Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Blocklists for iptables / ipset
Classic Linux firewall setup: load the addresses into an ipset and drop matching traffic.
Adding a blocklist to iptables / ipset
ipset create blocklist hash:net -exist
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROP Persist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for iptables / ipset
By topic
All 135 lists for iptables / ipset
ShadowWhisperer – BruteForce Extreme
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
ShadowWhisperer – BruteForce High
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
ShadowWhisperer – BruteForce Low
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
ShadowWhisperer – BruteForce Medium
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
ShadowWhisperer – Malware Browser
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Malware Hackers
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Malware Hackers_Old
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Malware Hosting
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Other Ads
Filter list covering ads. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Other Trackers
Filter list covering privacy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Other Tunnel
Filter list covering proxy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
Shub’s Whitelist
Filter list covering allowlist. Format: IPs (IPv4). Maintained by DevShubam. See the project homepage for details and inclusion criteria.
Filter list covering malware. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
Network ranges controlled by criminals or taken over by fraud.
Filter list covering malware. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering malware. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
StopForumSpam
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by StopForumSpam.com. See the project homepage for details and […]
Ranges that produce almost nothing but spam sign-ups.
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering ads. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Syncthing Relay Server IPs
Filter list covering allowlist. Format: IPs (IPv4). Maintained by Wu Tingfeng. See the project homepage for details and inclusion criteria.
Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
