a IDS,but i think it's will be great if teler can fight back against the threat
like reporting the source of ip address threat to abuseipdb

Describe the solution you'd like
N/A

Describe alternatives you've considered
N/A

Additional context
N/A

kitabisa-bot commented

Thank you for raising a issue to us so promptly. Please make sure you have given us as much context as possible.

We will try and get back to you as soon as possible.

on hold

dwisiswant0 commented

The core of development is designed to be fast. I'm not sure if this feature was created, because if we refer to AbuseIPDB site, for bulk reporting, the size is limited to 2MB, hence it will slow down the analysis process. It's too small, and it's too big. Why?

  1. If we chunk IP addresses every 2MB, then do a reporting, this will slow down the rest of analysis process, or
  2. If reporting process was waiting for teler to stop (which might generate 100MB IP addresses), back then, the limit is just 2MB.

Since we can also detect bad IP addresses, if user choose to save the analysis results - it is better for user to report themself.