remove outdated crime lists, add firehol_abusers_30d, use tor_exits instead of dm_tor

This commit is contained in:
2026-08-15 22:44:06 -04:00
parent 95afb71db2
commit d35b69d87c
2 changed files with 9 additions and 7 deletions

View File

@@ -21,6 +21,7 @@ print_r($cf_lookup); // ["is_hosting" => true]
## Proxy detection ([firehol](https://iplists.firehol.org/)) ## Proxy detection ([firehol](https://iplists.firehol.org/))
- [firehol_anonymous](https://iplists.firehol.org/?ipset=firehol_anonymous) - [firehol_anonymous](https://iplists.firehol.org/?ipset=firehol_anonymous)
- [firehol_abusers_30d](https://iplists.firehol.org/?ipset=firehol_abusers_30d)
- [spamhaus_drop](https://iplists.firehol.org/?ipset=spamhaus_drop) - [spamhaus_drop](https://iplists.firehol.org/?ipset=spamhaus_drop)
- [dshield_30d](https://iplists.firehol.org/?ipset=dshield_30d) - [dshield_30d](https://iplists.firehol.org/?ipset=dshield_30d)
- [greensnow](https://iplists.firehol.org/?ipset=greensnow) - [greensnow](https://iplists.firehol.org/?ipset=greensnow)
@@ -31,8 +32,10 @@ print_r($cf_lookup); // ["is_hosting" => true]
- [vxvault](https://iplists.firehol.org/?ipset=vxvault) - [vxvault](https://iplists.firehol.org/?ipset=vxvault)
- [blocklist_net_ua](https://iplists.firehol.org/?ipset=blocklist_net_ua) - [blocklist_net_ua](https://iplists.firehol.org/?ipset=blocklist_net_ua)
- [botscout_30d](https://iplists.firehol.org/?ipset=botscout_30d) - [botscout_30d](https://iplists.firehol.org/?ipset=botscout_30d)
- [cybercure](https://iplists.firehol.org/?ipset=cybercure)
- [cybercrime](https://iplists.firehol.org/?ipset=cybercrime) ## Currently begging droneBL staff for access
- [dronebl_anonymizers](https://iplists.firehol.org/?ipset=dronebl_anonymizers)
- [dronebl_irc_drones](https://iplists.firehol.org/?ipset=dronebl_irc_drones)
## VPN providers (inserted in db as "is_proxy") ## VPN providers (inserted in db as "is_proxy")
- [Tunnelbear](https://raw.githubusercontent.com/tn3w/TunnelBear-IPs/refs/heads/master/tunnelbear_ips.txt) ([source](https://github.com/tn3w/TunnelBear-IPs)) - [Tunnelbear](https://raw.githubusercontent.com/tn3w/TunnelBear-IPs/refs/heads/master/tunnelbear_ips.txt) ([source](https://github.com/tn3w/TunnelBear-IPs))
@@ -46,7 +49,7 @@ print_r($cf_lookup); // ["is_hosting" => true]
## Tor detection ## Tor detection
- [tor exit node list](https://openinternet.io/tor/tor-exit-list.txt) ([source](https://openinternet.io)) - [tor exit node list](https://openinternet.io/tor/tor-exit-list.txt) ([source](https://openinternet.io))
- [dm_tor](https://iplists.firehol.org/?ipset=dm_tor) - [tor_exits](https://iplists.firehol.org/?ipset=tor_exits)
# Recommendation # Recommendation
I recommend these additional MMDB databases to complement Cloudfish. I recommend these additional MMDB databases to complement Cloudfish.

View File

@@ -100,6 +100,7 @@ class mmdb_creator{
[ [
"proxy" => [ "proxy" => [
"firehol_anonymous.netset", "firehol_anonymous.netset",
"firehol_abusers_30d.netset",
"spamhaus_drop.netset", "spamhaus_drop.netset",
"dshield_30d.netset", "dshield_30d.netset",
"greensnow.ipset", "greensnow.ipset",
@@ -110,12 +111,10 @@ class mmdb_creator{
"myip.ipset", "myip.ipset",
"vxvault.ipset", "vxvault.ipset",
"blocklist_net_ua.ipset", "blocklist_net_ua.ipset",
"botscout_30d.ipset", "botscout_30d.ipset"
"cybercure.ipset",
"cybercrime.ipset"
], ],
"tor" => [ // + tor, the other tor list misses ipv4s with ipv6 addresses "tor" => [ // + tor, the other tor list misses ipv4s with ipv6 addresses
"dm_tor.ipset" "tor_exits.ipset"
] ]
], ],
"blocklist-ipsets/" "blocklist-ipsets/"