This repo provides data lists that servers may want to block temporarily.
All data copied here is derived from Internet Storm Center / DShield API And is shared under the Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0) License (See also, LICENSE for a local copy.)
List of IPs that are in the daily report from Internet Storm Center that have been identified as port scanners for one or more of the following ports:
- 22 (standard SSH port)
- 80 (standard HTTP port)
- 443 (standard HTTPS port)
List of cloud IPs (in standard "CIDR" notation) from Internet Storm Center
cloud_ips.json
run through ip_calc
module to remove duplicates.
cloud_ips.json
+ bad_actors.json
run through ip_calc
module to remove duplicates.