Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Blocklists for Suricata / IDS
Intrusion detection systems can read IP reputation lists as datasets.
Adding a blocklist to Suricata / IDS
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txt Reference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for Suricata / IDS
By topic
All 24 lists for Suricata / IDS
Filter list covering ads. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, nsfw. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering crypto, ads, privacy, malware, phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Dandelion Sprout’s and other adblocker lists’ IPs
Filter list covering ads, phishing. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and […]
Dandelion Sprout’s Nordic Filters for Tidier Websites (for Shadowsocks)
Filter list covering ads, malware. Format: Socks5. Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and inclusion […]
Dandelion Sprout’s Official DNS Server
Filter list covering ads, malware, phishing, cookies, push-notes. Format: DNS servers. Maintained by Imre Kristoffer Eilertsen. See the project homepage […]
Filter list covering ads. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: IPs (IPv4).
IP Entries from Adblock Lists
Filter list covering ads. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and inclusion […]
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
noads.online AdGuard Home Megalist (DNS)
Filter list covering ads, privacy, malware. Format: DNS servers. Maintained by deletescape. See the project homepage for details and inclusion […]
Filter list covering ads, proxy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering ads. Format: DNS servers. See the project homepage for details and inclusion criteria.
Peter Lowe’s List (IPs)
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Peter Lowe. See the project homepage for details and inclusion […]
Filter list covering ads, privacy, proxy. Format: Socks5.
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Other Ads
Filter list covering ads. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
Filter list covering ads. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
The Hosts File Project IPs
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Andy Short. See the project homepage for details and inclusion […]
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
