1. Forum
  2. Usenet
  3. COMP.OS.LINUX.SECURITY

  • current public ip blocklists

    From Supratim Sanyal@21:1/5 to All on Sun Mar 6 00:00:57 2022
    I am currently maintaining the following IP blocklists based on
    brute-force attacks. Maybe useful to folks usimg pfBlockerNG on pfSense, pihole, etc.

    http://sanyalnet-cloud-vps.freeddns.org/blocklist.txt http://sanyalnet-cloud-vps2.freeddns.org/blocklist.txt http://sanyalnet-cloud-vps3.freeddns.org/blocklist.txt http://sanyalnet-cloud-vps4.duckdns.org/blocklist.txt http://impvax.duckdns.org/blocklist.txt http://hecnet-us-east-gw.duckdns.org/blocklist.txt

    (the last two are currently the same server for now).

    thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Grant Taylor@21:1/5 to Supratim Sanyal on Sat Mar 5 22:56:22 2022
    On 3/5/22 10:00 PM, Supratim Sanyal wrote:
    I am currently maintaining the following IP blocklists

    I'm curious why you have multiple different lists.

    I would think that you would have the systems linked so that they can
    share IPs and block sources that have attacked other systems.



    --
    Grant. . . .
    unix || die

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Allodoxaphobia@21:1/5 to Grant Taylor on Tue May 24 13:32:17 2022
    On Sat, 5 Mar 2022 22:56:22 -0700, Grant Taylor wrote:
    On 3/5/22 10:00 PM, Supratim Sanyal wrote:
    I am currently maintaining the following IP blocklists

    I'm curious why you have multiple different lists.

    I would think that you would have the systems linked so that they can
    share IPs and block sources that have attacked other systems.

    I was hoping to see some discuss here.
    I currently get a list of Bad Actors from

    https://github.com/stamparm/ipsum

    to use as an addendum to the CIDRs I generate from my own pflog
    for my VPS.

    Jonesy
    --
    Marvin L Jones | Marvin | W3DHJ.net | linux
    38.238N 104.547W | @ jonz.net | Jonesy | FreeBSD
    * Killfiling google & XXXXbanter.com: jonz.net/ng.htm

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Supratim Sanyal@21:1/5 to Allodoxaphobia on Wed Jun 8 00:11:40 2022
    On 5/24/22 9:32 AM, Allodoxaphobia wrote:
    I currently get a list of Bad Actors from

    https://github.com/stamparm/ipsum

    great lists; will use them. thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Supratim Sanyal@21:1/5 to Grant Taylor on Wed Jun 8 00:07:35 2022
    On 3/6/22 12:56 AM, Grant Taylor wrote:
    On 3/5/22 10:00 PM, Supratim Sanyal wrote:
    I am currently maintaining the following IP blocklists

    I'm curious why you have multiple different lists.

    I would think that you would have the systems linked so that they can
    share IPs and block sources that have attacked other systems.

    they are also reported to blocklist.de and abuseipd; all boxes use blocklist.de's list, so the ips are shared indirectly ...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From rek2 hispagatos@21:1/5 to Supratim Sanyal on Fri Jul 8 14:56:38 2022
    Interesting.

    On 2022-06-08, Supratim Sanyal <supratim@riseupdeleteme.net> wrote:
    On 5/24/22 9:32 AM, Allodoxaphobia wrote:
    I currently get a list of Bad Actors from

    https://github.com/stamparm/ipsum

    great lists; will use them. thanks.


    --
    gemini://hispagatos.org
    gemini://rek2.hispagatos.org
    https://hispagatos.org
    https://hispagatos.space/@rek2

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)