badips.com offline for weeks now

SomePersonSomeWhereInTheWorld commented 3 years ago

The rules for badips.com have been off line for a while now, but some pages in the web site are still active. No-one responds to their Twitter either.

bunder2015 commented 3 years ago

Their website seems to come and go, I've tried emailing them as well. Never heard anything back.

bunder2015 commented 3 years ago

It was back up again, but now it seems to be hard down. Here's hoping it comes back...

bunder2015 commented 3 years ago

Sadly I don't think badips is coming back. I've been working on a replacement that functions similarly to badips, but it's not quite ready for consumption yet. I haven't looked into integrating it into firehol yet, but I'm guessing it shouldn't be too hard once I get all the infrastructure set up. "soon" 😃

bunder2015 commented 3 years ago

Just posting an update about my quasi replacement... Most of the website functionality is done, it's gathering reports and building a list, and I figured out firehol integration. I hope it's okay for me to link this here...

https://www.nubi-network.com

# /etc/firehol/ipsets.d/nubi.conf
update nubi 15 0 ipv4 ip \
        https://www.nubi-network.com/list.txt \
        remove_comments \
        "attacks" \
        "NUBI - A new BadIPs.com" \
        "NUBI" "https://www.nubi-network.com" \
        can_be_empty

# /etc/firehol/firehol.conf
ipset4 create nubi hash:ip
ipset addfile nubi ipsets/nubi.ipset
blacklist4 input inface eth0 log "nubi" ipset:nubi

I do plan on opening it up to let people submit their own reports like the original badips, but I need to finish some things before the full launch. I'm not sure if I'm going to generate service-specific lists, at the moment its just one big list of 24h active reports for all the services tracked (dns,ftp,http,imap,ldap,pop3,rdp,sip,smb,smtp,sql,ssh,telnet,vnc).

firehol / blocklist-ipsets

badips.com offline for weeks now #154