Hello,
One can get a list of malicious IP address that have been identified to spread malware, SPAM or used for attacks, from reputable sites. For example, its a known fact that Amazon EC2 instances are often used to launch an attack.
I have a list of Amazon IP addresses:
72.44.32.0/19
67.202.0.0/18
75.101.128.0/17
174.129.0.0/16
204.236.192.0/18
184.73.0.0/16
184.72.128.0/17
184.72.64.0/18
50.16.0.0/15
50.19.0.0/16
107.20.0.0/14
23.20.0.0/14
54.242.0.0/15
54.234.0.0/15
54.236.0.0/15
54.224.0.0/15
54.226.0.0/15
54.208.0.0/15
54.210.0.0/15
54.221.0.0/16
54.204.0.0/15
54.196.0.0/15
54.198.0.0/16
50.112.0.0/16
54.245.0.0/16
54.244.0.0/16
54.214.0.0/16
54.212.0.0/15
54.218.0.0/16
54.200.0.0/15
54.202.0.0/15
204.236.128.0/18
184.72.0.0/18
50.18.0.0/16
184.169.128.0/17
54.241.0.0/16
54.215.0.0/16
54.219.0.0/16
79.125.0.0/17
46.51.128.0/18
46.51.192.0/20
46.137.0.0/17
46.137.128.0/18
176.34.128.0/17
176.34.64.0/18
54.247.0.0/16
54.246.0.0/16
54.228.0.0/16
54.216.0.0/15
54.229.0.0/16
54.220.0.0/16
54.194.0.0/15
175.41.128.0/18
122.248.192.0/18
46.137.192.0/18
46.51.216.0/21
54.251.0.0/16
54.254.0.0/16
54.255.0.0/16
54.252.0.0/16
54.253.0.0/16
54.206.0.0/16
175.41.192.0/18
46.51.224.0/19
176.32.64.0/19
103.4.8.0/21
176.34.0.0/18
54.248.0.0/15
54.250.0.0/16
54.238.0.0/16
54.199.0.0/16
177.71.128.0/17
54.232.0.0/16
54.233.0.0/18
54.207.0.0/16
96.127.0.0/18
Creating a Network definition for each and add them to a group is laborious. This list changes every now and then. I'd rather spend time with family, watch the football or get some work done.
I have other lists.
Is there a way in the Sophos UTM to import such a list into the device?
Sincerely,
Werner
This thread was automatically locked due to age.
