search

pwlgrzs / Mikrotik-Blacklist

Mikrotik friendly blacklist to filter all these damn hackers.
158 stars 32 forks source link

Code that generates blacklist #3

Closed michaelehart closed 4 years ago

michaelehart commented 4 years ago

Hello,

Would you be interested in releasing the code that you use to generate the blacklist?

I've experienced a false positive and I would like to tweak the data feeds to avoid that. I think it's the dshield port 22 scanner that I would like to remove.

Thank You!

pwlgrzs commented 4 years ago

Hi @michaelehart,

For falses positives we/you would need to reach out to origins, I believe it would be more beneficial to whole community if dshield is cleared of it rather than this particular blacklist (FYI feed used is https://feeds.dshield.org/block.txt).

I will update readme to include specific URLs. Rest of the script that ends with .rsc file is simply grep/awk/sort etc. operations on text files.

michaelehart commented 4 years ago

Interesting, I couldn't find a data source that contains 67.53.244.10 but it's in your list. Maybe the data source already cleared it.

pwlgrzs commented 4 years ago

I am definitely not adding stuff :) Do you have most recent version?