alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
ansible-personal/roles/common/files/abuseipdb-ipv6.nft

13 lines
250 B
Plaintext
Raw Normal View History

roles/common: Use AbuseIPDB.com list in nftables For now I am still manually updating this, as we can only hit their API five times per day, so it is not possible to have each host get the list themselves every day with our one API key.
2021-07-31 20:46:50 +02:00
#!/usr/sbin/nft -f
define ABUSEIPDB_IPV6 = {
roles/common: Update list of abusive IP addresses This comes from the AbuseIPDB with a confidence level of 95%. I use the following command to download and sort the IPs: $ curl -G https://api.abuseipdb.com/api/v2/blacklist -d \ confidenceMinimum=95 -H "Key: $ABUSEIPDB_API_KEY" \ -H "Accept: text/plain" | sort | sed -e '/:/w /tmp/ipv6.txt' \ -e '/:/d' > /tmp/ipv4.txt I manually add the XML formatting to each file and run them through tidy: $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv4.xml $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv6.xml
2021-11-07 09:12:43 +01:00
2001:1bb0:e000:1e::93a,
2001:41d0:303:ac05::,
2400:6180:0:d1::4dd:b001,
2402:e280:3d00:1d1:a00:27ff:fe8c:e37c,
2607:f1c0:842:3400::5c:29d,
2607:fcd8:0:c:1::,
2a00:d680:20:50::cdb4,
2a01:4f8:210:138d::2
roles/common: Use AbuseIPDB.com list in nftables For now I am still manually updating this, as we can only hit their API five times per day, so it is not possible to have each host get the list themselves every day with our one API key.
2021-07-31 20:46:50 +02:00
}