alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/common: Update list of abusive IP addresses 

This comes from the AbuseIPDB with a confidence level of 95%. I use
the following command to download and sort the IPs:

    $ curl -G https://api.abuseipdb.com/api/v2/blacklist -d \
      confidenceMinimum=95 -H "Key: $ABUSEIPDB_API_KEY" \
      -H "Accept: text/plain" | sort | sed -e '/:/w /tmp/ipv6.txt' \
      -e '/:/d' > /tmp/ipv4.txt

I manually add the XML formatting to each file and run them through
tidy:

    $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv4.xml
    $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv6.xml
This commit is contained in:
Alan Orth 2020-11-06 15:44:57 +02:00
parent 31ffda5466
commit dd2f65947d
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9
3 changed files with 8853 additions and 8853 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17673
roles/common/files/abusers-ipv4.xml
View File

File diff suppressed because it is too large Load Diff

31
roles/common/files/abusers-ipv6.xml
View File

@ -3,27 +3,14 @@
<option name="family" value="inet6" />
<short>abusers-ipv6</short>
<description>A list of abusive IPv6 addresses.</description>
<entry>2001:41d0:1004:2384::1</entry>
<entry>2001:41d0:203:357::</entry>
<entry>2001:41d0:2:b55c::</entry>
<entry>2001:41d0:2:ca86::1</entry>
<entry>2001:41d0:303:3d4a::</entry>
<entry>2001:41d0:401:3100::4e8f</entry>
<entry>2001:41d0:8:737c::</entry>
<entry>2001:41d0:8:7773::1</entry>
<entry>2001:41d0:a:446f::</entry>
<entry>2001:41d0:a:741a::</entry>
<entry>2001:41d0:d:2fbd::</entry>
<entry>2400:6180:0:d0::15:e001</entry>
<entry>2402:1f00:8001:106::</entry>
<entry>240e:f7:4f01:c::2</entry>
<entry>2607:5300:60:56c3::</entry>
<entry>2607:f298:5:103f::29c:f618</entry>
<entry>2607:f298:5:105b::6d3:3b1f</entry>
<entry>2607:f298:6:a036::ca8:dc93</entry>
<entry>2607:f298:6:a067::688:9779</entry>
<entry>2a00:d680:20:50::42</entry>
<entry>2a00:d680:20:50::cdb4</entry>
<entry>2001:41d0:602:238d::</entry>
<entry>2001:41d0:8:9924::1</entry>
<entry>2001:41d0:a:4284::</entry>
<entry>2402:1f00:8001:8bd::</entry>
<entry>240e:f7:4f01:c::3</entry>
<entry>2604:a880:800:10::b5:d001</entry>
<entry>2a00:d680:30:50::67</entry>
<entry>2a03:b0c0:3:e0::269:a001</entry>
<entry>2a03:b0c0:3:d0::d4d:b001</entry>
<entry>2a03:b0c0:3:e0::33c:b001</entry>
<entry>2a03:b0c0:3:f0::1aa:8000</entry>
</ipset>

2
roles/common/tasks/main.yml
View File

@ -40,7 +40,7 @@
tags: sysctl
- name: Reconfigure /etc/rc.local
when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version('18.04', '<=')
when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version('19.04', '<=')
template: src=rc.local_Ubuntu.j2 dest=/etc/rc.local owner=root group=root mode=0755
- name: Set I/O scheduler