Filter IP addresses from known scanners

[mlodic]

We should periodically download this batch of data: https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/mass_scanner.txt
and add those IP to whitelists to reduce number of false positives

[mlodic]

hey, thanks for your interest. Anyway I think we should consider the context of this issue that seems to be misunderstood considering what you have written. This is a Threat Intel Platform and we are talking about the IP addresses stored by the DB, not the ones who connect to the application. We don't want to stop external IP addresses. We just want to categorize them correctly.
So what you have suggested, while it is super useful in other contexts, does not apply to this one.

[regulartim]

We can get this information directly from TPot. TPot uses listbot to classify IP addresses according to their reputation. The scanner list you suggested is already included. See .

[mlodic]

yep I know, this is why I mentioned it. It makes sense to add that list to reduce FP