Block the URLs and IPs stored in an online web feed site

[Oral_Gokgol]

Use sk132193

ioc_feeds add --feed_name usome_domain_list --transport https --resource "https://www.usom.gov.tr/url-list.txt" --format [type:domain,value:1] --feed_action Prevent

[Danny]

As the above is not an official script, here are the officially supported ways to block IPs:

• sk103154 - How to block traffic coming from known malicious IP addresses
• sk21534 - How to configure and troubleshoot IPS protection "Malicious IPs" (DShield Storm Center)
• sk67861 - Accelerated Drop Rules Feature (sim dropcfg)

To drop IPs by geo location, use IPS Geo Protection (also for AWS/Azure cloud).

Other, non-official resources can be found here: CP Dynamic Block Lists  and in our Code Hub.