Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Blocklists for iptables / ipset
Classic Linux firewall setup: load the addresses into an ipset and drop matching traffic.
Adding a blocklist to iptables / ipset
ipset create blocklist hash:net -exist
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP Persist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for iptables / ipset
By topic
All 18 lists for iptables / ipset
Only addresses rated at full confidence within the last 30 days.
Filter list covering proxy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Address ranges belonging to data centres and hosting providers.
Filter list covering proxy. Format: DNS servers. See the project homepage for details and inclusion criteria.
The networks attacking most right now, a very short list.
Filter list covering proxy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering ads, proxy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering proxy. Format: DNS servers.
Filter list covering proxy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering proxy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, proxy. Format: Socks5.
ShadowWhisperer – Other Tunnel
Filter list covering proxy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
Ranges that produce almost nothing but spam sign-ups.
The official list of Tor exit nodes, maintained by the Tor Project.
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Every Tor node, not only the exits.
