intelowlproject
Add auto extraction of some FireHol lists for classification purposes
https://iplists.firehol.org/
We can save this info in a separate model like we did for Mass Scanners and then add a new field in the IOC model to collect this info.
This can allow us to understand how many IP addresses are "unique" or, more generally, not seen everywhere else
Hi! I'd like to work on this issue if it's still available.
Approach: Create a FireHolList model similar to the existing MassScanners pattern, implement a cronjob to fetch selected blocklists (e.g., blocklist_de, greensnow, bruteforceblocker, dshield) from the firehol/blocklist-ipsets GitHub repository, and add classification metadata to the IOC model to categorize IPs based on FireHol list categories.
Will it work?
yep that makes sense. However, before assigning you this issue, it is important that the other issues you are assigned to are completed.
Hello @mlodic I have completed all the issues assigned to me. Can I continue over this with the approach provided in the previous comment