# gsirt-domain-and-ip-block

List of IP addresses and domain names to block. [IOC](https://en.wikipedia.org/wiki/Indicator_of_compromise) stands for an indicator of compromise.

[Runbook](https://data-analytics.atlassian.net/wiki/spaces/IN/pages/1155301514/Emergency+Request+for+Domain+Name+IP+Blocks)

#### Ensure there is no new line at the end of the file, or empty lines among the lines.

### Hints

#### Remove common lines between two files

```bash
cat IOC_IPV4_Address_block_removals.txt | sort > IOC_IPV4_Address_block_removals.tmp && mv IOC_IPV4_Address_block_removals.tmp IOC_IPV4_Address_block_removals.txt
cat IOC_IPV4_Address_block.txt | sort > IOC_IPV4_Address_block.tmp && mv IOC_IPV4_Address_block.tmp IOC_IPV4_Address_block.txt
grep -v -f IOC_IPV4_Address_block_removals.txt IOC_IPV4_Address_block.txt > IOC_IPV4_Address_block.tmp && mv IOC_IPV4_Address_block.tmp IOC_IPV4_Address_block.txt

grep -v -f IOC_domains_block_removals.txt IOC_domains_block.txt > IOC_domains_block.tmp && mv IOC_domains_block.tmp IOC_domains_block.txt
```