IPS

Blocklists for iptables / ipset

Classic Linux firewall setup: load the addresses into an ipset and drop matching traffic.

55compatible lists
1supported formats
10categories
Browse lists Setup guide Official documentation

Adding a blocklist to iptables / ipset 

ipset create blocklist hash:net -exist
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' | 
  while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT  -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP

Persist the set and re-run the download from cron to keep it current:

ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist

The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.

By topic

Malware 55 Comprehensive 28 Ads 24 Privacy 21 Security 18 Phishing 10 Allowlist 5 Adult content 2 Annoyances 1 Cryptomining 1

All 55 lists for iptables / ipset

Submit a list
55 lists < 7 days < 30 days older

Spamhaus DROP

Network ranges controlled by criminals or taken over by fraud.

Malware IP / CIDR
1,607 entries
±0 last change
updated
FHIPSMTWRTOPN+2
Details

Spamhaus Extended DROP List (EDROP)

Filter list covering malware. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
322 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Spamhaus IPv6 DROP List (DROPv6)

Filter list covering malware. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
51 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Threat Sourcing IP Addresses

by Threat Sourcing

Filter list covering malware. Format: IPs (IPv4). Maintained by Threat Sourcing. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

urlhaus-filter (dnscrypt-proxy IPs)

by Ming Di Leom

Filter list covering malware. Format: IPs (IPv4). Maintained by Ming Di Leom. See the project homepage for details and inclusion […]

Malware IP / CIDR
1,395 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Vladimir Pissarev’s DNS Server

Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads Malware Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details
Page 3 of 3
Scroll to Top