https://bl.isx.fr/raw Rohliste öffnen Beschreibung
Filterliste aus den Bereichen Malware. Format: IPs (IPv4). Einzelheiten und Aufnahmekriterien stehen auf der Projektseite.
Integration
Address list per script
Fetch the list and import it into an address list called blocklist:
/tool fetch url="https://bl.isx.fr/raw" dst-path=blocklist.rsc
/import blocklist.rscIf the list is a plain text file with one address or CIDR per line, convert it first:
/tool fetch url="https://bl.isx.fr/raw" dst-path=blocklist.txt
:foreach line in=[/file get blocklist.txt contents] do={
/ip firewall address-list add list=blocklist address=$line comment="ISX Solutions Blocklist"
}Use the list in the firewall
/ip firewall filter add chain=forward src-address-list=blocklist action=drop comment="ISX Solutions Blocklist"
/ip firewall filter add chain=forward dst-address-list=blocklist action=drop comment="ISX Solutions Blocklist"Schedule the fetch with /system scheduler to keep the list current. Very large lists consume RAM, so check the available memory of your device first.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://bl.isx.fr/rawManual with nftables
wget -qO /tmp/blocklist.txt "https://bl.isx.fr/raw"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist dropipset create blocklist hash:net -exist
curl -fsSL "https://bl.isx.fr/raw" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROPPersist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
Add the list as an ipset in /etc/firehol/firehol.conf:
ipset4 create blocklist hash:net
ipset4 addfile blocklist "https://bl.isx.fr/raw"
blacklist4 full inface any src ipset:blocklistReload with firehol try and confirm before making it permanent.
- Go to Firewall → Aliases and click +.
- Choose type URL Table (IPs), set a refresh interval (for example 1 day) and paste the URL below.
- Save and apply, then use the alias as source in a block rule under Firewall → Rules.
https://bl.isx.fr/raw- Go to Firewall → pfBlockerNG → IP → IPv4 and click Add.
- Paste the URL below as source, set State to ON and pick the action (Deny Both is the usual choice).
- Save, then run Update → Force Reload → IP.
https://bl.isx.fr/rawcurl -fsSL "https://bl.isx.fr/raw" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"ISX Solutions Blocklist match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)Letzte Änderungen
Kürzlich hinzugefügte Einträge
- 1.59.105.162
- 2.26.17.205
- 2.26.30.92
- 2.132.80.12
- 2.133.97.13
- 14.17.84.157
- 14.36.232.55
- 14.248.75.216
- 14.254.217.157
- 23.129.64.99
- 23.129.64.142
- 23.129.64.147
- 27.73.184.138
- 27.73.208.37
- 27.73.209.139
- 27.74.192.93
- 31.3.17.137
- 31.77.19.92
- 34.59.170.19
- 34.75.35.58
- 35.89.44.33
- 35.205.237.135
- 35.241.246.8
- 35.252.136.191
- 36.37.189.64
Kürzlich entfernte Einträge
- 2.75.175.86
- 2.76.216.215
- 2.78.61.178
- 2.79.231.162
- 2.133.153.44
- 5.63.74.134
- 5.76.112.89
- 5.83.45.186
- 5.236.248.216
- 14.160.191.170
- 27.200.196.24
- 31.56.19.76
- 31.99.206.153
- 31.132.248.126
- 34.156.217.53
- 37.110.211.148
- 37.150.172.198
- 37.151.18.250
- 39.36.56.59
- 39.61.57.75
- 39.90.55.228
- 39.164.176.227
- 41.162.55.186
- 41.196.116.141
- 41.202.219.73