IDS

Blocklists for Suricata / IDS

Intrusion detection systems can read IP reputation lists as datasets.

124compatible lists
1supported formats
10categories
Browse lists Setup guide Official documentation

Adding a blocklist to Suricata / IDS 

curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txt

Reference the file from a rule using a dataset:

alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match"; 
  ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)

The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.

By topic

Malware 53 Comprehensive 28 Ads 24 Privacy 20 Security 12 Phishing 10 Allowlist 3 Adult content 2 Annoyances 1 Cryptomining 1

All 124 lists for Suricata / IDS

Submit a list
124 lists < 7 days < 30 days older

ADgk Mobile Advertising Rules (DNS)

Filter list covering ads. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

AdGuard DNS — Family Protection

Filter list covering ads, privacy, nsfw. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads Adult content Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

AdGuard DNS — Standard

Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

anti-AD (Surge)

Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.

Ads Privacy IP / CIDR
101.0k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

BlahDNS

Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Ads Malware Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

block-doh (IPv4 IPs)

Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
25 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

block-doh (IPv6 IPs)

Filter list from the public FilterLists directory. Format: IPs (IPv6). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
21 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

BlockConvert (IPs)

Filter list covering crypto, ads, privacy, malware, phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Ads Cryptomining Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

BlocklistDE All

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
29.5k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Bobz Entertainment

Filter list covering proxy. Format: DNS servers. See the project homepage for details and inclusion criteria.

Security IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Chinaroute (IPv4)

Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
6,120 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Chinaroute (IPv6)

Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

ChongLuaDao Phishing Blocklist (IPs)

by Wu Tingfeng

Filter list covering phishing. Format: IPs (IPv4). Maintained by Wu Tingfeng. See the project homepage for details and inclusion criteria.

Phishing IP / CIDR
4 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CINS Army Bad Guys

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
15.0k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CleanBrowsing Security Filter

Filter list covering malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Cloudflare DNS – Malware Blocking

Filter list covering malware. Format: DNS servers. See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CPBL CIDR (IPv4)

by Chon Bongo

Filter list covering privacy, malware. Format: CIDRs (IPv4). Maintained by Chon Bongo. See the project homepage for details and inclusion […]

Malware Privacy IP / CIDR
60.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CPBL IP Filter (DAT-format, IPv4)

by Chon Bongo

Filter list covering privacy. Format: IPs (Start-end-range). Maintained by Chon Bongo. See the project homepage for details and inclusion criteria.

Privacy IP / CIDR
60.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

CPBL IP Filter (P2P-format, IPv4)

by Chon Bongo

Filter list covering privacy. Format: IPs (Start-end-range). Maintained by Chon Bongo. See the project homepage for details and inclusion criteria.

Privacy IP / CIDR
60.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details

Dandelion Sprout’s and other adblocker lists’ IPs

by Imre Kristoffer Eilertsen

Filter list covering ads, phishing. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and […]

Ads Phishing IP / CIDR
879 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Details
Page 1 of 6
Scroll to Top