🕙 Last Sync: 05/15/2026 18:09 UTC
- Introduction
- Supported Blocklists
- Download Options
- Blocklists
- References for More Help
- Contributors ✨
This section outlines what we offer through our blocklist service.
This service provides downloadable IP blocklists to help protect servers, applications, and network infrastructure from unwanted or malicious traffic.
Blocklists are used to block known abusive IPs involved in attacks, spam, bot activity, scanning, crawling, VPN/proxy usage, datacenter traffic, and other suspicious behavior before a connection is allowed.
All lists are provided in standard ipset format, with one IP address or subnet per line. This simple format is widely supported and easy to integrate into firewalls, intrusion prevention systems, routers, proxies, and other security tools on both Linux and cloud platforms.
Blocklists can be used with a wide range of security and firewall tools, including:
- Cloudflare firewall rules (via IP lists)
- ConfigServer Security & Firewall
- CrowdSec
- Fail2ban
- FireHOL
- iptables / nftables
- Mikrotik RouterOS
- OPNsense
- pfSense
- Transmission
- UFW (Uncomplicated Firewall)
Blocklists (also known as ipsets) are collections of IP addresses and networks associated with malicious or unwanted activity. These typically include sources involved in spamming, brute-force attacks, botnets, scanning activity, and other forms of abuse.
When used with firewall or security software, blocklists can automatically block or restrict traffic from these sources. This helps reduce the risk of compromise, improve resilience against attacks, and minimize unwanted network noise.
By proactively filtering traffic at the network level, blocklists allow you to strengthen your security posture without needing to manually monitor or respond to every incoming connection.
Using blocklists within these tools allows for automated, consistent protection across servers, networks, and cloud infrastructure.
We offer a broad range of blocklists, combining our own in-house curated list, along with trusted third-party sources. Together, these lists are designed to help you effectively block abusive, unwanted, and high-risk traffic.
This section provides an overview of the blocklists available through our platform.
For the complete and up-to-date list of supported blocklists, please refer to our API endpoint:
Our blocklist service provides continuously updated IP-based (ipset) protection against today’s most active online threats. These lists are exclusively curated in-house and are only available through our service, giving you access to intelligence not found in other public blocklists.
We target a wide range of abusive activity, including brute-force attack sources, spam networks, malicious scanners, and hosting providers that are commonly abused for harmful or unauthorized activity.
To enhance accuracy and coverage, we combine our internal system with trusted external intelligence sources, including organizations such as the American Registry for Internet Numbers (ARIN) and other reputable security feeds.
Our blocklists are updated multiple times per day to ensure protection stays current against new potential threats.
Coverage includes:
- Countries and continents (geo-blocking options)
- Major ISPs (e.g. AT&T, Comcast, Starlink)
- Hosting providers (e.g. AWS, DigitalOcean, Contabo)
- Known spam sources
- BitTorrent-related networks
- AI crawlers (e.g. OpenAI, Anthropic)
- VPNs and proxy networks
You can view our official blocklists here.
In addition to our in-house curated blocklists, we also provide access to some of the most widely used and trusted third-party threat intelligence feeds available.
These external sources are integrated into our platform to extend coverage and improve detection of malicious activity across a broader global threat landscape. T
These blocklists help identify additional spam networks, scanning infrastructure, bot activity, and compromised hosts that may not be captured by internal datasets alone.
We currently integrate providers such as:
- AlienVault
- BBcan177
- Binary Defense
- blocklist.de
- Botvrij
- Emerging Threats
- Myip.ms
- Spamhaus
- And other reputable security feeds
You can view our 3rd-party provider blocklists here.
We provide access to our blocklists through two methods:
- A free public repository available on GitHub.
- Our advanced Blocklist API.
We provide a free version of our blocklists through our public Github repository, allowing anyone to download and use our blocklists at no cost.
In addition to the free repository, we offer users access to our Blocklist API Service, which provides advanced customization features that are not possible through static GitHub-hosted files.
Our API allows you to:
- Remove all comments from blocklists
- Inject custom IP addresses into generated lists
- Exclude specific IPs or subnets
- Filter entries using wildcard matching
- Limit the number of returned IPs
- Add custom header notes to generated lists
- Filter by IPv4 or IPv6
- Access higher request and download limits
These features enable precise control over how blocklists are generated, making it easier to tailor them to your firewall rules, infrastructure, and security requirements.
For more details on API access and available plans, see our Membership page.
Users who subscribe to a membership will be provided an API license key which gives you direct access to all blocklist API features.
This section lists all of the available blocklists; and explains about our risk assessment procedure.
Blocklists in this README use ⚝ and ★ icons to indicate risk levels.
More stars mean higher risk. Lists marked as High or Critical should be added to your firewall application blocklist to secure your server. Lower-risk lists are optional and can be added at your discretion.
Our automated CI generates this risk assessment each day.
| Rating | Risk Level | Description |
|---|---|---|
⚝⚝⚝⚝⚝ |
No Risk | Trusted or benign infrastructure with no meaningful threat indicators. |
★⚝⚝⚝⚝ |
Low Risk | Generally safe networks with very limited or incidental abuse signals. |
★★⚝⚝⚝ |
Moderate Risk | Mixed or uncertain sources; may exhibit occasional suspicious activity. |
★★★⚝⚝ |
Elevated Risk | Known to generate abuse traffic; blocking may be justified. |
★★★★⚝ |
High Risk | Strong association with malicious or automated abuse activity. |
★★★★★ |
Critical Risk | Highly malicious or heavily abused infrastructure; block immediately. |
This repository provides our in-house curated blocklists, which are automatically updated multiple times per day. These lists can be integrated into supported firewall applications. Please refer to your specific application’s documentation for setup instructions.
These are the primary IPSETs most users will want to add to their firewall configuration. They contain actively observed IP addresses linked to recent abusive behavior across multiple threat intelligence sources.
Each IP is validated against trusted third-party providers and processed through multiple backend verification systems designed to minimize false positives as much as possible.
Our goal is to ensure that entries included in these lists have a very high confidence level, making them safe and reliable for production firewall use.
IPs included in these lists are associated with activities such as:
- SSH brute-force attempts
- Port scanning and reconnaissance
- DDoS attack participation
- IoT device targeting
- Phishing infrastructure
Note
For most users, the blocklists master.ipset and highrisk.ipset are all you need. They contain a massive collection of IP addresses, all with a 100% confidence level, meaning you should encounter none or minimal false positives.
| Set | Description | Severity | View |
|---|---|---|---|
| Master | Abusive IP addresses which have been reported for port scanning and SSH brute-forcing. HIGHLY recommended. Includes AbuseIPDB, IPThreat, CinsScore, GreensNow |
★★★★★ | API Repo |
| High Risk | Networks identified engaging in malicious activity such as port scanning, SSH/SFTP brute-force attempts, and probing web servers with common sensitive filenames (e.g. .env) in an attempt to discover exposed private data. Confidence: 100% | ★★★★★ | API Repo |
| Bogon Networks | Unroutable, reserved, or unallocated IP ranges that should not appear on the public internet. Often used for spoofing or misconfigured traffic. | ★★⚝⚝⚝ | API Repo |
| Tor Exit Nodes | Public exit points of the Tor network used for anonymized traffic routing. Commonly associated with privacy usage, but also frequently used for abuse and automated attacks. | ★★★⚝⚝ | API Repo |
These blocklists help you control which third-party services can access your server, allowing you to block bad actors or unwanted service providers.
| Set | Description | Severity | View |
|---|---|---|---|
| General | A collection of known internet measurement, scanning, research, and security intelligence networks that actively probe public infrastructure. List includes Censys, Shodan, Project25499, InternetArchive, Cyber Resilience, Internet Measurement, probe.onyphe.net, Security Trails |
★★★★★ | API Repo |
| Activision Gaming Network | Online gaming infrastructure used for multiplayer services, matchmaking, and telemetry. | ★⚝⚝⚝⚝ | API Repo |
| Ahrefs SEO Crawler | SEO analysis crawler used for backlink indexing and website discovery. | ★★⚝⚝⚝ | API Repo |
| AI: Claude AI Infrastructure | AI model service infrastructure used for conversational and API-based automation. | ★★★⚝⚝ | API Repo |
| AI: OpenAI GPT Bots | Automated AI agents and crawler systems used for model interaction and data processing. | ★★★⚝⚝ | API Repo |
| AI: OpenAI Chat Services | Interactive AI chat infrastructure used for conversational model access. | ★★★⚝⚝ | API Repo |
| AI: OpenAI Search Bots | Automated systems used for AI-assisted web search and content retrieval. | ★★★⚝⚝ | API Repo |
| Akamai CDN | Global content delivery and edge security network used for high-scale traffic distribution. | ★★★★⚝ | API Repo |
| Alibaba Cloud | Cloud computing and infrastructure services used for hosting and distributed applications. | ★★★★⚝ | API Repo |
| Amazon AWS | Global cloud infrastructure platform used for hosting, compute, and API services. | ★★★★⚝ | API Repo |
| Amazon EC2 | Virtual server infrastructure used for scalable cloud computing workloads. | ★★★★⚝ | API Repo |
| Anthropic AI | AI research and model infrastructure used for conversational intelligence systems. | ★★★⚝⚝ | API Repo |
| Apple Bot | Automated Apple crawling infrastructure used for indexing and service validation. | ★★★★⚝ | API Repo |
| Apple iCloud | Cloud storage and synchronization infrastructure for Apple services and devices. | ★★⚝⚝⚝ | API Repo |
| Automattic Services | Web infrastructure used for WordPress.com and related hosting services. | ★★★⚝⚝ | API Repo |
| Baidu Services | Search and AI infrastructure used for indexing and web crawling services. | ★★★★⚝ | API Repo |
| Bing (Microsoft) | Search engine and web crawler infrastructure used for indexing and ranking. | ★★⚝⚝⚝ | API Repo |
| Blizzard Entertainment | Online gaming infrastructure used for multiplayer services and authentication. | ⚝⚝⚝⚝⚝ | API Repo |
| Bluehost Hosting (EIG) | Shared hosting infrastructure used for web hosting and domain services. | ★★★★⚝ | API Repo |
| BunnyCDN | Content delivery network used for caching and global content distribution. | ★★⚝⚝⚝ | API Repo |
| ByteDance Network | Large-scale content and social platform infrastructure used for media delivery and analytics. | ★★★⚝⚝ | API Repo |
| Censys Internet Scanner | Security research platform performing internet-wide asset discovery and scanning. | ★★★★★ | API Repo |
| China Broadcasting Network | Telecommunications and media infrastructure used for large-scale network distribution. | ★★★★⚝ | API Repo |
| ChinaNet Backbone | Major ISP backbone network used for national internet traffic routing. | ★★★★⚝ | API Repo |
| China Mobile | Large mobile network operator infrastructure providing cellular connectivity. | ★★★★⚝ | API Repo |
| China Network Infrastructure | Aggregated telecom and ISP infrastructure used across multiple national networks. | ★★★★★ | API Repo |
| China Mobile Network | Mobile carrier infrastructure used for cellular connectivity and routing. | ★★★★⚝ | API Repo |
| China Telecom | Major telecommunications provider used for broadband and backbone routing. | ★★★★⚝ | API Repo |
| China Tencent Network | Large-scale cloud, gaming, and social infrastructure provider. | ★★★⚝⚝ | API Repo |
| China TieTong | Telecommunications infrastructure used for broadband and routing services. | ★★★★⚝ | API Repo |
| China Unicom | National telecommunications provider used for mobile and broadband services. | ★★★★⚝ | API Repo |
| Cloudflare Network | Global CDN and security infrastructure used for web protection and traffic routing. | ★★⚝⚝⚝ | API Repo |
| CloudFront (Amazon) | Content delivery network used for global caching and media distribution. | ★★⚝⚝⚝ | API Repo |
| ColoCrossing / HostPapa | Hosting and VPS infrastructure used for shared and dedicated server deployments. | ★★★★⚝ | API Repo |
| Contabo VPS Hosting | Low-cost VPS hosting provider frequently used for automation and bulk deployments. | ★★★★⚝ | API Repo |
| DigitalOcean ASN | Cloud VPS infrastructure widely used for application hosting and automation. | ★★★★⚝ | API Repo |
| DigitalOcean Network Sources | Active cloud-hosted infrastructure used for compute and networking services. | ★★★★⚝ | API Repo |
| DreamHost | Web hosting provider used for shared hosting and cloud services. | ★★★⚝⚝ | API Repo |
| DuckDuckGo Crawler | Privacy-focused search engine crawler used for indexing web content. | ★⚝⚝⚝⚝ | API Repo |
| EA / IGN Network | Gaming and media infrastructure used for content delivery and multiplayer services. | ★⚝⚝⚝⚝ | API Repo |
| Facebook (Meta) | Social media and advertising infrastructure used for content distribution and tracking. | ★★⚝⚝⚝ | API Repo |
| Fastly CDN | Edge computing and content delivery network used for high-speed web distribution. | ★★⚝⚝⚝ | API Repo |
| GitHub Actions | CI/CD automation infrastructure used for running build and deployment pipelines. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Actions (macOS) | macOS-based CI runners used for automated build and test workflows. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Infrastructure | Aggregated GitHub services including API, repositories, and automation systems. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub API | Programmatic access layer for GitHub services and repository management. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Codespaces | Cloud-based development environments used for remote coding and execution. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Copilot | AI-assisted code generation and autocomplete service. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Git Infrastructure | Core version control and repository hosting infrastructure. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Webhooks | Event-driven automation system used for repository notifications and triggers. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Importer | Tool used for migrating external repositories into GitHub. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Packages | Package hosting and distribution service for software artifacts. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Pages | Static website hosting service integrated with GitHub repositories. | ⚝⚝⚝⚝⚝ | API Repo |
| GitHub Web Services | Frontend and web application infrastructure for GitHub platform access. | ⚝⚝⚝⚝⚝ | API Repo |
| Google Bots | Web crawling infrastructure used for search indexing and content discovery. | ★★★⚝⚝ | API Repo |
| Google Cloud Platform | Cloud computing infrastructure used for hosting, APIs, and distributed services. | ★★★★⚝ | API Repo |
| Google Core Services | Internal Google infrastructure used for search, analytics, and platform services. | ★★⚝⚝⚝ | API Repo |
| Huawei Network | Telecommunications and cloud infrastructure used for global networking services. | ★★★★⚝ | API Repo |
| Linode VPS Hosting | Cloud VPS provider used for hosting applications and server workloads. | ★★★★⚝ | API Repo |
| Microsoft 365 | Cloud productivity suite infrastructure used for email, storage, and collaboration. | ★★⚝⚝⚝ | API Repo |
| Microsoft Azure (China) | Region-specific Azure cloud infrastructure operating in China. | ★★★★⚝ | API Repo |
| Microsoft Azure | Global cloud computing platform used for enterprise hosting and services. | ★★★⚝⚝ | API Repo |
| Microsoft Azure (Government) | Restricted Microsoft cloud environment used for US government workloads. | ★★★★⚝ | API Repo |
| Nintendo Network | Gaming and console online services used for multiplayer and account access. | ★⚝⚝⚝⚝ | API Repo |
| Oracle Cloud | Enterprise cloud infrastructure used for hosting and database services. | ★★★★⚝ | API Repo |
| Oracle Object Storage | Cloud storage service used for scalable data storage and retrieval. | ★⚝⚝⚝⚝ | API Repo |
| Oracle Cloud Infrastructure | Core cloud compute and networking services provided by Oracle. | ★★⚝⚝⚝ | API Repo |
| Oracle Network Services | Network backbone infrastructure supporting Oracle cloud operations. | ★★⚝⚝⚝ | API Repo |
| Pandora Streaming | Music streaming platform infrastructure used for audio distribution. | ★⚝⚝⚝⚝ | API Repo |
| Pingdom Monitoring | Website monitoring service used for uptime and performance checks. | ★⚝⚝⚝⚝ | API Repo |
| PirateBay Network | Peer-to-peer file distribution infrastructure associated with torrent indexing. | ★★★★★ | API Repo |
| Proton VPN | Privacy-focused VPN infrastructure used for encrypted traffic routing. | ★⚝⚝⚝⚝ | API Repo |
| PunkBuster Anti-Cheat | Gaming anti-cheat and validation infrastructure used in multiplayer environments. | ★★★⚝⚝ | API Repo |
| Riot Games Network | Online gaming infrastructure used for matchmaking and game services. | ★★⚝⚝⚝ | API Repo |
| RSS API Services | Feed aggregation and syndication services used for content distribution. | ★⚝⚝⚝⚝ | API Repo |
| Shadowserver Intelligence | Global threat intelligence and malware tracking infrastructure. | ★★★★★ | API Repo |
| Sony Network Services | Aggregated Sony online infrastructure for gaming and media services. | ★⚝⚝⚝⚝ | API Repo |
| PlayStation Network | Sony gaming platform used for multiplayer services and account management. | ⚝⚝⚝⚝⚝ | API Repo |
| Sony User Reporting Network | Systems used for user reporting, telemetry, and abuse detection. | ★⚝⚝⚝⚝ | API Repo |
| Steam Platform | Digital game distribution and multiplayer infrastructure operated by Valve. | ⚝⚝⚝⚝⚝ | API Repo |
| Stripe API | Payment processing API used for online financial transactions. | ⚝⚝⚝⚝⚝ | API Repo |
| Stripe Infrastructure Services | Backend payment processing and fraud detection systems. | ⚝⚝⚝⚝⚝ | API Repo |
| Stripe Webhooks | Event notification system used for payment and transaction updates. | ⚝⚝⚝⚝⚝ | API Repo |
| Telegram Network | Messaging and media distribution infrastructure. | ★★★⚝⚝ | API Repo |
| Tumblr | Social blogging platform used for media sharing and content distribution. | ★★★⚝⚝ | API Repo |
| X (Twitter) | Social media platform infrastructure used for real-time communication and content delivery. | ★⚝⚝⚝⚝ | API Repo |
| Ubisoft Network | Online gaming infrastructure used for multiplayer services and authentication. | ★⚝⚝⚝⚝ | API Repo |
| UptimeRobot Monitoring | Website monitoring service used for uptime tracking and alerting. | ★⚝⚝⚝⚝ | API Repo |
| WebPageTest | Performance testing service used for analyzing website speed and behavior. | ★★★★⚝ | API Repo |
| Xfire Gaming Network | Legacy gaming communication and presence tracking service infrastructure. | ★★★★⚝ | API Repo |
These blocklists help prevent known spam sources from accessing your server. They include IPs identified by services like Spamhaus as well as spammers targeting forums and other online platforms.
| Set | Description | Severity | View |
|---|---|---|---|
| Forum Spammers | List of known forum / blog spammers and bots | ★★★★★ | API Repo |
| Spamhaus | Bad actor IP addresses registered with Spamhaus | ★★★★⚝ | API Repo |
These blocklists allow you to filter traffic based on Internet Service Providers (ISPs). They can be used to block or restrict access from specific networks or providers.
| Set | Description | Severity | View |
|---|---|---|---|
| AOL | IP ranges associated with AOL residential and legacy internet service infrastructure. | ★★⚝⚝⚝ | API Repo |
| AT&T | Residential, wireless, and broadband IP ranges operated by AT&T internet services. | ★★★⚝⚝ | API Repo |
| Cablevision | Customer broadband networks and infrastructure historically associated with Cablevision services. | ★★⚝⚝⚝ | API Repo |
| Charter / Spectrum / Time Warner Cable | Consumer and business broadband IP ranges operated by Charter Communications and Spectrum services. | ★★★⚝⚝ | API Repo |
| Comcast | Residential and commercial Comcast Xfinity broadband subscriber networks and infrastructure. | ★★★⚝⚝ | API Repo |
| Cox Communications | Broadband customer IP ranges and network infrastructure operated by Cox Communications. | ★★⚝⚝⚝ | API Repo |
| Embarq | Legacy telecommunications and broadband infrastructure formerly operated under Embarq networks. | ★⚝⚝⚝⚝ | API Repo |
| Frontier Communications | Consumer and enterprise broadband infrastructure operated by Frontier Communications. | ★★⚝⚝⚝ | API Repo |
| Qwest | Legacy Qwest broadband and telecommunications IP address ranges. | ★⚝⚝⚝⚝ | API Repo |
| Qwest / CenturyLink | Residential and business internet infrastructure associated with CenturyLink and legacy Qwest services. | ★★⚝⚝⚝ | API Repo |
| SpaceX Starlink | Satellite-based broadband subscriber networks operated through the Starlink internet service. | ★★⚝⚝⚝ | API Repo |
| Sprint | Legacy mobile carrier and wireless broadband IP infrastructure associated with Sprint networks. | ★★⚝⚝⚝ | API Repo |
| Suddenlink / Altice / Optimum | Broadband subscriber and network infrastructure operated under Altice and Optimum services. | ★★⚝⚝⚝ | API Repo |
| Verizon | Residential, mobile, and enterprise internet infrastructure operated by Verizon Communications. | ★★⚝⚝⚝ | API Repo |
This section includes blocklists which you can import into the bittorrent client Transmission.
- In this repo, copy the direct URL to the Transmission blocklist, provided below:
- Open your Transmission application; depending on the version you run, do ONE of the follow two choices:
- Paste the link to Transmission ›
Settings›Peers›Blocklist - Paste the link to Transmission ›
Edit›Preferences›Privacy›Enable Blocklist
- Paste the link to Transmission ›
| Set | Description | Severity | View | Website |
|---|---|---|---|---|
| Transmission (List 1) | A large blocklist for the BitTorrent client Transmission | ★★★★★ | API Repo | View |
Our ASN blocklists are built using authoritative registry and routing data that maps how networks are allocated and operated across the internet.
An Autonomous System Number (ASN) is a unique identifier assigned to a network or group of IP address ranges that share a common routing policy. These are typically operated by Internet Service Providers (ISPs), cloud hosting providers, data centers, enterprises, and other large-scale network operators. ASNs are fundamental to how internet routing works through the Border Gateway Protocol (`BGP`), which determines how traffic is exchanged between networks globally.
We source ASN ownership and routing intelligence from official Regional Internet Registries (RIRs) and routing databases. These organizations are responsible for allocating IP address space, assigning ASNs, and maintaining global internet routing records. Using this data ensures that our blocklists reflect accurate, up-to-date ownership and routing relationships between networks.
The primary registry used for North American allocations is the American Registry for Internet Numbers (`ARIN`), which manages IP address space and ASN assignments across the United States, Canada, and parts of the Caribbean.
To improve global coverage and routing accuracy, we also aggregate data from additional authoritative WHOIS and BGP routing sources, including:
whois.radb.netwhois.rogerstelecom.netwhois.bgp.net.brwhois.apnic.netwhois.afrinic.netwhois.iana.orgwhois.lacnic.netriswhois.ripe.netrr.ntt.net
This multi-source approach allows us to cross-reference routing announcements, verify ASN ownership, and maintain a highly accurate representation of global network infrastructure.
| Set | Description | Severity | View |
|---|---|---|---|
| Akamai Core Networks | Global content delivery, edge acceleration, caching, and distributed web infrastructure operated by Akamai. Commonly used for CDN delivery, enterprise applications, APIs, and website performance optimization. | ★★★★⚝ | API Repo |
| Akamai Linode Networks | Linode cloud hosting infrastructure operated by Akamai. Frequently used for VPS instances, development servers, automation services, VPNs, self-hosted applications, and customer-managed cloud workloads. | ★★★★⚝ | API Repo |
| Alibaba Cloud Networks | Cloud computing and hosting infrastructure operated by Alibaba Cloud, including VPS hosting, enterprise services, web applications, and globally distributed cloud platforms. | ★★★★⚝ | API Repo |
| Amazon Cloudfront | Global content delivery network (CDN) and edge caching infrastructure operated by Amazon CloudFront, commonly used for website acceleration, media streaming, API delivery, and distributed content distribution. | ★★⚝⚝⚝ | API Repo |
| Amazon Core Networks | Amazon corporate and internal infrastructure supporting retail platforms, operational services, logistics systems, and enterprise network operations outside standard AWS customer environments. | ★⚝⚝⚝⚝ | API Repo |
| Apple Networks | Apple infrastructure supporting iCloud, software updates, device services, APIs, push notifications, and connectivity used across Apple hardware and online platforms. | ★⚝⚝⚝⚝ | API Repo |
| AT&T Networks | Telecommunications and internet infrastructure operated by AT&T, including consumer broadband, wireless carrier services, enterprise networking, and ISP backbone operations. | ★★★⚝⚝ | API Repo |
| Automattic Networks | Infrastructure used by Automattic services including WordPress.com, WooCommerce, Jetpack, Gravatar, and related hosting or content delivery platforms. | ★★★⚝⚝ | API Repo |
| Baidu Networks | Infrastructure operated by Baidu, including search services, cloud platforms, content delivery systems, AI services, and supporting internet infrastructure. Commonly observed in automated traffic and large-scale scanning activity in global threat telemetry. | ★★★★⚝ | API Repo |
| Bluehost / EIG Networks | Hosting infrastructure associated with Bluehost and Endurance International Group (EIG), including shared hosting environments, VPS platforms, customer web hosting services, and managed website infrastructure. | ★★★★⚝ | API Repo |
| BunnyCDN Networks | Global content delivery and edge caching infrastructure operated by BunnyCDN, commonly used for website acceleration, media delivery, API distribution, and static asset caching. | ★★⚝⚝⚝ | API Repo |
| Cablevision Networks | Regional ISP infrastructure providing consumer broadband and enterprise connectivity services. Typically used by residential users with limited hosting or abusive surface area. | ★★⚝⚝⚝ | API Repo |
| Censys Networks | Internet-wide scanning and security research infrastructure used for large-scale asset discovery, enumeration, and security telemetry collection across global networks. | ★★★★★ | API Repo |
| Charter / Spectrum Networks | Major consumer ISP infrastructure providing broadband and cable internet services across residential and business customers. | ★★★⚝⚝ | API Repo |
| ChinaNet Networks | Large backbone ISP infrastructure operated in China, supporting residential and enterprise internet traffic at national scale. | ★★★★⚝ | API Repo |
| China Mobile Networks | Mobile carrier and ISP infrastructure providing cellular and broadband connectivity across China with large-scale consumer traffic. | ★★★★⚝ | API Repo |
| China Net Mobile Networks | Mobile and broadband network infrastructure associated with Chinese telecommunications providers, serving large-scale consumer connectivity. | ★★★★⚝ | API Repo |
| China National Networks | Aggregated Chinese national telecom and ISP infrastructure covering multiple backbone and regional providers. | ★★★★★ | API Repo |
| China Telecom Networks | Major Chinese telecommunications backbone provider supporting national internet infrastructure, enterprise services, and consumer broadband. | ★★★★⚝ | API Repo |
| China Tencent Cloud Networks | Cloud computing and digital infrastructure operated by Tencent, including hosting, gaming infrastructure, APIs, and distributed cloud services. | ★★★★⚝ | API Repo |
| China Tietong Networks | Regional Chinese telecommunications provider supporting broadband and backbone connectivity services across multiple regions. | ★★★★⚝ | API Repo |
| China Unicom Networks | Major Chinese telecom operator providing mobile, broadband, and enterprise networking services nationwide. | ★★★★⚝ | API Repo |
| Cloudflare Networks | Global content delivery network, reverse proxy, and security infrastructure used for web acceleration, DDoS protection, DNS services, and API routing. | ★★⚝⚝⚝ | API Repo |
| Comcast Networks | Large consumer ISP infrastructure providing residential and business broadband, cable, and enterprise connectivity services in North America. | ★★★⚝⚝ | API Repo |
| Contabo Hosting Networks | Low-cost VPS and dedicated hosting infrastructure commonly used for self-hosted applications, automation, VPNs, and general-purpose cloud workloads. | ★★★★⚝ | API Repo |
| Cox Communications Networks | Consumer ISP infrastructure providing broadband internet, cable services, and enterprise networking solutions in the United States. | ★★⚝⚝⚝ | API Repo |
| DigitalOcean Networks | Cloud hosting infrastructure providing VPS instances, developer servers, APIs, and self-hosted applications. Frequently used for automation, bots, and ephemeral workloads. | ★★★★⚝ | API Repo |
| DreamHost Networks | Shared and VPS hosting provider supporting websites, blogs, and small-scale web applications. | ★★★⚝⚝ | API Repo |
| Embarq Networks | Legacy telecommunications and regional ISP infrastructure providing residential internet connectivity services. | ★⚝⚝⚝⚝ | API Repo |
| Facebook (Meta) Networks | Global infrastructure operated by Meta, including social platforms, APIs, CDN systems, and backend services for Facebook, Instagram, and related services. | ★★⚝⚝⚝ | API Repo |
| Fastly Networks | High-performance edge cloud and CDN infrastructure used for content delivery, API acceleration, and security services. | ★★⚝⚝⚝ | API Repo |
| FDC Servers Networks | Low-cost dedicated server and hosting provider frequently used for bulk hosting, proxy services, and high-abuse server workloads. | ★★★★★ | API Repo |
| Frontier Communications Networks | Consumer ISP infrastructure providing broadband internet and telecom services across residential and business customers. | ★★⚝⚝⚝ | API Repo |
| GitHub Networks | Developer infrastructure supporting code hosting, CI/CD pipelines, APIs, and software distribution platforms. | ★⚝⚝⚝⚝ | API Repo |
| GoDaddy Networks | Domain registrar and shared hosting provider supporting website hosting, DNS services, and small business infrastructure. | ★★★⚝⚝ | API Repo |
| Google Networks | Global infrastructure supporting search, cloud computing (GCP), APIs, and large-scale consumer and enterprise services. | ★⚝⚝⚝⚝ | API Repo |
| HAProxy Technologies Networks | Infrastructure associated with load balancing, reverse proxy, and traffic routing systems used in enterprise and cloud environments. | ★⚝⚝⚝⚝ | API Repo |
| Hetzner Networks | European low-cost dedicated server and cloud hosting provider widely used for VPS hosting, automation, VPNs, and scalable workloads. | ★★★★★ | API Repo |
| Hostinger Networks | Shared and VPS hosting provider used for small to medium websites, web applications, and general hosting services. | ★★★⚝⚝ | API Repo |
| InMotion Hosting Networks | Web hosting provider offering shared hosting, VPS, and managed hosting services for websites and business applications. | ★★★⚝⚝ | API Repo |
| Internet Measurement Networks | Research and scanning infrastructure used for internet-wide measurement, telemetry collection, and security analysis. | ★★★★⚝ | API Repo |
| IONOS / 1&1 Networks | European hosting and cloud provider offering VPS, shared hosting, and enterprise infrastructure services. | ★★★★⚝ | API Repo |
| Korea Telecom Networks | Major national telecommunications provider in South Korea offering broadband, mobile, and enterprise networking services. | ★★★★⚝ | API Repo |
| Leaseweb Hosting | Hosting infrastructure providing VPS, dedicated servers, cloud hosting, and enterprise network services. | ★★★★★ | API Repo |
| Microsoft Networks | Global infrastructure supporting Azure cloud services, enterprise platforms, APIs, and Microsoft consumer services. | ★★⚝⚝⚝ | API Repo |
| Namecheap Networks | Domain registrar and hosting provider offering shared hosting, DNS services, and basic VPS infrastructure. | ★★★⚝⚝ | API Repo |
| Nintendo Networks | Gaming infrastructure supporting online multiplayer services, game authentication, and digital distribution for Nintendo platforms. | ★⚝⚝⚝⚝ | API Repo |
| Onyphe Intelligence Networks | Cyber intelligence and internet scanning infrastructure used for threat detection, asset discovery, and security research. | ★★★★⚝ | API Repo |
| Oracle Cloud Networks | Global cloud computing infrastructure providing enterprise hosting, databases, APIs, and large-scale application deployment services. | ★★★★⚝ | API Repo |
| OVHcloud Networks | European cloud and dedicated server provider widely used for VPS hosting, game servers, VPN infrastructure, and automation workloads. | ★★★★★ | API Repo |
| Palo Alto Networks | Cybersecurity and enterprise network infrastructure provider offering firewalls, cloud security, VPN, and threat intelligence services. | ★★★★★ | API Repo |
| Psychz Networks | Dedicated server and hosting provider often associated with high-bandwidth hosting, proxy infrastructure, and bulk server deployments. | ★★★★★ | API Repo |
| QuadraNet Networks | Data center and colocation provider offering dedicated servers, hosting infrastructure, and enterprise network services. | ★★★★⚝ | API Repo |
| Qwest / CenturyLink Networks | Large telecommunications and ISP backbone provider delivering residential and enterprise internet connectivity across the United States. | ★★⚝⚝⚝ | API Repo |
| Rackspace Hosting Networks | Managed cloud hosting provider supporting enterprise applications, email systems, and hybrid cloud infrastructure. | ★★★⚝⚝ | API Repo |
| Recyber Networks | Hosting and network infrastructure associated with security-focused and mixed-use internet services, often appearing in scanning and proxy traffic. | ★★★★⚝ | API Repo |
| Russia: Crimea South LLC Networks | Regional ISP and hosting infrastructure operating within Russian-controlled network regions, often observed in high-risk or poorly regulated traffic sources. | ★★★★★ | API Repo |
| Russia: Zummer LLC Networks | Russian hosting and network provider associated with regional internet infrastructure and mixed-use hosting environments. | ★★★★★ | API Repo |
| Scaleway Networks | European cloud provider offering VPS, bare-metal servers, and scalable hosting infrastructure commonly used for automation and application hosting. | ★★★★⚝ | API Repo |
| Servers.com Networks | Global dedicated server provider offering high-performance hosting, VPS infrastructure, and enterprise-grade compute resources. | ★★★★⚝ | API Repo |
| Shadowserver Foundation Networks | Internet security research organization performing global scanning, threat intelligence gathering, and vulnerability monitoring. | ★★★★⚝ | API Repo |
| SharkTech Networks | Hosting provider known for DDoS-protected servers, VPN hosting, and high-abuse infrastructure usage in global threat datasets. | ★★★★★ | API Repo |
| Shodan Internet Intelligence Networks | Internet-wide scanning and search engine infrastructure used for asset discovery, security research, and exposure indexing. | ★★★★★ | API Repo |
| Starlink Networks | Satellite internet infrastructure operated by SpaceX providing global broadband connectivity via low-Earth orbit satellites. | ★★⚝⚝⚝ | API Repo |
| Sprint Networks | Telecommunications provider offering mobile, broadband, and enterprise connectivity services across the United States. | ★★⚝⚝⚝ | API Repo |
| StackPath / Blackhost Networks | Edge computing and hosting infrastructure providing CDN, security, and distributed application delivery services. | ★★★⚝⚝ | API Repo |
| TikTok (ByteDance) Networks | Global infrastructure supporting TikTok and ByteDance services including video delivery, APIs, and content distribution systems. | ★★★⚝⚝ | API Repo |
| X (Twitter) | Social media infrastructure supporting X platform services including APIs, media delivery, and real-time communication systems. | ★⚝⚝⚝⚝ | API Repo |
| UpCloud Networks | High-performance cloud hosting provider offering VPS infrastructure, low-latency compute, and scalable application hosting. | ★★★★⚝ | API Repo |
| US Department of Defense Networks | Government-controlled defense and intelligence network infrastructure used for military, research, and secure communications systems. | ★★★⚝⚝ | API Repo |
| US Internet Corp Networks | Regional ISP and internet service provider offering broadband connectivity and network services within the United States. | ★★⚝⚝⚝ | API Repo |
| Verizon Networks | Major telecommunications provider delivering mobile, broadband, and enterprise networking infrastructure across the United States. | ★★⚝⚝⚝ | API Repo |
| Viettel Networks | Large telecommunications provider operating mobile, broadband, and enterprise networking services in Vietnam and international markets. | ★★⚝⚝⚝ | API Repo |
| Vultr Networks | Cloud infrastructure provider offering VPS hosting, bare-metal servers, and globally distributed compute resources frequently used for automation and deployments. | ★★★★★ | API Repo |
| Yahoo Networks | Internet services infrastructure supporting Yahoo Mail, search, content delivery, and legacy web services. | ★⚝⚝⚝⚝ | API Repo |
| YouTube (Google) Networks | Video streaming infrastructure operated by Google providing global content delivery, APIs, and media processing systems. | ★⚝⚝⚝⚝ | API Repo |
These blocklists let you control which geographical locations can access your server. They can be used as either a whitelist or a blacklist and include both continents and countries.
All data from these blocklists are populated by services such as GeoLite2 and Ip2Location.
| Set | Description | Severity | View |
|---|---|---|---|
GeoLite2 Database |
Lists IPs by continent and country from GeoLite2 database. Contains both IPv4 and IPv6 subnets | ★★★★★ | Website |
Ip2Location Database |
Coming soon | ★★★★★ | Website |
These blocklists let you control which geographical locations can access your server. They can be used as either a whitelist or a blacklist and include both continents and countries.
All data is sourced directly from the GeoLite2 Database.
| Set | Description | Severity | View |
|---|---|---|---|
| Africa | IP ranges geographically assigned to countries and territories within the African continent. | ★★⚝⚝⚝ | API Repo |
| Antarctica | IP ranges associated with research stations, satellite links, and infrastructure located in Antarctica. | ★⚝⚝⚝⚝ | API Repo |
| Asia | IP ranges geographically assigned to countries and territories throughout the Asian continent. | ★★★★⚝ | API Repo |
| Europe | IP ranges geographically assigned to countries and territories within Europe. | ★★★⚝⚝ | API Repo |
| North America | IP ranges geographically assigned to countries and territories across North America. | ★★★⚝⚝ | API Repo |
| Oceania | IP ranges associated with countries, territories, and island regions located throughout Oceania. | ★★⚝⚝⚝ | API Repo |
| South America | IP ranges geographically assigned to countries and territories within South America. | ★★⚝⚝⚝ | API Repo |
These blocklists let you control which geographical locations can access your server. They can be used as either a whitelist or a blacklist and include both continents and countries.
All data is sourced directly from the GeoLite2 Database.
| Set | Description | Severity | View |
|---|---|---|---|
| Afghanistan | IP ranges geographically assigned to Afghanistan. | ★★★⚝⚝ | API Repo |
| Aland Islands | IP ranges geographically assigned to the Åland Islands. | ★⚝⚝⚝⚝ | API Repo |
| Albania | IP ranges geographically assigned to Albania. | ★★⚝⚝⚝ | API Repo |
| Algeria | IP ranges geographically assigned to Algeria. | ★★⚝⚝⚝ | API Repo |
| American Samoa | IP ranges geographically assigned to American Samoa. | ★⚝⚝⚝⚝ | API Repo |
| Andorra | IP ranges geographically assigned to Andorra. | ★⚝⚝⚝⚝ | API Repo |
| Angola | IP ranges geographically assigned to Angola. | ★★⚝⚝⚝ | API Repo |
| Anguilla | IP ranges geographically assigned to Anguilla. | ★⚝⚝⚝⚝ | API Repo |
| Antarctica | IP ranges geographically assigned to Antarctica. | ⚝⚝⚝⚝⚝ | API Repo |
| Antigua and Barbuda | IP ranges geographically assigned to Antigua and Barbuda. | ★⚝⚝⚝⚝ | API Repo |
| Argentina | IP ranges geographically assigned to Argentina. | ★★⚝⚝⚝ | API Repo |
| Armenia | IP ranges geographically assigned to Armenia. | ★★⚝⚝⚝ | API Repo |
| Aruba | IP ranges geographically assigned to Aruba. | ⚝⚝⚝⚝⚝ | API Repo |
| Australia | IP ranges geographically assigned to Australia. | ★★⚝⚝⚝ | API Repo |
| Austria | IP ranges geographically assigned to Austria. | ★⚝⚝⚝⚝ | API Repo |
| Azerbaijan | IP ranges geographically assigned to Azerbaijan. | ★★⚝⚝⚝ | API Repo |
| Bahamas | IP ranges geographically assigned to the Bahamas. | ★⚝⚝⚝⚝ | API Repo |
| Bahrain | IP ranges geographically assigned to Bahrain. | ★★⚝⚝⚝ | API Repo |
| Bangladesh | IP ranges geographically assigned to Bangladesh. | ★★★⚝⚝ | API Repo |
| Barbados | IP ranges geographically assigned to Barbados. | ★⚝⚝⚝⚝ | API Repo |
| Belarus | IP ranges geographically assigned to Belarus. | ★★★★★ | API Repo |
| Belgium | IP ranges geographically assigned to Belgium. | ★⚝⚝⚝⚝ | API Repo |
| Belize | IP ranges geographically assigned to Belize. | ★⚝⚝⚝⚝ | API Repo |
| Benin | IP ranges geographically assigned to Benin. | ★⚝⚝⚝⚝ | API Repo |
| Bermuda | IP ranges geographically assigned to Bermuda. | ⚝⚝⚝⚝⚝ | API Repo |
| Bhutan | IP ranges geographically assigned to Bhutan. | ★⚝⚝⚝⚝ | API Repo |
| Bolivia | IP ranges geographically assigned to Bolivia. | ★★⚝⚝⚝ | API Repo |
| Bonaire, Sint Eustatius, and Saba | IP ranges geographically assigned to Bonaire, Sint Eustatius, and Saba. | ⚝⚝⚝⚝⚝ | API Repo |
| Bosnia and Herzegovina | IP ranges geographically assigned to Bosnia and Herzegovina. | ★★⚝⚝⚝ | API Repo |
| Botswana | IP ranges geographically assigned to Botswana. | ★⚝⚝⚝⚝ | API Repo |
| Bouvet Island | IP ranges geographically assigned to Bouvet Island. | ⚝⚝⚝⚝⚝ | API Repo |
| Brazil | IP ranges geographically assigned to Brazil. | ★★★★★ | API Repo |
| British Indian Ocean Territory | IP ranges geographically assigned to the British Indian Ocean Territory. | ⚝⚝⚝⚝⚝ | API Repo |
| British Virgin Islands | IP ranges geographically assigned to the British Virgin Islands. | ★⚝⚝⚝⚝ | API Repo |
| Brunei | IP ranges geographically assigned to Brunei Darussalam. | ★⚝⚝⚝⚝ | API Repo |
| Bulgaria | IP ranges geographically assigned to Bulgaria. | ★★⚝⚝⚝ | API Repo |
| Burkina Faso | IP ranges geographically assigned to Burkina Faso. | ★⚝⚝⚝⚝ | API Repo |
| Burundi | IP ranges geographically assigned to Burundi. | ★⚝⚝⚝⚝ | API Repo |
| Cambodia | IP ranges geographically assigned to Cambodia. | ★★⚝⚝⚝ | API Repo |
| Cameroon | IP ranges geographically assigned to Cameroon. | ★★⚝⚝⚝ | API Repo |
| Canada | IP ranges geographically assigned to Canada. | ★★⚝⚝⚝ | API Repo |
| Cape Verde | IP ranges geographically assigned to Cape Verde. | ★⚝⚝⚝⚝ | API Repo |
| Cayman Islands | IP ranges geographically assigned to the Cayman Islands. | ★⚝⚝⚝⚝ | API Repo |
| Cocos (Keeling) Islands | IP ranges geographically assigned to the Cocos (Keeling) Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Central African Republic | IP ranges geographically assigned to the Central African Republic. | ★⚝⚝⚝⚝ | API Repo |
| Chad | IP ranges geographically assigned to Chad. | ★⚝⚝⚝⚝ | API Repo |
| Chile | IP ranges geographically assigned to Chile. | ★★⚝⚝⚝ | API Repo |
| China | IP ranges geographically assigned to China. | ★★★★★ | API Repo |
| Christmas Island | IP ranges geographically assigned to Christmas Island. | ⚝⚝⚝⚝⚝ | API Repo |
| Colombia | IP ranges geographically assigned to Colombia. | ★★⚝⚝⚝ | API Repo |
| Comoros | IP ranges geographically assigned to Comoros. | ★⚝⚝⚝⚝ | API Repo |
| Congo | IP ranges geographically assigned to the Republic of the Congo (ROC). | ★★★⚝⚝ | API Repo |
| Cook Islands | IP ranges geographically assigned to the Cook Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Costa Rica | IP ranges geographically assigned to Costa Rica. | ★★⚝⚝⚝ | API Repo |
| Côte d'Ivoire | IP ranges geographically assigned to Côte d'Ivoire. | ★★⚝⚝⚝ | API Repo |
| Croatia | IP ranges geographically assigned to Croatia. | ★★⚝⚝⚝ | API Repo |
| Cuba | IP ranges geographically assigned to Cuba. | ★★⚝⚝⚝ | API Repo |
| Curaçao | IP ranges geographically assigned to Curaçao. | ★⚝⚝⚝⚝ | API Repo |
| Cyprus | IP ranges geographically assigned to Cyprus. | ★⚝⚝⚝⚝ | API Repo |
| Czech Republic | IP ranges geographically assigned to the Czech Republic. | ★⚝⚝⚝⚝ | API Repo |
| Democratic Republic of the Congo | IP ranges geographically assigned to the Democratic Republic of the Congo (DRC). | ★★⚝⚝⚝ | API Repo |
| Denmark | IP ranges geographically assigned to Denmark. | ★⚝⚝⚝⚝ | API Repo |
| Djibouti | IP ranges geographically assigned to Djibouti. | ★⚝⚝⚝⚝ | API Repo |
| Dominica | IP ranges geographically assigned to Dominica. | ⚝⚝⚝⚝⚝ | API Repo |
| Dominican Republic | IP ranges geographically assigned to the Dominican Republic. | ★★⚝⚝⚝ | API Repo |
| Ecuador | IP ranges geographically assigned to Ecuador. | ★★⚝⚝⚝ | API Repo |
| Egypt | IP ranges geographically assigned to Egypt. | ★★★⚝⚝ | API Repo |
| El Salvador | IP ranges geographically assigned to El Salvador. | ★★⚝⚝⚝ | API Repo |
| Equatorial Guinea | IP ranges geographically assigned to Equatorial Guinea. | ★⚝⚝⚝⚝ | API Repo |
| Eritrea | IP ranges geographically assigned to Eritrea. | ★⚝⚝⚝⚝ | API Repo |
| Estonia | IP ranges geographically assigned to Estonia. | ★⚝⚝⚝⚝ | API Repo |
| Eswatini | IP ranges geographically assigned to Eswatini. | ★⚝⚝⚝⚝ | API Repo |
| Ethiopia | IP ranges geographically assigned to Ethiopia. | ★★⚝⚝⚝ | API Repo |
| Europe | IP ranges geographically assigned to European regions. | ★★⚝⚝⚝ | API Repo |
| Falkland Islands (Malvinas) | IP ranges geographically assigned to the Falkland Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Faroe Islands | IP ranges geographically assigned to the Faroe Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Fiji | IP ranges geographically assigned to Fiji. | ★⚝⚝⚝⚝ | API Repo |
| Finland | IP ranges geographically assigned to Finland. | ★⚝⚝⚝⚝ | API Repo |
| France | IP ranges geographically assigned to France. | ★★⚝⚝⚝ | API Repo |
| French Guiana | IP ranges geographically assigned to French Guiana. | ★★⚝⚝⚝ | API Repo |
| French Polynesia | IP ranges geographically assigned to French Polynesia. | ⚝⚝⚝⚝⚝ | API Repo |
| French Southern Territories | IP ranges geographically assigned to the French Southern Territories. | ⚝⚝⚝⚝⚝ | API Repo |
| Gabon | IP ranges geographically assigned to Gabon. | ★★⚝⚝⚝ | API Repo |
| Gambia | IP ranges geographically assigned to Gambia. | ★★⚝⚝⚝ | API Repo |
| Georgia | IP ranges geographically assigned to Georgia. | ★★★⚝⚝ | API Repo |
| Germany | IP ranges geographically assigned to Germany. | ★★★⚝⚝ | API Repo |
| Ghana | IP ranges geographically assigned to Ghana. | ★★★★⚝ | API Repo |
| Gibraltar | IP ranges geographically assigned to Gibraltar. | ★⚝⚝⚝⚝ | API Repo |
| Great Britain | IP ranges geographically assigned to Great Britain. | ★★★★★ | API Repo |
| Greece | IP ranges geographically assigned to Greece. | ★★★⚝⚝ | API Repo |
| Greenland | IP ranges geographically assigned to Greenland. | ★⚝⚝⚝⚝ | API Repo |
| Grenada | IP ranges geographically assigned to Grenada. | ★⚝⚝⚝⚝ | API Repo |
| Guadeloupe | IP ranges geographically assigned to Guadeloupe. | ★⚝⚝⚝⚝ | API Repo |
| Guam | IP ranges geographically assigned to Guam. | ★⚝⚝⚝⚝ | API Repo |
| Guatemala | IP ranges geographically assigned to Guatemala. | ★★★⚝⚝ | API Repo |
| Guernsey | IP ranges geographically assigned to Guernsey. | ★⚝⚝⚝⚝ | API Repo |
| Guinea-Bissau | IP ranges geographically assigned to Guinea-Bissau. | ★★⚝⚝⚝ | API Repo |
| Guinea | IP ranges geographically assigned to Guinea. | ★★⚝⚝⚝ | API Repo |
| Guyana | IP ranges geographically assigned to Guyana. | ★★⚝⚝⚝ | API Repo |
| Haiti | IP ranges geographically assigned to Haiti. | ★★★⚝⚝ | API Repo |
| Heard Island and McDonald Islands | IP ranges geographically assigned to Heard Island and McDonald Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Honduras | IP ranges geographically assigned to Honduras. | ★★★⚝⚝ | API Repo |
| Hong Kong | IP ranges geographically assigned to Hong Kong. | ★★★★⚝ | API Repo |
| Hungary | IP ranges geographically assigned to Hungary. | ★★★⚝⚝ | API Repo |
| Iceland | IP ranges geographically assigned to Iceland. | ★⚝⚝⚝⚝ | API Repo |
| India | IP ranges geographically assigned to India. | ★★★★★ | API Repo |
| Indonesia | IP ranges geographically assigned to Indonesia. | ★★★★⚝ | API Repo |
| Iran | IP ranges geographically assigned to Iran. | ★★★★★ | API Repo |
| Iraq | IP ranges geographically assigned to Iraq. | ★★★★⚝ | API Repo |
| Ireland | IP ranges geographically assigned to Ireland. | ★★⚝⚝⚝ | API Repo |
| Isle of Man | IP ranges geographically assigned to the Isle of Man. | ⚝⚝⚝⚝⚝ | API Repo |
| Israel | IP ranges geographically assigned to Israel. | ★★★⚝⚝ | API Repo |
| Italy | IP ranges geographically assigned to Italy. | ★★★⚝⚝ | API Repo |
| Jamaica | IP ranges geographically assigned to Jamaica. | ★★★⚝⚝ | API Repo |
| Japan | IP ranges geographically assigned to Japan. | ★★★★⚝ | API Repo |
| Jersey | IP ranges geographically assigned to Jersey. | ★⚝⚝⚝⚝ | API Repo |
| Jordan | IP ranges geographically assigned to Jordan. | ★★⚝⚝⚝ | API Repo |
| Kazakhstan | IP ranges geographically assigned to Kazakhstan. | ★★★★⚝ | API Repo |
| Kenya | IP ranges geographically assigned to Kenya. | ★★★★⚝ | API Repo |
| Kiribati | IP ranges geographically assigned to Kiribati. | ⚝⚝⚝⚝⚝ | API Repo |
| Kosovo | IP ranges geographically assigned to Kosovo. | ★★⚝⚝⚝ | API Repo |
| Kuwait | IP ranges geographically assigned to Kuwait. | ★★⚝⚝⚝ | API Repo |
| Kyrgyzstan | IP ranges geographically assigned to Kyrgyzstan. | ★★★⚝⚝ | API Repo |
| Laos | IP ranges geographically assigned to Laos. | ★★⚝⚝⚝ | API Repo |
| Latvia | IP ranges geographically assigned to Latvia. | ★★★⚝⚝ | API Repo |
| Lebanon | IP ranges geographically assigned to Lebanon. | ★★★⚝⚝ | API Repo |
| Lesotho | IP ranges geographically assigned to Lesotho. | ★⚝⚝⚝⚝ | API Repo |
| Liberia | IP ranges geographically assigned to Liberia. | ★★⚝⚝⚝ | API Repo |
| Libya | IP ranges geographically assigned to Libya. | ★★★★⚝ | API Repo |
| Liechtenstein | IP ranges geographically assigned to Liechtenstein. | ⚝⚝⚝⚝⚝ | API Repo |
| Lithuania | IP ranges geographically assigned to Lithuania. | ★★⚝⚝⚝ | API Repo |
| Luxembourg | IP ranges geographically assigned to Luxembourg. | ★⚝⚝⚝⚝ | API Repo |
| Macao | IP ranges geographically assigned to Macao. | ★★⚝⚝⚝ | API Repo |
| North Macedonia | IP ranges geographically assigned to North Macedonia. | ★★⚝⚝⚝ | API Repo |
| Madagascar | IP ranges geographically assigned to Madagascar. | ★★⚝⚝⚝ | API Repo |
| Malawi | IP ranges geographically assigned to Malawi. | ★★★★⚝ | API Repo |
| Malaysia | IP ranges geographically assigned to Malaysia. | ★★★★★ | API Repo |
| Maldives | IP ranges geographically assigned to Maldives. | ★★★⚝⚝ | API Repo |
| Mali | IP ranges geographically assigned to Mali. | ★★★★⚝ | API Repo |
| Malta | IP ranges geographically assigned to Malta. | ★★★★⚝ | API Repo |
| Marshall Islands | IP ranges geographically assigned to the Marshall Islands. | ★⚝⚝⚝⚝ | API Repo |
| Martinique | IP ranges geographically assigned to Martinique. | ★⚝⚝⚝⚝ | API Repo |
| Mauritania | IP ranges geographically assigned to Mauritania. | ★⚝⚝⚝⚝ | API Repo |
| Mauritius | IP ranges geographically assigned to Mauritius. | ★★★⚝⚝ | API Repo |
| Mayotte | IP ranges geographically assigned to Mayotte. | ★⚝⚝⚝⚝ | API Repo |
| Mexico | IP ranges geographically assigned to Mexico. | ★★★⚝⚝ | API Repo |
| Micronesia | IP ranges geographically assigned to Micronesia. | ⚝⚝⚝⚝⚝ | API Repo |
| Monaco | IP ranges geographically assigned to Monaco. | ★⚝⚝⚝⚝ | API Repo |
| Mongolia | IP ranges geographically assigned to Mongolia. | ★★⚝⚝⚝ | API Repo |
| Montenegro | IP ranges geographically assigned to Montenegro. | ★★⚝⚝⚝ | API Repo |
| Montserrat | IP ranges geographically assigned to Montserrat. | ⚝⚝⚝⚝⚝ | API Repo |
| Morocco | IP ranges geographically assigned to Morocco. | ★★★⚝⚝ | API Repo |
| Mozambique | IP ranges geographically assigned to Mozambique. | ★★⚝⚝⚝ | API Repo |
| Myanmar | IP ranges geographically assigned to Myanmar. | ★★★★⚝ | API Repo |
| Namibia | IP ranges geographically assigned to Namibia. | ★★★⚝⚝ | API Repo |
| Nauru | IP ranges geographically assigned to Nauru. | ⚝⚝⚝⚝⚝ | API Repo |
| Nepal | IP ranges geographically assigned to Nepal. | ★★⚝⚝⚝ | API Repo |
| Netherlands | IP ranges geographically assigned to the Netherlands. | ★★★⚝⚝ | API Repo |
| New Caledonia | IP ranges geographically assigned to New Caledonia. | ★⚝⚝⚝⚝ | API Repo |
| New Zealand | IP ranges geographically assigned to New Zealand. | ★★⚝⚝⚝ | API Repo |
| Nicaragua | IP ranges geographically assigned to Nicaragua. | ★★⚝⚝⚝ | API Repo |
| Nigeria | IP ranges geographically assigned to Nigeria. | ★★★★★ | API Repo |
| Niger | IP ranges geographically assigned to Niger. | ★★⚝⚝⚝ | API Repo |
| Niue | IP ranges geographically assigned to Niue. | ⚝⚝⚝⚝⚝ | API Repo |
| Norfolk Island | IP ranges geographically assigned to Norfolk Island. | ★⚝⚝⚝⚝ | API Repo |
| Northern Mariana Islands | IP ranges geographically assigned to the Northern Mariana Islands. | ★⚝⚝⚝⚝ | API Repo |
| North Korea | IP ranges geographically assigned to North Korea. | ★★★★★ | API Repo |
| Norway | IP ranges geographically assigned to Norway. | ★★⚝⚝⚝ | API Repo |
| Oman | IP ranges geographically assigned to Oman. | ★★⚝⚝⚝ | API Repo |
| Pakistan | IP ranges geographically assigned to Pakistan. | ★★★★★ | API Repo |
| Palau | IP ranges geographically assigned to Palau. | ⚝⚝⚝⚝⚝ | API Repo |
| Palestine | IP ranges geographically assigned to Palestine. | ★★★⚝⚝ | API Repo |
| Panama | IP ranges geographically assigned to Panama. | ★★★⚝⚝ | API Repo |
| Papua New Guinea | IP ranges geographically assigned to Papua New Guinea. | ★★⚝⚝⚝ | API Repo |
| Paraguay | IP ranges geographically assigned to Paraguay. | ★★⚝⚝⚝ | API Repo |
| Peru | IP ranges geographically assigned to Peru. | ★★★⚝⚝ | API Repo |
| Philippines | IP ranges geographically assigned to the Philippines. | ★★★★⚝ | API Repo |
| Pitcairn Islands | IP ranges geographically assigned to the Pitcairn Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Poland | IP ranges geographically assigned to Poland. | ★★★⚝⚝ | API Repo |
| Portugal | IP ranges geographically assigned to Portugal. | ★★★⚝⚝ | API Repo |
| Puerto Rico | IP ranges geographically assigned to Puerto Rico. | ★★★⚝⚝ | API Repo |
| Qatar | IP ranges geographically assigned to Qatar. | ★★⚝⚝⚝ | API Repo |
| Moldova | IP ranges geographically assigned to Moldova. | ★★★★⚝ | API Repo |
| Réunion | IP ranges geographically assigned to Réunion. | ★⚝⚝⚝⚝ | API Repo |
| Romania | IP ranges geographically assigned to Romania. | ★★★★★ | API Repo |
| Russia | IP ranges geographically assigned to Russia. | ★★★★★ | API Repo |
| Rwanda | IP ranges geographically assigned to Rwanda. | ★★⚝⚝⚝ | API Repo |
| Saint Barthélemy | IP ranges geographically assigned to Saint Barthélemy. | ⚝⚝⚝⚝⚝ | API Repo |
| Saint Helena | IP ranges geographically assigned to Saint Helena. | ⚝⚝⚝⚝⚝ | API Repo |
| Saint Kitts and Nevis | IP ranges geographically assigned to Saint Kitts and Nevis. | ⚝⚝⚝⚝⚝ | API Repo |
| Saint Lucia | IP ranges geographically assigned to Saint Lucia. | ⚝⚝⚝⚝⚝ | API Repo |
| Saint Martin (North) | IP ranges geographically assigned to Saint Martin. | ★⚝⚝⚝⚝ | API Repo |
| Saint Pierre and Miquelon | IP ranges geographically assigned to Saint Pierre and Miquelon. | ⚝⚝⚝⚝⚝ | API Repo |
| Saint Vincent and the Grenadines | IP ranges geographically assigned to Saint Vincent and the Grenadines. | ⚝⚝⚝⚝⚝ | API Repo |
| Samoa | IP ranges geographically assigned to Samoa. | ★⚝⚝⚝⚝ | API Repo |
| San Marino | IP ranges geographically assigned to San Marino. | ⚝⚝⚝⚝⚝ | API Repo |
| São Tomé and Príncipe | IP ranges geographically assigned to São Tomé and Príncipe. | ★⚝⚝⚝⚝ | API Repo |
| Saudi Arabia | IP ranges geographically assigned to Saudi Arabia. | ★★★★⚝ | API Repo |
| Senegal | IP ranges geographically assigned to Senegal. | ★★⚝⚝⚝ | API Repo |
| Serbia | IP ranges geographically assigned to Serbia. | ★★★⚝⚝ | API Repo |
| Seychelles | IP ranges geographically assigned to Seychelles. | ★⚝⚝⚝⚝ | API Repo |
| Sierra Leone | IP ranges geographically assigned to Sierra Leone. | ★⚝⚝⚝⚝ | API Repo |
| Singapore | IP ranges geographically assigned to Singapore. | ★★★★⚝ | API Repo |
| Sint Maarten (South) | IP ranges geographically assigned to Sint Maarten. | ⚝⚝⚝⚝⚝ | API Repo |
| Slovakia | IP ranges geographically assigned to Slovakia. | ★★⚝⚝⚝ | API Repo |
| Slovenia | IP ranges geographically assigned to Slovenia. | ★★⚝⚝⚝ | API Repo |
| Solomon Islands | IP ranges geographically assigned to the Solomon Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Somalia | IP ranges geographically assigned to Somalia. | ★★★★★ | API Repo |
| South Africa | IP ranges geographically assigned to South Africa. | ★★★★⚝ | API Repo |
| South Georgia and the South Sandwich Islands | IP ranges geographically assigned to South Georgia and Sandwich Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| South Korea | IP ranges geographically assigned to South Korea. | ★★★⚝⚝ | API Repo |
| South Sudan | IP ranges geographically assigned to South Sudan. | ★★★⚝⚝ | API Repo |
| Spain | IP ranges geographically assigned to Spain. | ★★★★⚝ | API Repo |
| Sri Lanka | IP ranges geographically assigned to Sri Lanka. | ★★⚝⚝⚝ | API Repo |
| Sudan | IP ranges geographically assigned to Sudan. | ★★★★⚝ | API Repo |
| Suriname | IP ranges geographically assigned to Suriname. | ★⚝⚝⚝⚝ | API Repo |
| Svalbard and Jan Mayen | IP ranges geographically assigned to Svalbard and Jan Mayen. | ⚝⚝⚝⚝⚝ | API Repo |
| Sweden | IP ranges geographically assigned to Sweden. | ★★★⚝⚝ | API Repo |
| Switzerland | IP ranges geographically assigned to Switzerland. | ★★★⚝⚝ | API Repo |
| Syria | IP ranges geographically assigned to Syria. | ★★★★★ | API Repo |
| Taiwan | IP ranges geographically assigned to Taiwan. | ★★★★⚝ | API Repo |
| Tajikistan | IP ranges geographically assigned to Tajikistan. | ★★⚝⚝⚝ | API Repo |
| Tanzania | IP ranges geographically assigned to Tanzania. | ★★★⚝⚝ | API Repo |
| Thailand | IP ranges geographically assigned to Thailand. | ★★★⚝⚝ | API Repo |
| Timor-Leste | IP ranges geographically assigned to Timor-Leste. | ⚝⚝⚝⚝⚝ | API Repo |
| Togo | IP ranges geographically assigned to Togo. | ★★⚝⚝⚝ | API Repo |
| Tokelau | IP ranges geographically assigned to Tokelau. | ⚝⚝⚝⚝⚝ | API Repo |
| Tonga | IP ranges geographically assigned to Tonga. | ⚝⚝⚝⚝⚝ | API Repo |
| Trinidad and Tobago | IP ranges geographically assigned to Trinidad and Tobago. | ★⚝⚝⚝⚝ | API Repo |
| Tunisia | IP ranges geographically assigned to Tunisia. | ★★★⚝⚝ | API Repo |
| Turkey | IP ranges geographically assigned to Turkey. | ★★★⚝⚝ | API Repo |
| Turkmenistan | IP ranges geographically assigned to Turkmenistan. | ★★⚝⚝⚝ | API Repo |
| Turks and Caicos Islands | IP ranges geographically assigned to the Turks and Caicos Islands. | ⚝⚝⚝⚝⚝ | API Repo |
| Tuvalu | IP ranges geographically assigned to Tuvalu. | ⚝⚝⚝⚝⚝ | API Repo |
| Uganda | IP ranges geographically assigned to Uganda. | ★★⚝⚝⚝ | API Repo |
| Ukraine | IP ranges geographically assigned to Ukraine. | ★★★★★ | API Repo |
| United Arab Emirates | IP ranges geographically assigned to the United Arab Emirates. | ★★★⚝⚝ | API Repo |
| United States | IP ranges geographically assigned to the United States. | ★★★★★ | API Repo |
| US Minor Outlying Islands | IP ranges geographically assigned to the US Minor Outlying Islands. | ★⚝⚝⚝⚝ | API Repo |
| US Virgin Islands | IP ranges geographically assigned to the US Virgin Islands. | ★⚝⚝⚝⚝ | API Repo |
| Uruguay | IP ranges geographically assigned to Uruguay. | ★★⚝⚝⚝ | API Repo |
| Uzbekistan | IP ranges geographically assigned to Uzbekistan. | ★★★⚝⚝ | API Repo |
| Vanuatu | IP ranges geographically assigned to Vanuatu. | ⚝⚝⚝⚝⚝ | API Repo |
| Vatican City / Holy See | IP ranges geographically assigned to Vatican City. | ⚝⚝⚝⚝⚝ | API Repo |
| Venezuela | IP ranges geographically assigned to Venezuela. | ★★★⚝⚝ | API Repo |
| Vietnam | IP ranges geographically assigned to Vietnam. | ★★★⚝⚝ | API Repo |
| Wallis and Futuna | IP ranges geographically assigned to Wallis and Futuna. | ⚝⚝⚝⚝⚝ | API Repo |
| Western Sahara | IP ranges geographically assigned to Western Sahara. | ★⚝⚝⚝⚝ | API Repo |
| Yemen | IP ranges geographically assigned to Yemen. | ★★★⚝⚝ | API Repo |
| Zambia | IP ranges geographically assigned to Zambia. | ★★⚝⚝⚝ | API Repo |
| Zimbabwe | IP ranges geographically assigned to Zimbabwe. | ★★★⚝⚝ | API Repo |
The blocklists within this category are sourced from trusted third-party threat intelligence and reputation providers. These external feeds aggregate data from intrusion detection systems, abuse reports, malware analysis platforms, honeypots, spam traps, and global monitoring networks to identify IP addresses associated with malicious, abusive, or suspicious activity.
Because these blocklists are maintained externally, the contents may change frequently and can vary in accuracy, aggressiveness, and scope depending on the provider. While we validate and format these lists for compatibility and reliability, the underlying IP intelligence and classifications are managed by the original upstream maintainers.
| Set | Description | Severity | View |
|---|---|---|---|
| AlienVault Bad Reputation | Threat intelligence feed identifying IPs associated with malware distribution, botnets, scanning activity, and other malicious behavior. | ★★★★★ |
API Repo |
| BBcan177 MS1 Reputation Feed | Community-maintained abuse and intrusion reputation feed identifying malicious IPs observed engaging in scanning, brute-force, and exploit activity across public services. | ★★★★⚝ |
API Repo |
| BBcan177 MS3 High-Risk Feed | Expanded BBcan177 threat feed focusing on higher-confidence malicious infrastructure, including repeated attackers and persistent scanning sources. | ★★★★⚝ |
API Repo |
| BinaryDefense Blocklist | Actively maintained security blocklist focused on malware, brute-force attackers, exploit attempts, and known malicious infrastructure. | ★★★★★ |
API Repo |
| Bitwire Inbound Threat Feed | Inbound traffic reputation list identifying abusive sources targeting exposed services and infrastructure. | ★★★★⚝ |
API Repo |
| Bitwire Outbound Threat Feed | Outbound reputation dataset tracking compromised systems and malicious hosting activity used for attacks. | ★★★★⚝ |
API Repo |
| Blackhole (Today) | High-confidence IP reputation blocklist from Blackhole.Monster containing IP addresses observed engaging in abusive or malicious activity within the last 24 hours. | ★★★★⚝ |
API Repo |
| Blackhole (15 Day) | Medium-confidence IP reputation blocklist from Blackhole.Monster containing IP addresses observed within the last 15 days. | ★★★⚝⚝ |
API Repo |
| Blackhole (30 Day) | Low-confidence IP reputation blocklist from Blackhole.Monster containing IP addresses observed within the last 30 days. | ★★⚝⚝⚝ |
API Repo |
| Blackhole (All) | Aggregated IP reputation blocklist from Blackhole.Monster containing historical abusive and malicious IP addresses collected over time. | ⚝⚝⚝⚝⚝ |
API Repo |
| Blocklist.de Combined Feed | Aggregated abusive IP feed covering SSH, mail, web, and bot attacks sourced from intrusion detection systems. | ★★★★★ |
API Repo |
| Blocklist.de Apache Attacks | IP addresses involved in automated attacks and exploitation attempts targeting Apache web servers. | ★★★★⚝ |
API Repo |
| Blocklist.de Bot Attacks | Known bot networks engaging in scanning, scraping, and automated abuse of public services. | ★★★★⚝ |
API Repo |
| Blocklist.de Brute Force Attacks | IPs repeatedly attempting password brute-force attacks against exposed authentication services. | ★★★★★ |
API Repo |
| Blocklist.de FTP Attacks | Malicious sources targeting FTP services with credential stuffing and brute-force attempts. | ★★★★⚝ |
API Repo |
| Blocklist.de IMAP Attacks | IPs observed attempting unauthorized access to email systems via IMAP authentication attacks. | ★★★★⚝ |
API Repo |
| Blocklist.de IRC Botnets | Known IRC-based botnet infrastructure used for command-and-control and coordinated malicious activity. | ★★★★★ |
API Repo |
| Blocklist.de Long-Term Attackers | Persistent malicious IPs repeatedly involved in abuse, scanning, and exploit attempts over extended periods. | ★★★★★ |
API Repo |
| Blocklist.de Mail Attacks | IP addresses targeting mail servers with spam, relay abuse, and credential attacks. | ★★★★⚝ |
API Repo |
| Blocklist.de SIP Attacks | VoIP and SIP-based attack sources used for fraud, scanning, and unauthorized call attempts. | ★★★★⚝ |
API Repo |
| Blocklist.de SSH Attacks | Widely observed SSH brute-force and credential stuffing sources targeting exposed servers. | ★★★★★ |
API Repo |
| Botvrij Threat Intelligence IOC | Indicator-of-compromise feed identifying malware infrastructure, botnets, and active threat campaigns. | ★★★★★ |
API Repo |
| BruteForceBlocker Feed | Dedicated list of IPs repeatedly attempting automated password guessing and authentication abuse. | ★★★★★ |
API Repo |
| Collective Intelligence Network Security (CINS) | Subset of the CINS threat intelligence dataset containing IPs with poor reputation scores or repeated malicious activity observed across trusted global sensors. | ★★★★★ |
API Repo |
| DShield Global Attack Feed | Internet-wide attack telemetry aggregated from intrusion sensors identifying scanning and exploit attempts. | ★★★★⚝ |
API Repo |
| DShield Recommended Blocklist | Curated subset of DShield data highlighting high-confidence malicious and abusive IP addresses. | ★★★★⚝ |
API Repo |
| Emerging Threats | Threat intelligence feed identifying compromised systems and infected hosts observed participating in malicious activity, malware communication, botnet operations, or unauthorized network behavior. | ★★★★⚝ |
API Repo |
| Feodo Tracker (C&C) Recommended | Verified botnet C2 infrastructure with a low likelihood of false positives. Recommended for production use. | ★★★★⚝ |
API Repo |
| Feodo Tracker (IOCs) Normal | Botnet C2 IOC dataset containing additional tracked infrastructure and IPs active within the past 30 days. | ★★★⚝⚝ |
API Repo |
| Feodo Tracker (IOCs) Aggressive | Aggressive botnet C2 IOC dataset containing recycled or re-used malicious infrastructure with a higher false positive risk. | ★★⚝⚝⚝ |
API Repo |
| FireHOL Abusers (1 Day) | Recent abusive IPs observed within 24 hours performing scanning, brute-force, or exploit attempts. | ★★★★⚝ |
API Repo |
| FireHOL Abusers (30 Day) | Aggregated abusive sources observed over a 30-day window with repeated malicious behavior. | ★★★★⚝ |
API Repo |
| FireHOL Anonymous Proxies | Proxy and anonymization services commonly used to mask identity during scanning or abuse activity. | ★★★⚝⚝ |
API Repo |
| FireHOL Bitcoin Nodes (Now) | Publicly reachable Bitcoin network nodes collected from the BitNodes project. Includes hosts participating in the Bitcoin peer-to-peer network. | ★★★★⚝ |
API Repo |
| FireHOL Bitcoin Nodes (1 Day) | Publicly reachable Bitcoin network nodes collected from the BitNodes project. Includes hosts participating in the Bitcoin peer-to-peer network. | ★★★⚝⚝ |
API Repo |
| FireHOL Bitcoin Nodes (7 Day) | Publicly reachable Bitcoin network nodes collected from the BitNodes project. Includes hosts participating in the Bitcoin peer-to-peer network. | ★★⚝⚝⚝ |
API Repo |
| FireHOL Bitcoin Nodes (30 Day) | Publicly reachable Bitcoin network nodes collected from the BitNodes project. Includes hosts participating in the Bitcoin peer-to-peer network. | ★⚝⚝⚝⚝ |
API Repo |
| FireHOL BotScout Global Bot List | Database of known spam bots and automated systems used for account abuse and form submission attacks. | ★★★★⚝ |
API Repo |
| FireHOL BotScout Recent Bots (1 Day) | Recently detected bot activity involved in automated spam and abuse attempts. | ★★★★⚝ |
API Repo |
| FireHOL BotScout Extended Bots (30 Day) | Longer-term bot activity aggregation capturing persistent automated abuse sources. | ★★★★⚝ |
API Repo |
| FireHOL BotScout Weekly Bots | Short-term aggregation of bot activity used for spam, scraping, and automated attacks. | ★★★★⚝ |
API Repo |
| FireHOL Cybercrime Feed | General cybercrime infrastructure including malware hosts, phishing sources, and attack networks. | ★★★★★ |
API Repo |
| FireHOL DShield Aggregation | Combined intrusion detection data from global sensors tracking scanning and exploitation activity. | ★★★★⚝ |
API Repo |
| FireHOL DShield Recent Attacks (1 Day) | Latest detected malicious scanning and attack activity from distributed sensors. | ★★★★⚝ |
API Repo |
| FireHOL DShield Extended Attacks (30 Day) | Long-term aggregation of attack sources identified across global monitoring systems. | ★★★★⚝ |
API Repo |
| FireHOL DShield Weekly Attacks | Short-term attack aggregation identifying recent scanning and intrusion attempts. | ★★★★⚝ |
API Repo |
| FireHOL GreenSnow Abuse Feed | Community-driven list of malicious IPs involved in scanning, brute-force, and exploitation activity. | ★★★★⚝ |
API Repo |
| FireHOL Level 1 (Low Risk) | Broad low-confidence threat list including general abuse indicators and low-reputation IPs. | ★★⚝⚝⚝ |
API Repo |
| FireHOL Level 2 (Medium Risk) | Moderate confidence malicious sources including repeat scanners and abusive networks. | ★★★⚝⚝ |
API Repo |
| FireHOL Level 3 (High Risk) | High-confidence malicious IPs with repeated abuse or confirmed attack behavior. | ★★★★⚝ |
API Repo |
| FireHOL Level 4 (Critical Risk) | Highly malicious infrastructure strongly associated with botnets, malware, and active exploitation. | ★★★★★ |
API Repo |
| FireHOL Proxy Networks | Known proxy services used to anonymize traffic and facilitate abuse or evasion activities. | ★★★⚝⚝ |
API Repo |
| FireHOL SBLAM Spam Feed | Spam and botnet-related IP feed identifying sources involved in email and web spam campaigns. | ★★★★⚝ |
API Repo |
| FireHOL Web Client Abuse | Abusive automated web clients engaged in scraping, scanning, or exploitation attempts. | ★★★⚝⚝ |
API Repo |
| FireHOL Web Server Abuse | Compromised or malicious web servers used for hosting malware, phishing, or exploit payloads. | ★★★★⚝ |
API Repo |
| GreenSnow Global Blocklist | Widely used community threat feed tracking brute-force attackers and scanning infrastructure. | ★★★★⚝ |
API Repo |
| HaGeZi Threat Intelligence | Curated threat intelligence feed covering malware, phishing, trackers, and abusive infrastructure. | ★★★★★ |
API Repo |
| Ipsum Threat (Level 1) | IPSum aggregated threat intelligence from multiple sources. Lowest confidence. Highest false-positive rate. Contains IPs seen in 1 blacklist. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
⚝⚝⚝⚝⚝ |
API Repo |
| Ipsum Threat (Level 2) | IPSum aggregated threat intelligence from multiple sources. Low confidence. Contains IPs seen in 2 blacklists. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
★⚝⚝⚝⚝ |
API Repo |
| Ipsum Threat (Level 3) | IPSum aggregated threat intelligence from multiple sources. Moderate-low confidence. Contains IPs seen in 3 blacklists. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
★★⚝⚝⚝ |
API Repo |
| Ipsum Threat (Level 4) | IPSum aggregated threat intelligence from multiple sources. Moderate confidence. Contains IPs seen in 4 blacklists. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
★★★⚝⚝ |
API Repo |
| Ipsum Threat (Level 5) | IPSum aggregated threat intelligence from multiple sources. Moderate confidence. Contains IPs seen in 5 blacklists. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
★★★⚝⚝ |
API Repo |
| Ipsum Threat (Level 6) | IPSum aggregated threat intelligence from multiple sources. High confidence. Contains IPs seen in 6 blacklists. Includes 1, 2, 3, 4, 5, 6, 7, 8 |
★★★★⚝ |
API Repo |
| Ipsum Threat (Level 7) | IPSum aggregated threat intelligence from multiple sources. Very high confidence. Contains IPs seen in 7 blacklists. |
★★★★⚝ |
API Repo |
| Ipsum Threat (Level 8) | IPSum aggregated threat intelligence from multiple sources. Highest confidence. Lowest false-positive rate. Contains IPs seen in 8 blacklists. |
★★★★★ |
API Repo |
| LinuxTracker Abuse List | Reputation-based list of IPs associated with abuse and suspicious activity on public tracker infrastructure. | ★★★⚝⚝ |
API Repo |
| Multiduplikator Core | Pre-aggregated blocklists optimized for MikroTik routers. List includes Tor Exit Nodes, Spamhaus DROP, SSL Blacklist, Blocklist.de, Feodo Tracker, FireHOL Level 1, IPsum Level 3 |
★★★★⚝ |
API Repo |
| Multiduplikator Large | Pre-aggregated blocklists optimized for MikroTik routers. Contains Core list + CINS Army. List includes Tor Exit Nodes, Spamhaus DROP, SSL Blacklist, Blocklist.de, Feodo Tracker, FireHOL Level 1, IPsum Level 3, CINS Army |
★★★⚝⚝ |
API Repo |
| Multiduplikator Extra Large | Pre-aggregated blocklists optimized for MikroTik routers. Contains Core list + Large list + IPsum L1. List includes Tor Exit Nodes, Spamhaus DROP, SSL Blacklist, Blocklist.de, Feodo Tracker, FireHOL Level 1, IPsum Level 3, CINS Army, IPsum Level 1 |
★★⚝⚝⚝ |
API Repo |
| MyIP.ms ConfigServer Feed | Curated subset optimized for firewall integration targeting abusive hosting and scanning sources. | ★★★⚝⚝ |
API Repo |
| MyIP.ms Full Dataset | Comprehensive reputation dataset including hosting intelligence and abusive infrastructure classifications. | ★★★⚝⚝ |
API Repo |
| MyIP.ms General Abuse List | General-purpose abuse list identifying suspicious hosting providers and malicious IP activity. | ★★★⚝⚝ |
API Repo |
| MyIP.ms Global Blocklist | Aggregated IP reputation dataset derived from hosting intelligence and user reports identifying suspicious hosting providers and abusive networks. | ★★★⚝⚝ |
API Repo |
| MyIP.ms HTAccess Blocklist | Web server focused IP blocklist designed for .htaccess integration and HTTP filtering. | ★★★⚝⚝ |
API Repo |
| MyIP.ms Web Crawlers | List of known crawlers and automated agents including both benign and aggressive scraping systems. | ★★⚝⚝⚝ |
API Repo |
| Rutgers Threat Research Feed | Academic threat intelligence feed containing research-identified malicious and scanning IP activity. | ★★★★⚝ |
API Repo |
| SBLAM Spam Blocklist | Spam-focused IP reputation list identifying sources involved in bulk email abuse and bot activity. | ★★★★⚝ |
API Repo |
| Sekuripy SSH Bruteforce | IP addresses identified by Sekuripy as sources of SSH brute-force attacks and unauthorized login attempts against exposed SSH services. | ★★★★⚝ |
API Repo |
| Sentinel Turris Greylist | Greylist identifying IP addresses observed performing suspicious activity such as scanning, brute-force attempts, and abuse against services including HTTP, SMTP, FTP, and Telnet | ★★★⚝⚝ |
API Repo |
To view a full listing of the blocklists we offer; visit our API here.
If you need additional help apart from this README; use the following pages as references:
We are always looking for contributors. If you feel that you can provide something useful to Gistr, then we'd love to review your suggestion. Before submitting your contribution, please review the following resources:
Want to help but can't write code?
- Review active questions by our community and answer the ones you know.
The following people have helped get this project going:
