blocklist-ipsets icon indicating copy to clipboard operation
blocklist-ipsets copied to clipboard

Published 20 hours ago • verified publisher icon firehol

GreyNoise

Open kravietz opened this issue 2 years ago • 0 comments

GreyNoise made public the IPs that are hitting Ukraine with scans and actual attacks currently, likely to be reused for other countries.

https://api.greynoise.io/datashots/ukraine/manifest.json

The manifest JSON contains URLs to the actual lists of IPs in different formats. The URL that is probably directly usable in FireHOL is this one:

https://api.greynoise.io/datashots/ukraine/ukraine.txt

kravietz avatar Mar 02 '22 16:03 kravietz