Files
intrusion-detection/data/README.md
T

1.2 KiB

Data directory for allucanget-ids

This directory contains data files used by the allucanget-ids Intrusion Detection System application, including whitelists, blocklists, and other configuration files. The data files are organized into subdirectories for easier management and maintenance.

Data files

  • Openfactory Geofeed: Contains Openfactory IP addresses and associated geolocation data from https://openfactory.net/geofeed.csv. Used for identifying and whitelisting traffic from known Openfactory sources.
  • Cloudflare IPv4 list: Contains a list of Cloudflare IPv4 addresses from https://www.cloudflare.com/ips-v4, used for whitelisting traffic from Cloudflare services.
  • Cloudflare IPv6 list: Contains a list of Cloudflare IPv6 addresses from https://www.cloudflare.com/ips-v6, used for whitelisting traffic from Cloudflare services.
  • PaloAlto Scanner IP list: List of known PaloAlto scanner IP addresses from https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity, used for whitelisting traffic from PaloAlto scanners.