Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
157.0k entries
+19 -6 last change
updated
FHIPSMTWRTOPN+3
IDS
Blocklists for Suricata / IDS
Intrusion detection systems can read IP reputation lists as datasets.
135compatible lists
1supported formats
10categories
Adding a blocklist to Suricata / IDS
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for Suricata / IDS
By topic
All 135 lists for Suricata / IDS
Category
135 lists < 7 days < 30 days older
Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
157.0k entries
+19 -6 last change
updated
FHIPSMTWRTOPN+3
The Hosts File Project IPs
by Andy Short
Filter list covering ads, privacy. Format: IPs (IPv4). Maintained by Andy Short. See the project homepage for details and inclusion […]
17.2k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Threat Sourcing IP Addresses
by Threat Sourcing
Filter list covering malware. Format: IPs (IPv4). Maintained by Threat Sourcing. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
148 entries
±0 last change
updated
FHIPSMTWRTOPN+3
The official list of Tor exit nodes, maintained by the Tor Project.
1,341 entries
±0 last change
updated
FHIPSMTWRTOPN+2
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
8,054 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering proxy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
1,746 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Every Tor node, not only the exits.
9,721 entries
+0 -7 last change
updated
FHIPSMTWRTOPN+2
Filter list covering phishing. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
96.0k entries
±0 last change
updated
FHIPSMTWRTOPN+3
Ultimate Hosts Blacklist (IPs)
by mitchellkrogza
Filter list covering privacy. Format: IPs (IPv4). Maintained by mitchellkrogza. See the project homepage for details and inclusion criteria.
148.8k entries
+5 -4 last change
updated
FHIPSMTWRTOPN+3
urlhaus-filter (dnscrypt-proxy IPs)
by Ming Di Leom
Filter list covering malware. Format: IPs (IPv4). Maintained by Ming Di Leom. See the project homepage for details and inclusion […]
1,345 entries
+149 -199 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering ads, privacy, malware. Format: DNS servers. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Address ranges of well known commercial VPN providers.
10.9k entries
±0 last change
updated
FHIPSMTWRTOPN+2
Previous Page 6 of 6