IDS

Blocklists for Suricata / IDS

Intrusion detection systems can read IP reputation lists as datasets.

135compatible lists
1supported formats
10categories

Adding a blocklist to Suricata / IDS

curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txt

Reference the file from a rule using a dataset:

alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match"; 
  ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)

The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.

By topic

All 135 lists for Suricata / IDS

Submit a list
135 lists < 7 days < 30 days older

Filter list covering malware. Format: IPs (IPv4).

Malware IP / CIDR
59.2k entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4).

Malware IP / CIDR
196 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4).

Malware IP / CIDR
24.8k entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering phishing. Format: IPs (IPv4).

Phishing IP / CIDR
293 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering phishing. Format: IPs (IPv4).

Phishing IP / CIDR
2,474 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering privacy. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Privacy IP / CIDR
14 entries
±0 last change
updated
FHIPSMTWRTOPN+3

IP Entries from Adblock Lists

by Imre Kristoffer Eilertsen

Filter list covering ads. Format: IPs (IPv4). Maintained by Imre Kristoffer Eilertsen. See the project homepage for details and inclusion […]

Ads IP / CIDR
220 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
7,743 entries
+3,447 -2,188 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
3,353 entries
+1,460 -774 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
864 entries
+539 -308 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
5,513 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
2,033 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
2,423 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
8,649 entries
+0 -1 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
2,179 entries
+1 -0 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
2,660 entries
+1 -0 last change
updated
FHIPSMTWRTOPN+3

Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.

Comprehensive IP / CIDR
620 entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
53 entries
+9 -24 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering ads, privacy. Format: Socks5. See the project homepage for details and inclusion criteria.

Ads Privacy IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3

Filter list covering malware. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.

Malware IP / CIDR
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Page 3 of 6
Scroll to Top