From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Sat, 22 Apr 2023 07:50:14 +0000 (+0200)
Subject: ipblocklist: Add support for 3CORESec lists.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=cd0cf33a2d6db1e4f533071ab17eb4d195e8809a;p=people%2Fstevee%2Fipfire-2.x.git

ipblocklist: Add support for 3CORESec lists.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources
index 561ef2f2e9..8bf0af3ada 100644
--- a/config/ipblocklist/sources
+++ b/config/ipblocklist/sources
@@ -188,5 +188,41 @@ our %sources = (
 		'parser'   => 'ip-or-net-list',
 		'rate'     => '1d',
 		'category' => 'reputation'
+	},
+
+	'3CORESEC_SSH' => {
+		'name'     => '3CORESec SSH Activity Blocklist',
+		'url'      => 'https://blacklist.3coresec.net/lists/ssh.txt',
+		'info'     => 'https://blacklist.3coresec.net',
+		'parser'   => 'ip-or-net-list',
+		'rate'     => '1d',
+		'category' => 'attacker'
+	},
+
+	'3CORESEC_SCAN' => {
+		'name'     => '3CORESec Scan and IDS Blocklist',
+		'url'      => 'https://blacklist.3coresec.net/lists/misc.txt',
+		'info'     => 'https://blacklist.3coresec.net',
+		'parser'   => 'ip-or-net-list',
+		'rate'     => '1d',
+		'category' => 'reputation'
+	},
+
+	'3CORESEC_WEB' => {
+		'name'     => '3CORESec Web Server Activity Blocklist',
+		'url'      => 'https://blacklist.3coresec.net/lists/http.txt',
+		'info'     => 'https://blacklist.3coresec.net',
+		'parser'   => 'ip-or-net-list',
+		'rate'     => '1d',
+		'category' => 'attacker'
+	},
+
+	'3CORESEC_COMBINED' => {
+		'name'     => '3CORESec Combined (all) Blocklist',
+		'url'      => 'https://blacklist.3coresec.net/lists/all.txt',
+		'info'     => 'https://blacklist.3coresec.net',
+		'parser'   => 'ip-or-net-list',
+		'rate'     => '1d',
+		'category' => 'attacker'
 	}
 );