blocklist-ipsets
blocklist-ipsets copied to clipboard
firehol
badips.com offline for weeks now
The rules for badips.com have been off line for a while now, but some pages in the web site are still active. No-one responds to their Twitter either.
Their website seems to come and go, I've tried emailing them as well. Never heard anything back.
It was back up again, but now it seems to be hard down. Here's hoping it comes back...
Sadly I don't think badips is coming back. I've been working on a replacement that functions similarly to badips, but it's not quite ready for consumption yet. I haven't looked into integrating it into firehol yet, but I'm guessing it shouldn't be too hard once I get all the infrastructure set up. "soon" 😃
Just posting an update about my quasi replacement... Most of the website functionality is done, it's gathering reports and building a list, and I figured out firehol integration. I hope it's okay for me to link this here...
https://www.nubi-network.com
# /etc/firehol/ipsets.d/nubi.conf
update nubi 15 0 ipv4 ip \
https://www.nubi-network.com/list.txt \
remove_comments \
"attacks" \
"NUBI - A new BadIPs.com" \
"NUBI" "https://www.nubi-network.com" \
can_be_empty
# /etc/firehol/firehol.conf
ipset4 create nubi hash:ip
ipset addfile nubi ipsets/nubi.ipset
blacklist4 input inface eth0 log "nubi" ipset:nubi
I do plan on opening it up to let people submit their own reports like the original badips, but I need to finish some things before the full launch. I'm not sure if I'm going to generate service-specific lists, at the moment its just one big list of 24h active reports for all the services tracked (dns,ftp,http,imap,ldap,pop3,rdp,sip,smb,smtp,sql,ssh,telnet,vnc).