CSF BlockList

############################################################################### # Copyright 2006-2014, Way to the Web Limited # URL: http://www.configserver.com # Email: sales@waytotheweb.com ############################################################################### # This file contains definitions to IP BLOCK lists. # # Uncomment the line starting with the rule name to use it, then restart csf # and then lfd # # Each block list must be listed on per line: as NAME|INTERVAL|MAX|URL # NAME : List name with all uppercase alphabetic characters with no # spaces and a maximum of 9 characters - this will be used as the # iptables chain name # INTERVAL: Refresh interval to download the list, must be a minimum of 3600 # seconds (an hour), but 86400 (a day) should be more than enough # MAX : This is the maximum number of IP addresses to use from the list, # a value of 0 means all IPs # URL : The URL to download the list from # # Note: Some of thsese lists are very long (thousands of IP addresses) and # could cause serious network and/or performance issues, so setting a value for # the MAX field should be considered # # After making any changes to this file you must restart csf and then lfd # # If you want to redownload a blocklist you must first delete # /var/lib/csf/csf.block.NAME and then restart csf and then lfd # # Each URL is scanned for an IPv4/CIDR address per line and if found is blocked


# Spamhaus Don't Route Or Peer List (DROP)

# Details: http://www.spamhaus.org/drop/

SPAMDROP|86400|0|http://www.spamhaus.org/drop/drop.lasso
# Spamhaus Extended DROP List (EDROP)

# Details: http://www.spamhaus.org/drop/

SPAMEDROP|86400|0|http://www.spamhaus.org/drop/edrop.lasso
# DShield.org Recommended Block List

# Details: http://dshield.org

DSHIELD|86400|0|http://feeds.dshield.org/block.txt
# TOR Exit Nodes List

# To use this list you will probably need to change URLGET in csf.conf to use

# LWP as this list uses an SSL connection. Alternatively, use ALTTOR below

# Details: https://trac.torproject.org/projects/tor/wiki/doc/TorDNSExitList

TOR|86400|0|http://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1
# Alternative TOR Exit Nodes List

# Details: http://torstatus.blutmagie.de/

ALTTOR|86400|0|http://torstatus.blutmagie.de/ip_list_exit.php/Tor_ip_list_EXIT.csv
# BOGON list

# Details: http://www.team-cymru.org/Services/Bogons/

BOGON|86400|0|http://www.cymru.com/Documents/bogon-bn-agg.txt
# Project Honey Pot Directory of Dictionary Attacker IPs

# Details: http://www.projecthoneypot.org

#HONEYPOT|86400|0|http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1
# C.I. Army Malicious IP List

# Details: http://www.ciarmy.com

CIARMY|86400|0|http://www.ciarmy.com/list/ci-badguys.txt
# BruteForceBlocker IP List

# Details: http://danger.rulez.sk/index.php/bruteforceblocker/

BFB|86400|0|http://danger.rulez.sk/projects/bruteforceblocker/blist.php
# Emerging Threats - Russian Business Networks List

# Details: http://doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork

#RBN|86400|0|http://rules.emergingthreats.net/blockrules/rbn-ips.txt
# OpenBL.org 30 day List

# Details: http://www.openbl.org

OPENBL|86400|0|http://www.us.openbl.org/lists/base_30days.txt
# Autoshun Shun List

# Details: http://www.autoshun.org/

AUTOSHUN|86400|0|http://www.autoshun.org/files/shunlist.csv

# MaxMind GeoIP Anonymous Proxies # Details: http://www.maxmind.com/en/anonymous_proxies MAXMIND|86400|0|http://www.maxmind.com/en/anonymous_proxies

CSF Blocklist

CSF BlockList