zwitschi/intrusion-detection
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c2eba88ac8f5371b8633286920cb9385f662f7b2
intrusion-detection/app/data
T
History
zwitschi c2eba88ac8 Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
..
cloudflare
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
mikrotik
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
openfactory
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
paloalto
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
README.md
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
scan_jobs.json
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
scan_state.json
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00
whois_cache.json
Refactor web_scan.py for improved readability and maintainability; add cron job script for npm log backups; update start.ps1 for consistent formatting.
2026-09-08 19:49:11 +02:00

README.md

Data directory for allucanget-ids

This directory contains data files used by the allucanget-ids Intrusion Detection System application, including whitelists, blocklists, and other configuration files. The data files are organized into subdirectories for easier management and maintenance.

Data files

  • whois cache: Local cache of WHOIS queries to reduce network requests and improve performance. The cache is automatically updated when new IP addresses are queried.
  • Cloudflare IPv4 list: Contains a list of Cloudflare IPv4 addresses from https://www.cloudflare.com/ips-v4, used for whitelisting traffic from Cloudflare services.
  • Cloudflare IPv6 list: Contains a list of Cloudflare IPv6 addresses from https://www.cloudflare.com/ips-v6, used for whitelisting traffic from Cloudflare services.
  • MikroTik RouterOS IPv4 Firewall rules: Current MikroTik RouterOS IPv4 firewall rules.
  • MikroTik RouterOS IPv6 Firewall rules: Current MikroTik RouterOS IPv6 firewall rules.
  • MikroTik RouterOS IPv4 address list: Current MikroTik RouterOS IPv4 address list.
  • MikroTik RouterOS IPv6 address list: Current MikroTik RouterOS IPv6 address list.
  • Openfactory Geofeed: Obsolete since 2026-09-08 (provider switched to Init7). Kept for historical reference; the replacement Init7 ranges are documented in the switchover plan (.github/instructions/TODO.md).
  • PaloAlto Scanner IP list: List of known PaloAlto scanner IP addresses from https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity, used for whitelisting traffic from PaloAlto scanners. !NOTE: This list can not be scraped easily (Javascript-based), so it is maintained manually and may be outdated. Please verify the list against the official source if needed.
Reference in new issue View Git Blame Copy Permalink