IPS

Blocklists for iptables / ipset

Classic Linux firewall setup: load the addresses into an ipset and drop matching traffic.

55compatible lists
1supported formats
10categories
Browse lists Setup guide Official documentation

Adding a blocklist to iptables / ipset 

ipset create blocklist hash:net -exist
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' | 
  while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT  -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP

Persist the set and re-run the download from cron to keep it current:

ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist

The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.

By topic

Malware 55 Comprehensive 28 Ads 24 Privacy 21 Security 18 Phishing 10 Allowlist 5 Adult content 2 Annoyances 1 Cryptomining 1

All 55 lists for iptables / ipset

Submit a list
55 lists < 7 days < 30 days older

BlahDNS

Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads Malware Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

BlockConvert (IPs)

Filter list covering crypto, ads, privacy, malware, phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Ads Cryptomining Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

BlocklistDE All

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
28.4k entries
+1,422 -2,580 last change
updated
FHIPSMTWRTOPN+3
Details

CINS Army Bad Guys

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
15.0k entries
+6,046 -6,046 last change
updated
FHIPSMTWRTOPN+3
Details

CleanBrowsing Security Filter

Filter list covering malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Cloudflare DNS – Malware Blocking

Filter list covering malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CPBL CIDR (IPv4)

by Chon Bongo

Filter list covering privacy, malware. Format: CIDRs (IPv4). Maintained by Chon Bongo. See the project homepage for details and inclusion […]

Malware Privacy IP / CIDR
60.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Dandelion Sprout’s Official DNS Server

by Imre Kristoffer Eilertsen

Filter list covering ads, malware, phishing, cookies, push-notes. Format: DNS servers. Maintained by Imre Kristoffer Eilertsen. See the project homepage […]

Ads Annoyances Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

DangerRulezSK Brute Force Blocker

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
566 entries
+4 -5 last change
updated
FHIPSMTWRTOPN+3
Details

DShield.org Recommended Block List

by DShield

Filter list covering malware. Format: IPs (Start-end-range). Maintained by DShield. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
20 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

EmergingThreats Block IPs

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
1,732 entries
+11 -7 last change
updated
FHIPSMTWRTOPN+3
Details

EmergingThreats Compromised IPs

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
564 entries
+37 -17 last change
updated
FHIPSMTWRTOPN+3
Details

Energized IP Extension

by Team Boltz

Filter list covering malware. Format: IPs (IPv4). Maintained by Team Boltz. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Firehol Level 1

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
4,658 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Firehol Level 2

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
23.3k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Firehol Level 3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
13.2k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

gnX Threat Intelligence

by gnxsecurity

Filter list covering malware. Format: IPs (IPv4). Maintained by gnxsecurity. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
129.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Greensnow Blocklist

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
4,467 entries
+533 -501 last change
updated
FHIPSMTWRTOPN+3
Details

hpHosts EMD (IPs)

Filter list covering malware. Format: IPs (IPv4).

Malware IP / CIDR
59.2k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

hpHosts EXP (IPs)

Filter list covering malware. Format: IPs (IPv4).

Malware IP / CIDR
196 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details
Page 1 of 3
Scroll to Top