ipsum - 整合多源公开黑名单的自动更新威胁情报平台

Logo

关于

IPsum 是一个基于30多个不同公开可用列表的可疑和/或恶意IP地址的威胁情报源。所有列表都会每天（24小时）自动检索和解析，最终结果会推送到这个仓库。列表由IP地址以及每个地址在（黑名单）中出现的总次数组成。出现次数越多，误报检测和/或在（入站）监控流量中被丢弃的可能性就越小。此外，列表按照IP地址出现频率从高到低排序。

例如，要获取一个新鲜且随时可部署的"恶意IP"自动封禁列表（这些IP至少出现在3个（黑名单）中），你可以运行：

curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1

如果你想用ipset试试，可以这样做：

sudo su
apt-get -qq install iptables ipset
ipset -q flush ipsum
ipset -q create ipsum hash:ip
for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
iptables -I INPUT -m set --match-set ipsum src -j DROP

在levels目录中，你可以找到基于黑名单出现次数预处理的原始IP列表（例如，levels/3.txt包含可在3个或更多黑名单中找到的IP地址）。

耻辱墙（2024-08-19）

IP	DNS查询	黑名单数量
45.148.10.69	-	10
194.50.16.5	what.are.you.looking.for	10
77.91.85.126	chummy-activity.aeza.network	10
183.81.169.238	-	10
218.92.0.34	-	9
218.92.0.31	-	9
61.177.172.172	-	9
61.177.172.136	-	9
61.177.172.161	-	9
61.177.172.160	-	9
61.177.172.168	-	9
218.92.0.113	-	9
218.92.0.118	-	9
180.101.88.197	-	9
61.177.172.179	-	9
64.23.244.21	-	9
218.92.0.107	-	9
218.92.0.56	-	9
61.177.172.140	-	9
218.92.0.29	-	9
218.92.0.22	-	9
218.92.0.24	-	9
218.92.0.27	-	9
194.169.175.37	-	9
95.214.27.253	-	9
83.222.191.62	-	8
54.36.209.253	vps-80ef0a76.vps.ovh.net	8
80.67.167.81	nosoignons.cust.milkywan.net	8
159.65.147.193	panel.mydigitalads.in	8
103.142.86.221	-	8
185.165.191.27	-	8
85.209.11.27	-	8
171.25.193.78	tor-exit-read-me.dfri.se	8
104.248.194.114	-	8
164.90.183.255	flexomatei.ro	8
121.176.65.141	-	8
167.114.152.198	vps-df0b85b3.vps.ovh.ca	8
193.32.162.29	mail.whatami.co	8
194.169.175.38	-	8
82.151.65.155	-	8
139.59.92.140	-	8
85.209.11.254	-	8
80.82.77.33	sky.census.shodan.io	7
220.82.166.157	-	7
156.236.73.107	-	7
106.12.222.76	-	7
178.20.55.16	marcuse.nos-oignons.net	7
199.45.154.112	scanner-201.hk2.censys-scanner.com	7
54.36.108.162	ns3112521.ip-54-36-108.eu	7
185.220.100.255	tor-exit-4.zbau.f3netze.de	7
158.51.96.38	unknown.ip-xfer.net	7
85.209.11.227	-	7
115.20.185.86	-	7
222.186.13.132	-	7
192.42.116.208	11.tor-exit.nothingtohide.nl	7
80.67.172.162	algrothendieck.nos-oignons.net	7
212.113.102.66	cozy-baseball.aeza.network	7
185.129.62.62	tor01.zencurity.com	7
212.113.102.134	server4.aeza.network	7
212.113.102.130	server2.aeza.network	7
103.3.247.81	static.bkdata.vn	7
104.143.77.8	-	7
92.118.39.133	-	7
36.138.121.204	-	7
147.45.73.106	precious-boundary.aeza.network	7
202.125.139.10	webconcepts.lhr63d1.pie.net.pk	7
147.185.132.42	-	7
45.139.122.176	-	7
103.56.61.144	-	7
147.45.77.255	-	7
193.32.162.38	pex28.dream-bal.com	7
185.220.101.8	berlin01.tor-exit.artikel10.org	7
185.220.101.1	berlin01.tor-exit.artikel10.org	7
192.42.116.179	27.tor-exit.nothingtohide.nl	7
81.28.167.30	-	7
178.250.191.84	-	7
80.82.77.139	dojo.census.shodan.io	7
51.89.153.112	ns3145504.ip-51-89-153.eu	7
221.222.184.230	-	7
103.251.167.20	-	7
192.118.42.254	-	7
159.203.100.16	-	7
185.220.101.27	berlin01.tor-exit.artikel10.org	7
193.32.162.65	-	7
190.211.255.106	hostedby.privatelayer.com	7
66.240.219.146	burger.census.shodan.io	7
147.185.132.207	-	7
93.174.95.106	battery.census.shodan.io	7
60.167.19.30	-	7
71.6.135.131	soda.census.shodan.io	7
116.205.230.173	ecs-116-205-230-173.compute.hwclouds-dns.com	7
206.168.34.45	unused-space.coop.net	7
80.66.83.215	-	7
193.118.51.134	zl-ams-nl-gp1-wk129.internet-census.org	7
147.185.132.52	-	7