This project provides aggregated IP blocklists for inbound and outbound traffic, updated every 2 hours. It includes exclusions for major public DNS resolvers to prevent legitimate services from being blocked.

• Inbound Blocklist: 2,689,671 networks/IPs covering 22,192,869 individual IP addresses
• Outbound Blocklist: 151,588 networks/IPs covering 154,495 individual IP addresses
• Total Coverage: 22,347,364 individual IP addresses

These are standard text files and can be used with most modern firewalls, ad-blockers, and security tools.

• What it is: A list of IPs/networks with a bad reputation for initiating malicious connections. This includes sources of spam, scanning, brute-force attacks (SSH, RDP), and web exploits.
• Use Case: Protect your public-facing servers and services (web servers, mail servers, game servers, etc.).
• How to use: Apply this list to your firewall's WAN IN or INPUT chain to DROP or REJECT all incoming traffic from these sources.

• What it is: A list of known malicious destination IPs. This includes C2 (Command & Control) servers, botnet controllers, malware drop sites, and phishing hosts.
• Use Case: Prevent compromised devices on your internal network (like a laptop or IoT device) from contacting malicious servers.
• How to use: Apply this list to your firewall's LAN OUT or OUTPUT chain to BLOCK or LOG all outgoing traffic to these destinations.

🪨 borestad • foundational blocklists

🚀 Code contributions

• David
• Garrett Laman

❤️ Our sponsors • making this project possible

• mraxu
• Hareen
• Alexandru Balmus
• blockstreamtechnologies.llc

This blocklist is aggregated from the following reputable sources:

• borestad/blocklist-abuseipdb
• borestad/firehol-mirror
• stamparm/ipsum
• ShadowWhisperer/IPs
• romainmarcoux/malicious-ip
• romainmarcoux/malicious-outgoing-ip
• elliotwutingfeng/ThreatFox-IOC-IPs
• binarydefense.com
• bruteforceblocker.com
• darklist.de
• dan.me.uk Tor List
• Emerging Threats
• Spamhaus DROP
• CINSscore
• Talos Intelligence
• CriticalPathSecurity
• C2 Tracker

This README is automatically updated by the update script on 2025-11-18 08:30:57 UTC.