Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
Blocklists for Suricata / IDS
Intrusion detection systems can read IP reputation lists as datasets.
Adding a blocklist to Suricata / IDS
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txt Reference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for Suricata / IDS
By topic
All 21 lists for Suricata / IDS
Filter list covering ads, privacy, nsfw. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering crypto, ads, privacy, malware, phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
CPBL CIDR (IPv4)
Filter list covering privacy, malware. Format: CIDRs (IPv4). Maintained by Chon Bongo. See the project homepage for details and inclusion […]
CPBL IP Filter (DAT-format, IPv4)
Filter list covering privacy. Format: IPs (Start-end-range). Maintained by Chon Bongo. See the project homepage for details and inclusion criteria.
CPBL IP Filter (P2P-format, IPv4)
Filter list covering privacy. Format: IPs (Start-end-range). Maintained by Chon Bongo. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: IPs (IPv4).
Filter list covering privacy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
noads.online AdGuard Home Megalist (DNS)
Filter list covering ads, privacy, malware. Format: DNS servers. Maintained by deletescape. See the project homepage for details and inclusion […]
Peter Lowe’s List (IPs)
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Peter Lowe. See the project homepage for details and inclusion […]
Filter list covering ads, privacy, proxy. Format: Socks5.
Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.
ShadowWhisperer – Other Trackers
Filter list covering privacy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
The Hosts File Project IPs
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Andy Short. See the project homepage for details and inclusion […]
Ultimate Hosts Blacklist (IPs)
Filter list covering privacy. Format: IPs (IPv4). Maintained by mitchellkrogza. See the project homepage for details and inclusion criteria.
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
Address ranges of well known commercial VPN providers.
