Merge pull request #58 from drona-gyawali/api/feed-response

GB(api) : added new field in feed_response

Author: mlodic

docs/GreedyBear/Api-docs.md

@@ -42,6 +42,8 @@ _Note: Enhanced with additional filter fields (ioc_type, etc.) in version > 2.4.
 ### `FeedsResponseSerializer`
 :::docs.Submodules.GreedyBear.api.serializers.FeedsResponseSerializer
 
+_Note: Includes attacker_country field in version >= 3.2.0
+
 ### `IOCSerializer`
 :::docs.Submodules.GreedyBear.api.serializers.IOCSerializer
 

docs/GreedyBear/Usage.md

@@ -44,6 +44,12 @@ The `json` result includes two predictive scores:
 - `recurrence_probability` (0.0-1.0): Indicates the likelihood that an IOC will reappear within the next 24 hours. Higher values suggest greater persistence of the threat.
 - `expected_interactions` (0+): Estimates the number of honeypot interactions anticipated from the IOC in the next 24 hours, indicating potential activity level.
 
+The response includes a new field:
+  
+_Available from version >= 3.2.0_
+
+- `attacker_country`: The country associated with the attacking IP address.
+
 These predictions are based on historical interaction patterns and are updated once a day, shortly after midnight UTC. They are the foundation of the `likely_to_recur` and `most_expected_hits` prioritization mechanisms.
 
 Check the [API specification](https://intelowlproject.github.io/docs/GreedyBear/Api-docs/#docs.Submodules.GreedyBear.api.views.feeds.feeds_advanced) or the to get all the details about how to use the available APIs.
@@ -70,6 +76,12 @@ The available query parameters are:
 - `paginate`: `true` to paginate results. This forces the json format. (default: `false`)
 - `format_`: see [Feeds API](#feeds) (default: `json`)
 
+The response includes a new field:
+
+_Available from version >= 3.2.0_
+
+- `attacker_country`: The country associated with the attacking IP address.
+
 Check the [API specification](https://intelowlproject.github.io/docs/GreedyBear/Api-docs/) or the to get all the details about how to use the available APIs.
 
 This "Advanced Feeds" API is protected through authentication. Please reach out [Matteo Lodi](https://twitter.com/matte_lodi) or another member of [The Honeynet Project](https://twitter.com/ProjectHoneynet) if you are interested in gain access to this API.