wolffcatskyy/crowdsec-blocklist-import v3.5.0

v3.5.0 — Daemon Mode, Webhooks, AbuseIPDB API

on GitHub

What's New

Daemon Mode (INTERVAL)

Run the importer on a repeating schedule without external cron. The container stays running and sleeps between import cycles.

environment:
  - INTERVAL=3600        # Run every hour (seconds)
  - RUN_ON_START=true    # Run immediately on start, then wait

Set INTERVAL=0 (default) for single-run mode (previous behavior).

Webhook Notifications

Get notified on import completion via Discord, Slack, or generic webhooks.

environment:
  - WEBHOOK_URL=https://discord.com/api/webhooks/...
  - WEBHOOK_TYPE=discord  # discord, slack, or generic

AbuseIPDB API Source

Import IPs from the AbuseIPDB Blacklist API (requires API key with Blacklist endpoint access):

environment:
  - ENABLE_ABUSE_IPDB=true
  - ABUSEIPDB_API_KEY=your-api-key
  - ABUSEIPDB_CONFIDENCE=90  # minimum confidence score (default: 90)

Other Changes

• CIDR-aware allowlist matching (ALLOWLIST_GITHUB auto-fetches GitHub IP ranges)
• Bug fixes for allowlist parsing edge cases
• Improved error handling and logging

Upgrade

docker pull ghcr.io/wolffcatskyy/crowdsec-blocklist-import:latest
docker compose up -d

Full Changelog: v3.3.2...v3.5.0