Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
157.0k entries
+8 -2 last change
updated
FHIPSMTWRTOPN+3
IDS
Blocklists for Suricata / IDS
Intrusion detection systems can read IP reputation lists as datasets.
135compatible lists
1supported formats
10categories
Adding a blocklist to Suricata / IDS
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for Suricata / IDS
By topic
All 135 lists for Suricata / IDS
Category
135 lists < 7 days < 30 days older
CPBL IP Filter (P2P-format, IPv4)
by Chon Bongo
Filter list covering privacy. Format: IPs (Start-end-range). Maintained by Chon Bongo. See the project homepage for details and inclusion criteria.
60.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Dandelion Sprout’s and other adblocker lists’ IPs
by Imre Kristoffer Eilertsen
Filter list covering ads, phishing. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and […]
879 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Dandelion Sprout’s Disallowed Clients for AdGuard Home in Particular
by Imre Kristoffer Eilertsen
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for […]
9,379 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Dandelion Sprout’s Nordic Filters for Tidier Websites (for Shadowsocks)
by Imre Kristoffer Eilertsen
Filter list covering ads, malware. Format: Socks5. Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and inclusion […]
673 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Dandelion Sprout’s Official DNS Server
by Imre Kristoffer Eilertsen
Filter list covering ads, malware, phishing, cookies, push-notes. Format: DNS servers. Maintained by Imre Kristoffer Eilertsen. See the project homepage […]
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
566 entries
+4 -5 last change
updated
FHIPSMTWRTOPN+3
Address ranges belonging to data centres and hosting providers.
43.0k entries
±0 last change
updated
FHIPSMTWRTOPN+2
Filter list covering proxy. Format: DNS servers. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
The networks attacking most right now, a very short list.
20 entries
±0 last change
updated
FHIPSMTWRTOPN+2
DShield.org Recommended Block List
by DShield
Filter list covering malware. Format: IPs (Start-end-range). Maintained by DShield. See the project homepage for details and inclusion criteria.
20 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
1,732 entries
+11 -7 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
564 entries
+37 -17 last change
updated
FHIPSMTWRTOPN+3
Energized IP Extension
by Team Boltz
Filter list covering malware. Format: IPs (IPv4). Maintained by Team Boltz. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Live command servers of banking malware.
5 entries
±0 last change
updated
FHIPSMTWRTOPN+2
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
4,658 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
23.3k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
13.2k entries
±0 last change
updated
FHIPSMTWRTOPN+3
gnX Threat Intelligence
by gnxsecurity
Filter list covering malware. Format: IPs (IPv4). Maintained by gnxsecurity. See the project homepage for details and inclusion criteria.
129.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering proxy. Format: Socks5. See the project homepage for details and inclusion criteria.
16.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
4,467 entries
+533 -501 last change
updated
FHIPSMTWRTOPN+3
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
4,401 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering ads. Format: DNS servers. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering ads, privacy. Format: DNS servers. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering ads, privacy. Format: IPs (IPv4).
13.0k entries
±0 last change
updated
FHIPSMTWRTOPN+3