ipblocklist-sources: Update to include the Abuse.ch Botnet C2 ip blocklist

- Blocklist addition was discussed and agreed at IPFire dev conf call in June 2024.
- Tested on vm system.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Adolf Belka
2024-06-24 17:10:39 +02:00
committed by Michael Tremer
parent 0346e4fd9d
commit e9e78d2aff

View File

@@ -142,5 +142,11 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis
'info' => 'https://blacklist.3coresec.net',
'parser' => 'ip-or-net-list',
'rate' => '1d',
'category' => 'attacker' }
'category' => 'attacker' },
'ABUSECH_BOTNETC2' => { 'name' => 'ABUSE.ch Botnet C2 IP Blocklist',
'url' => 'https://sslbl.abuse.ch/blacklist/sslipblacklist.txt',
'info' => 'https://sslbl.abuse.ch/blacklist#botnet-c2-ips-csv',
'parser' => 'ip-or-net-list',
'rate' => '5m',
'category' => 'reputation' }
);