From cd0cf33a2d6db1e4f533071ab17eb4d195e8809a Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Sat, 22 Apr 2023 09:50:14 +0200 Subject: [PATCH] ipblocklist: Add support for 3CORESec lists. Signed-off-by: Stefan Schantl --- config/ipblocklist/sources | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index 561ef2f2e9..8bf0af3ada 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -188,5 +188,41 @@ our %sources = ( 'parser' => 'ip-or-net-list', 'rate' => '1d', 'category' => 'reputation' + }, + + '3CORESEC_SSH' => { + 'name' => '3CORESec SSH Activity Blocklist', + 'url' => 'https://blacklist.3coresec.net/lists/ssh.txt', + 'info' => 'https://blacklist.3coresec.net', + 'parser' => 'ip-or-net-list', + 'rate' => '1d', + 'category' => 'attacker' + }, + + '3CORESEC_SCAN' => { + 'name' => '3CORESec Scan and IDS Blocklist', + 'url' => 'https://blacklist.3coresec.net/lists/misc.txt', + 'info' => 'https://blacklist.3coresec.net', + 'parser' => 'ip-or-net-list', + 'rate' => '1d', + 'category' => 'reputation' + }, + + '3CORESEC_WEB' => { + 'name' => '3CORESec Web Server Activity Blocklist', + 'url' => 'https://blacklist.3coresec.net/lists/http.txt', + 'info' => 'https://blacklist.3coresec.net', + 'parser' => 'ip-or-net-list', + 'rate' => '1d', + 'category' => 'attacker' + }, + + '3CORESEC_COMBINED' => { + 'name' => '3CORESec Combined (all) Blocklist', + 'url' => 'https://blacklist.3coresec.net/lists/all.txt', + 'info' => 'https://blacklist.3coresec.net', + 'parser' => 'ip-or-net-list', + 'rate' => '1d', + 'category' => 'attacker' } ); -- 2.39.5