ipblocklist: Add support for 3CORESec lists.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources
index 561ef2f2e93997b847caf3ae2528b6a572021eb5..8bf0af3ada4adfbc5d3e600cfee45f7bbb45391c 100644 (file)
--- a/config/ipblocklist/sources
+++ b/config/ipblocklist/sources
@@ -188,5 +188,41 @@ our %sources = (
                'parser'   => 'ip-or-net-list',
                'rate'     => '1d',
                'category' => 'reputation'
+       },
+
+       '3CORESEC_SSH' => {
+               'name'     => '3CORESec SSH Activity Blocklist',
+               'url'      => 'https://blacklist.3coresec.net/lists/ssh.txt',
+               'info'     => 'https://blacklist.3coresec.net',
+               'parser'   => 'ip-or-net-list',
+               'rate'     => '1d',
+               'category' => 'attacker'
+       },
+
+       '3CORESEC_SCAN' => {
+               'name'     => '3CORESec Scan and IDS Blocklist',
+               'url'      => 'https://blacklist.3coresec.net/lists/misc.txt',
+               'info'     => 'https://blacklist.3coresec.net',
+               'parser'   => 'ip-or-net-list',
+               'rate'     => '1d',
+               'category' => 'reputation'
+       },
+
+       '3CORESEC_WEB' => {
+               'name'     => '3CORESec Web Server Activity Blocklist',
+               'url'      => 'https://blacklist.3coresec.net/lists/http.txt',
+               'info'     => 'https://blacklist.3coresec.net',
+               'parser'   => 'ip-or-net-list',
+               'rate'     => '1d',
+               'category' => 'attacker'
+       },
+
+       '3CORESEC_COMBINED' => {
+               'name'     => '3CORESec Combined (all) Blocklist',
+               'url'      => 'https://blacklist.3coresec.net/lists/all.txt',
+               'info'     => 'https://blacklist.3coresec.net',
+               'parser'   => 'ip-or-net-list',
+               'rate'     => '1d',
+               'category' => 'attacker'
        }
 );