Filter list from the public FilterLists directory. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
157.0k entries
+19 -6 last change
updated
FHIPSMTWRTOPN+3
IDS
Blocklists for Suricata / IDS
Intrusion detection systems can read IP reputation lists as datasets.
135compatible lists
1supported formats
10categories
Adding a blocklist to Suricata / IDS
curl -fsSL "https://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"Team Cymru Fullbogons (IPv6) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)The address shown above is an example. Every list in the directory has its own URL, which you can copy with one click.
Recommended lists for Suricata / IDS
By topic
All 135 lists for Suricata / IDS
Category
135 lists < 7 days < 30 days older
ShadowWhisperer – BruteForce Extreme
by ShadowWhisperer
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – BruteForce High
by ShadowWhisperer
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – BruteForce Low
by ShadowWhisperer
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – BruteForce Medium
by ShadowWhisperer
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and […]
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Malware Browser
by ShadowWhisperer
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Malware Hackers
by ShadowWhisperer
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Malware Hackers_Old
by ShadowWhisperer
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Malware Hosting
by ShadowWhisperer
Filter list covering malware. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Other Ads
by ShadowWhisperer
Filter list covering ads. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Other Trackers
by ShadowWhisperer
Filter list covering privacy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
ShadowWhisperer – Other Tunnel
by ShadowWhisperer
Filter list covering proxy. Format: IPs (IPv4). Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
- entries
±0 last change
updated
FHIPSMTWRTOPN+3
Shub’s Whitelist
by DevShubam
Filter list covering allowlist. Format: IPs (IPv4). Maintained by DevShubam. See the project homepage for details and inclusion criteria.
114 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
989 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Network ranges controlled by criminals or taken over by fraud.
1,607 entries
±0 last change
updated
FHIPSMTWRTOPN+2
Filter list covering malware. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
322 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering malware. Format: CIDRs (IPv6). See the project homepage for details and inclusion criteria.
51 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
17.4k entries
±0 last change
updated
FHIPSMTWRTOPN+3
StopForumSpam
by StopForumSpam.com
Filter list from the public FilterLists directory. Format: IPs (IPv4). Maintained by StopForumSpam.com. See the project homepage for details and […]
52.7k entries
+1,382 -1,510 last change
updated
FHIPSMTWRTOPN+3
Ranges that produce almost nothing but spam sign-ups.
60 entries
±0 last change
updated
FHIPSMTWRTOPN+2
Filter list from the public FilterLists directory. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
1,361 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list covering ads. Format: IPs (IPv4). See the project homepage for details and inclusion criteria.
29 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Syncthing Relay Server IPs
by Wu Tingfeng
Filter list covering allowlist. Format: IPs (IPv4). Maintained by Wu Tingfeng. See the project homepage for details and inclusion criteria.
100 entries
+90 -90 last change
updated
FHIPSMTWRTOPN+3
Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
13 entries
±0 last change
updated
FHIPSMTWRTOPN+3
Filter list from the public FilterLists directory. Format: CIDRs (IPv4). See the project homepage for details and inclusion criteria.
3,042 entries
+0 -1 last change
updated
FHIPSMTWRTOPN+3