From e2260312bea3a2856736b66dce7ea1a0a29fd63d Mon Sep 17 00:00:00 2001 From: Alfonso Date: Thu, 20 Apr 2023 17:24:23 +0200 Subject: [PATCH] abuseip changed Grab the abuseip list in plaintext --- blocklist.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/blocklist.sh b/blocklist.sh index 7c3bbe2..2a809e3 100755 --- a/blocklist.sh +++ b/blocklist.sh @@ -32,7 +32,7 @@ $(whereis ipset | cut -d" " -f 2) create crawler_bots hash:ip curl -s https://isc.sans.edu/api/threatcategory/research?json | jq '.[] | {ipv4}' | grep ':' | awk '{ print $2 }' | tr -d '"' | xargs -L1 $IPSET_PATH add crawler_bots 2>&1 echo "Downloading the most recent IP list from $ABUSE and adding them to abuseipdb" $(whereis ipset | cut -d" " -f 2) create abuseipdb hash:ip -curl -s -H "key: $abuse_key" https://api.abuseipdb.com/api/v2/blacklist | grep -E -o "(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)" | xargs -L1 $IPSET_PATH add abuseipdb 2>&1 +curl -G -H "key: $abuse_key" -H "Accept: text/plain" -d confidenceMinimum=90 https://api.abuseipdb.com/api/v2/blacklist | xargs -L1 $IPSET_PATH add abuseipdb 2>&1 echo "Adding the iptables rules..." $IPTABLES_PATH -I INPUT -m set --match-set crawler_bots src -j DROP $IPTABLES_PATH -I INPUT -m set --match-set blocklistde src -j DROP