These lists can be imported into any firewall that accept blocklists with standalone ip addressess (x.x.x.x) and ranges (x.x.x.x-y.y.y.y).
Keep polling interval at 15 minutes or higher and use https if possible.
|List name||Entries||Last update||Recommended usage||Description|
|Emerging Threats: Known Compromised Hosts||844||2018-10-15 02:03||Incoming||This ruleset is compiled from a number of sources. These are not your everyday infected and sending a bit of spam hosts,
these are significantly infected and hostile hosts. Read more
|TOR exit nodes||931||2018-10-15 02:06||Incoming||A list of known TOR exit nodes|
|BruteforceBlocker||831||2018-10-15 02:02||Incoming||See http://danger.rulez.sk/index.php/bruteforceblocker|
|Blocklist.de All||28925||2018-10-15 02:05||Incoming||Blocklist.de all list contains IP addresses that have attacked one of our customers/servers in the last 48 hours.|
|Talos||1384||2018-10-15 02:04||Incoming||Talos is a list from Cisco Talos that contains known malicious network threats.|
|Dshield||20||2018-10-15 02:10||Incoming||Dshield.org recommended block list|
|Malware Domain List||1009||2018-10-15 02:08||Outgoing||See: http://www.malwaredomainlist.com|
|SSL Abuse IP list||97||2018-10-15 02:09||Outgoing||SSLBL 30 days block list. https://sslbl.abuse.ch/blacklist/|
|Zeus IP blocklist||107||2018-10-15 02:10||Outgoing||abuse.ch ZeuS IP blocklist "BadIPs" (excluding hijacked sites and free hosting providers). https://zeustracker.abuse.ch/blocklist.php|
Check Point R80.10+Download and unpack r80-0.2.tar (changelog) on your gateways in expert mode. Follow the instructions in the README file. The following lists are available at this time: etknown, tor, bruteforce, talos, blocklistde, malwaredomainlist, sslabuse, zeus.
Installation on Check Point R77.30:Download and unpack cpdbl-0.61.tar (readme, changelog) on your gateways in expert mode.
Run 'sh install.sh' in the cpdbl-installer directory and you should be set to use cpdbl.sh