Brute_Force_Attack_Firewall.md

Danger.rulez.sk

Yet another FreeBSD committer's homepage

Brute Force Attack (Firewall)

BruteForceBlocker for iptables

IP Address

• Website

• http://danger.rulez.sk/

• Source

• http://danger.rulez.sk/projects/bruteforceblocker/blist.php

• Data

• IP Address

• Format

• Text

• API/Token

• None

• Status

• Ok

• Comments

• No comment

Sample Output of IntelMQ

{
  "raw": "OTMuMTc0LjkzLjE4CQkjIDIwMTYtMDYtMjQgMDU6MTg6MDMJCTg4CTEwNDA3NjI=",
  "time": {
    "observation": "2016-07-07T12:09:49+00:00",
    "source": "2016-06-24T05:18:03+00:00"
  },
  "feed": {
    "accuracy": 100.0,
    "name": "Danger Rulez",
    "url": "http://danger.rulez.sk/projects/bruteforceblocker/blist.php"
  },
  "source": {
    "ip": "93.174.93.18"
  },
  "classification": {
    "type": "brute-force"
  }
}

---

There's only IP information in http://danger.rulez.sk/projects/bruteforceblocker/blist.php It looks like:

# IP			# Last Reported			Count	ID
154.16.199.174		# 2016-08-17 14:15:10		98	1060564
91.224.160.106		# 2016-08-29 20:58:57		71	1055410
154.16.199.47		# 2016-08-19 17:13:39		67	1061671