ansible-personal/roles/common/files/abuseipdb-ipv6.nft

#!/usr/sbin/nft -f

define ABUSEIPDB_IPV6 = {
2001:470:1:332::7,
2001:470:1:c84::15,
2001:470:1:c84::22,
2001:470:1:c84::23,
2001:470:1:c84::25,
2a00:d680:20:50::3292,
2a00:d680:20:50::4a10,
2a02:c206:2062:6450::1,
2a03:b0c0:2:f0::34d:c001
}
roles/common: Use AbuseIPDB.com list in nftables For now I am still manually updating this, as we can only hit their API five times per day, so it is not possible to have each host get the list themselves every day with our one API key. 2021-07-31 21:46:50 +03:00			`#!/usr/sbin/nft -f`

			`define ABUSEIPDB_IPV6 = {`
roles/common: Update list of abusive IP addresses This comes from the AbuseIPDB with a confidence level of 95%. I use the following command to download and sort the IPs: $ curl -G https://api.abuseipdb.com/api/v2/blacklist -d \ confidenceMinimum=95 -H "Key: $ABUSEIPDB_API_KEY" \ -H "Accept: text/plain" \| sort \| sed -e '/:/w /tmp/ipv6.txt' \ -e '/:/d' > /tmp/ipv4.txt I manually add the XML formatting to each file and run them through tidy: $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv4.xml $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv6.xml Then I created the nftables files manually. Meh... 2021-12-22 11:40:27 +02:00			`2001:470:1:332::7,`
			`2001:470:1:c84::15,`
			`2001:470:1:c84::22,`
			`2001:470:1:c84::23,`
			`2001:470:1:c84::25,`
			`2a00:d680:20:50::3292,`
			`2a00:d680:20:50::4a10,`
			`2a02:c206:2062:6450::1,`
			`2a03:b0c0:2:f0::34d:c001`
roles/common: Use AbuseIPDB.com list in nftables For now I am still manually updating this, as we can only hit their API five times per day, so it is not possible to have each host get the list themselves every day with our one API key. 2021-07-31 21:46:50 +03:00			`}`