alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/common: Update list of abusive IP addresses

Browse Source 
This comes from the AbuseIPDB with a confidence level of 95%. I use
the following command to download and sort the IPs:

  $ curl -G https://api.abuseipdb.com/api/v2/blacklist -d \
    confidenceMinimum=95 -H "Key: $ABUSEIPDB_API_KEY" \
    -H "Accept: text/plain" | sort | sed -e '/:/w /tmp/ipv6.txt' \
    -e '/:/d' > /tmp/ipv4.txt

I manually add the XML formatting to each file and run them through
tidy:

  $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv4.xml
  $ tidy -xml -utf8 -m -iq -w 0 roles/common/files/abusers-ipv6.xml

Then I created the nftables files manually. Meh...
This commit is contained in:
Alan Orth 2021-12-22 11:40:27 +02:00
parent ab47df6031
commit ebbde530d2
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9
4 changed files with 17045 additions and 17047 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14069
roles/common/files/abuseipdb-ipv4.nft
View File

File diff suppressed because it is too large Load Diff

17
roles/common/files/abuseipdb-ipv6.nft
View File

@ -1,12 +1,13 @@
#!/usr/sbin/nft -f #!/usr/sbin/nft -f
define ABUSEIPDB_IPV6 = { define ABUSEIPDB_IPV6 = {
2001:1bb0:e000:1e::93a, 2001:470:1:332::7,
2001:41d0:303:ac05::, 2001:470:1:c84::15,
2400:6180:0:d1::4dd:b001, 2001:470:1:c84::22,
2402:e280:3d00:1d1:a00:27ff:fe8c:e37c, 2001:470:1:c84::23,
2607:f1c0:842:3400::5c:29d, 2001:470:1:c84::25,
2607:fcd8:0:c:1::, 2a00:d680:20:50::3292,
2a00:d680:20:50::cdb4, 2a00:d680:20:50::4a10,
2a01:4f8:210:138d::2 2a02:c206:2062:6450::1,
2a03:b0c0:2:f0::34d:c001
} }

14073
roles/common/files/abusers-ipv4.xml
View File

File diff suppressed because it is too large Load Diff

17
roles/common/files/abusers-ipv6.xml
View File

@ -3,12 +3,13 @@
<option name="family" value="inet6" /> <option name="family" value="inet6" />
<short>abusers-ipv6</short> <short>abusers-ipv6</short>
<description>A list of abusive IPv6 addresses.</description> <description>A list of abusive IPv6 addresses.</description>
<entry>2001:1bb0:e000:1e::93a</entry> <entry>2001:470:1:332::7</entry>
<entry>2001:41d0:303:ac05::</entry> <entry>2001:470:1:c84::15</entry>
<entry>2400:6180:0:d1::4dd:b001</entry> <entry>2001:470:1:c84::22</entry>
<entry>2402:e280:3d00:1d1:a00:27ff:fe8c:e37c</entry> <entry>2001:470:1:c84::23</entry>
<entry>2607:f1c0:842:3400::5c:29d</entry> <entry>2001:470:1:c84::25</entry>
<entry>2607:fcd8:0:c:1::</entry> <entry>2a00:d680:20:50::3292</entry>
<entry>2a00:d680:20:50::cdb4</entry> <entry>2a00:d680:20:50::4a10</entry>
<entry>2a01:4f8:210:138d::2</entry> <entry>2a02:c206:2062:6450::1</entry>
<entry>2a03:b0c0:2:f0::34d:c001</entry>
</ipset> </ipset>