[Feature Request] Integration of ismalicious.com aggregated database

[hexablob]

Is your feature request related to a problem? Please describe.
We can improve maltrail cyberthreats detection system to a lot more blocklist sources and get benefits from maliciousness scoring.

Describe the solution you'd like
Integration of ismalicious.com API (users can use their free plan API key)

[MikhailKasimov]

Hm, what if to do in reverse order: to integrate Maltrail to ismalicious.com ? :)

[hexablob]

Hm, what if to do in reverse order: to integrate Maltrail to ismalicious.com ? :)

definitely worth how to do it properly, is there any API, sdk, something quick 2 deploy @MikhailKasimov ???

[MikhailKasimov]

Hm, what if to do in reverse order: to integrate Maltrail to ismalicious.com ? :)

definitely worth how to do it properly, is there any API, sdk, something quick 2 deploy @MikhailKasimov ???

E.g. Maltrail's blacklist (https://github.com/stamparm/maltrail?tab=readme-ov-file#blacklist), forwarding Maltrail's logs to syslog and logstash (https://github.com/stamparm/maltrail/blob/master/maltrail.conf#L102-L106), Wazuh rules (https://github.com/MikhailKasimov/maltrail-wazuh-decoder-and-rules).

Also Validin has integration with Maltrail (https://x.com/ValidinLLC/status/1719666086390517762) and they did it by themselves.

[hexablob]

Hm, what if to do in reverse order: to integrate Maltrail to ismalicious.com ? :)

definitely worth how to do it properly, is there any API, sdk, something quick 2 deploy @MikhailKasimov ???

E.g. Maltrail's blacklist (https://github.com/stamparm/maltrail?tab=readme-ov-file#blacklist), forwarding Maltrail's logs to syslog and logstash (https://github.com/stamparm/maltrail/blob/master/maltrail.conf#L102-L106), Wazuh rules (https://github.com/MikhailKasimov/maltrail-wazuh-decoder-and-rules).

Also Validin has integration with Maltrail (https://x.com/ValidinLLC/status/1719666086390517762) and they did it by themselves.

Thank you @MikhailKasimov, the blacklist source is now part of the 574 aggregated sources we use on ismalicious.com

We're distributing data around domains & ips reputation so maltrail can use more than 1 blacklist source to scan & detect potential malicious entities.