TPOT to MISP importer

[in-secure]

Hi guys,
I started to tinker with TPOT some years ago and I thought that an integration with MISP instance will be great and it will made all the ips collected ready to be consumed, so I created (with the help of AI) a python script to do so.

Key Features:

• gather attackers ip filtering on minimum number of attacks per source ip
• daily events creation, based on couple "ip reputation"x"honeypot location" (also used to tag the events)
• attributes are deduplicated and tagged with "attacker country", "attacker isp name", "destination port" and "protocol used"
• tags are created automatically if missing

If someone want to tinker with it, you can find it here :)
https://github.com/in-secure/mispTPOT-importer