Robot
/
blocklist-ipsets
mirror of https://github.com/firehol/blocklist-ipsets.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Wed Jan 23 11:24:25 UTC 2019 update

This commit is contained in:
Costa Tsaousis 2019-01-20 06:31:13 +00:00
commit 20b4eb4171
1464 changed files with 6925006 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

106
.gitignore vendored Normal file
View File

@ -0,0 +1,106 @@
bogons.netset
.cache
.cache.old
dragon_http.netset
dragon_*.ipset
dragon_*.netset
dragon_sshpauth.netset
dragon_vncprobe.netset
dronebl_anonymizers.netset
dronebl_auto_botnets.netset
dronebl_autorooting_worms.netset
dronebl_compromised.netset
dronebl_ddos_drones.netset
dronebl_dns_mx_on_irc.netset
dronebl_*.ipset
dronebl_irc_drones.netset
dronebl_*.netset
dronebl_unknown.netset
dronebl_worms_bots.netset
errors/
fullbogons.netset
history/
ib_*.ipset
iblocklist_ads.netset
iblocklist_ads.*set
iblocklist_badpeers.ipset
iblocklist_badpeers.*set
iblocklist_bogons.netset
iblocklist_bogons.*set
iblocklist_dshield.netset
iblocklist_dshield.*set
iblocklist_edu.netset
iblocklist_edu.*set
iblocklist_exclusions.netset
iblocklist_exclusions.*set
iblocklist_fornonlancomputers.netset
iblocklist_fornonlancomputers.*set
iblocklist_forumspam.netset
iblocklist_forumspam.*set
iblocklist_hijacked.netset
iblocklist_hijacked.*set
iblocklist_iana_multicast.netset
iblocklist_iana_multicast.*set
iblocklist_iana_private.netset
iblocklist_iana_private.*set
iblocklist_iana_reserved.netset
iblocklist_iana_reserved.*set
iblocklist_level1.netset
iblocklist_level1.*set
iblocklist_level2.netset
iblocklist_level2.*set
iblocklist_level3.netset
iblocklist_level3.*set
iblocklist_org_microsoft.netset
iblocklist_org_microsoft.*set
iblocklist_proxies.ipset
iblocklist_proxies.*set
iblocklist_rangetest.netset
iblocklist_rangetest.*set
iblocklist_spider.netset
iblocklist_spider.*set
iblocklist_spyware.netset
iblocklist_spyware.*set
iblocklist_webexploit.ipset
iblocklist_webexploit.*set
ib_*.netset
iprange*
ipv4_range_to_cidr.awk
*.lastchecked
*.setinfo
sorbs_anonymizers.netset
sorbs_dul.netset
sorbs_escalations.netset
sorbs_*.ipset
sorbs_*.netset
sorbs_new_spam.netset
sorbs_noserver.netset
sorbs_recent_spam.netset
sorbs_smtp.netset
sorbs_web.netset
sorbs_zombie.netset
*.source
*.tmp
update-ipsets*
.warn_if_last_downloaded_before_this
blueliv*.ipset
blueliv*.netset
blueliv_crimeserver_online.ipset
blueliv_crimeserver_recent.ipset
blueliv_crimeserver_last.ipset
blueliv_crimeserver_last_1d.ipset
blueliv_crimeserver_last_2d.ipset
blueliv_crimeserver_last_7d.ipset
blueliv_crimeserver_last_30d.ipset
iblocklist_badpeers.netset
dataplane_sipquery.ipset
dataplane_sshpwauth.ipset
dataplane_sshclient.ipset
dataplane_sipregistration.ipset
dataplane_sipinvitation.ipset
dataplane_vncrfb.ipset
dataplane_dnsrd.ipset
dataplane_dnsrdany.ipset
dataplane_dnsversion.ipset
shunlist.ipset
ip2proxy_px1lite.netset

228
README-EDIT.md Normal file
View File

@ -0,0 +1,228 @@
> Due to the amount of data and the frequency of the updates on this repo,
> github has requested to limit the number of updates.
> The site [https://iplists.firehol.org](https://iplists.firehol.org) has direct links
> to all the files in this repo. **This repo is now updated once per day.**
---
### Contents
- [About this repo](#about-this-repo)
- [Using these ipsets](#using-these-ipsets)
- [Which ones to use?](#which-ones-to-use)
- [Why are open proxy lists included](#why-are-open-proxy-lists-included)
- [Using them in FireHOL](#using-them-in-firehol)
* [Adding the ipsets in your firehol.conf](#adding-the-ipsets-in-your-fireholconf)
* [Updating the ipsets while the firewall is running](#updating-the-ipsets-while-the-firewall-is-running)
- [Dynamic List of ipsets included](#list-of-ipsets-included)
- [Comparison of ipsets](#comparison-of-ipsets)
---
# About this repo
This repository includes a list of ipsets dynamically updated with
[FireHOL](https://github.com/firehol/firehol)'s `update-ipsets.sh`
[documented in this wiki](https://github.com/firehol/blocklist-ipsets/wiki).
This repo is self maintained. It it updated automatically from the script via a cron job.
This repo has a site: [http://iplists.firehol.org](http://iplists.firehol.org).
## Why do we need blocklists?
As time passes and the internet matures in our life, cybercrime is becoming increasingly sophisticated.
Although there are many tools (detection of malware, viruses, intrusion detection and prevention systems,
etc) to help us isolate the bad guys, there are now a lot more than just such attacks.
What is more interesting is that the fraudsters or attackers in many cases are not going to do a direct
damage to you or your systems. They will use you and your systems to gain something else, possibly not
related or indirectly related to your business. Nowadays the attacks cannot be identified easily. They are
distributed and come to our systems from a vast amount of IPs around the world.
To get an idea, check for example the [XRumer](http://en.wikipedia.org/wiki/XRumer) software. This thing
mimics human behavior to post ads, it creates email accounts, responds to emails it receives, bypasses
captchas, it goes gently to stay unnoticed, etc.
To increase our effectiveness we need to complement our security solutions with our shared knowledge, our
shared experience in this fight.
Hopefully, there are many teams out there that do their best to identify the attacks and pinpoint the
attackers. These teams release blocklists. Blocklists of IPs (for use in firewalls), domains & URLs
(for use in proxies), etc.
What we are interested here is IPs.
Using IP blocklists at the internet side of your firewall is a key component of internet security. These
lists share key knowledge between us, allowing us to learn from each other and effectively isolate
fraudsters and attackers from our services.
I decided to upload these lists to a github repo because:
1. They are freely available on the internet. The intention of their creators is to help internet security.
Keep in mind though that a few of these lists may have special licences attached. Before using them, please check their source site for any information regarding proper use.
2. Github provides (via `git pull`) a unified way of updating all the lists together.
Pulling this repo regularly on your machines, you will update all the IP lists at once.
3. Github also provides a unified version control. Using it we can have a history of what each list has
done, which IPs or subnets were added and which were removed.
## DNSBLs
Check also another tool included in FireHOL v3+, called `dnsbl-ipset.sh`.
This tool is capable of creating an ipset based on your traffic by looking up information on DNSBLs and
scoring it according to your preferences.
More information [here](https://github.com/firehol/firehol/wiki/dnsbl-ipset.sh).
---
# Using these ipsets
Please be very careful what you choose to use and how you use it. If you blacklist traffic using these
lists you may end up blocking your users, your customers, even yourself (!) from accessing your services.
1. Go to to the site of each list and read how each list is maintained. You are going to trust these guys for doing their job right.
2. Most sites have either a donation system or commercial lists of higher quality. Try to support them.
3. I have included the TOR network in these lists (`bm_tor`, `dm_tor`, `et_tor`). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
4. Apply any blacklist at the internet side of your firewall. Be very careful. The `bogons` and `fullbogons` lists contain private, unrouteable IPs that should not be routed on the internet. If you apply such a blocklist on your DMZ or LAN side, you will be blocked out of your firewall.
5. Always have a whitelist too, containing the IP addresses or subnets you trust. Try to build the rules in such a way that if an IP is in the whitelist, it should not be blocked by these blocklists.
## Which ones to use
### Level 1 - Basic
These are the ones I trust. **Level 1** provides basic security against the most well-known attackers, with the minimum of false positives.
1. **Abuse.ch** lists `feodo`, `palevo`, `sslbl`, `zeus`, `zeus_badips`
These folks are doing a great job tracking crime ware. Their blocklists are very focused.
Keep in mind `zeus` may include some false positives. You can use `zeus_badips` instead.
2. **DShield.org** list `dshield`
It contains the top 20 attacking class C (/24) subnets, over the last three days.
3. **Spamhaus.org** lists `spamhaus_drop`, `spamhaus_edrop`
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers).
According to Spamhaus.org:
> When implemented at a network or ISP's 'core routers', DROP and EDROP will help protect the network's users from spamming, scanning, harvesting, DNS-hijacking and DDoS attacks originating on rogue netblocks.
>
> Spamhaus strongly encourages the use of DROP and EDROP by tier-1s and backbones.
Spamhaus is very responsive to adapt these lists when a network owner updates them that the issue has been solved (I had one such incident with one of my users).
4. **Team-Cymru.org** list `bogons` or `fullbogons`
These are lists of IPs that should not be routed on the internet. No one should be using them.
Be very careful to apply either of the two on the internet side of your network.
### Level 2 - Essentials
**Level 2** provide protection against current brute force attacks. This level may have a small percentage of false positives, mainly due to dynamic IPs being re-used by other users.
1. **OpenBL.org** lists `openbl*`
The team of OpenBL tracks brute force attacks on their hosts. They have a very short list for hosts, under their own control, collecting this information, to eliminate false positives.
They suggest to use the default blacklist which has a retention policy of 90 days (`openbl`), but they also provide lists with different retention policies (from 1 day to 1 year).
Their goal is to report abuse to the responsible provider so that the infection is disabled.
2. **Blocklist.de** lists `blocklist_de*`
Is a network of users reporting abuse mainly using `fail2ban`. They eliminate false positives using other lists available. Since they collect information from their users, their lists may be subject to poisoning, or false positives.
I asked them about poisoning. [Here](https://forum.blocklist.de/viewtopic.php?f=4&t=244&sid=847d00d26b0735add3518ff515242cad) you can find their answer. In short, they track it down so that they have an ignorable rate of false positives.
Also, they only include individual IPs (no subnets) which have attacked their users the last 48 hours and their list contains 20.000 to 40.000 IPs (which is small enough considering the size of the internet).
Like `openbl`, their goal is to report abuse back, so that the infection is disabled.
They also provide their blocklist per type of attack (mail, web, etc).
Of course, there are more lists included. You can check them and decide if they fit for your needs.
## Why are open proxy lists included
Of course, I haven't included them for you to use the open proxies. The port the proxy is listening, or the type of proxy, are not included (although most of them use the standard proxy ports and do serve web requests).
If you check the comparisons for the open proxy lists (`ri_connect_proxies`, `ri_web_proxies`, `xroxy`, `proxz`, `proxyrss`, etc)
you will find that they overlap to a great degree with other blocklists, like `blocklist_de`, `stopforumspam`, etc.
> This means the attackers also use open proxies to execute attacks.
So, if you are under attack, blocking the open proxies may help isolate a large part of the attack.
I don't suggest to permanently block IPs using the proxy lists. Their purpose of existence is questionable.
Their quality though may be acceptable, since lot of these sites advertise that they test open proxies before including them in their lists, so that there are no false positives, at least at the time they tested them.
---
## Using them in FireHOL
`update-ipsets.sh` itself does not alter your firewall. It can be used to update ipsets both on disk and in the kernel for any firewall solution you use.
The information below, shows you how to configure FireHOL to use the provides ipsets.
### Adding the ipsets in your firehol.conf
I use something like this:
```sh
# our wan interface
wan="dsl0"
# our whitelist
ipset4 create whitelist hash:net
ipset4 add whitelist A.B.C.D/E # A.B.C.D/E is whitelisted
# subnets - netsets
for x in fullbogons dshield spamhaus_drop spamhaus_edrop
do
ipset4 create ${x} hash:net
ipset4 addfile ${x} ipsets/${x}.netset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
# individual IPs - ipsets
for x in feodo palevo sslbl zeus openbl blocklist_de
do
ipset4 create ${x} hash:ip
ipset4 addfile ${x} ipsets/${x}.ipset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
... rest of firehol.conf ...
```
If you are concerned about iptables performance, change the `blacklist4` keyword `full` to `input`.
This will block only inbound NEW connections, i.e. only the first packet for every NEW inbound connection will be checked.
All other traffic passes through unchecked.
> Before adding these rules to your `firehol.conf` you should run `update-ipsets.sh` to enable them.
### Updating the ipsets while the firewall is running
Just use the `update-ipsets.sh` script from the firehol distribution.
This script will update each ipset and call firehol to update the ipset while the firewall is running.
> You can add `update-ipsets.sh` to cron, to run every 10 mins. `update-ipsets.sh` is smart enough to download
> a list only when it needs to.
---
# List of ipsets included

737
README.md Normal file
View File

@ -0,0 +1,737 @@
> Due to the amount of data and the frequency of the updates on this repo,
> github has requested to limit the number of updates.
> The site [https://iplists.firehol.org](https://iplists.firehol.org) has direct links
> to all the files in this repo. **This repo is now updated once per day.**
---
### Contents
- [About this repo](#about-this-repo)
- [Using these ipsets](#using-these-ipsets)
- [Which ones to use?](#which-ones-to-use)
- [Why are open proxy lists included](#why-are-open-proxy-lists-included)
- [Using them in FireHOL](#using-them-in-firehol)
* [Adding the ipsets in your firehol.conf](#adding-the-ipsets-in-your-fireholconf)
* [Updating the ipsets while the firewall is running](#updating-the-ipsets-while-the-firewall-is-running)
- [Dynamic List of ipsets included](#list-of-ipsets-included)
- [Comparison of ipsets](#comparison-of-ipsets)
---
# About this repo
This repository includes a list of ipsets dynamically updated with
[FireHOL](https://github.com/firehol/firehol)'s `update-ipsets.sh`
[documented in this wiki](https://github.com/firehol/blocklist-ipsets/wiki).
This repo is self maintained. It it updated automatically from the script via a cron job.
This repo has a site: [http://iplists.firehol.org](http://iplists.firehol.org).
## Why do we need blocklists?
As time passes and the internet matures in our life, cybercrime is becoming increasingly sophisticated.
Although there are many tools (detection of malware, viruses, intrusion detection and prevention systems,
etc) to help us isolate the bad guys, there are now a lot more than just such attacks.
What is more interesting is that the fraudsters or attackers in many cases are not going to do a direct
damage to you or your systems. They will use you and your systems to gain something else, possibly not
related or indirectly related to your business. Nowadays the attacks cannot be identified easily. They are
distributed and come to our systems from a vast amount of IPs around the world.
To get an idea, check for example the [XRumer](http://en.wikipedia.org/wiki/XRumer) software. This thing
mimics human behavior to post ads, it creates email accounts, responds to emails it receives, bypasses
captchas, it goes gently to stay unnoticed, etc.
To increase our effectiveness we need to complement our security solutions with our shared knowledge, our
shared experience in this fight.
Hopefully, there are many teams out there that do their best to identify the attacks and pinpoint the
attackers. These teams release blocklists. Blocklists of IPs (for use in firewalls), domains & URLs
(for use in proxies), etc.
What we are interested here is IPs.
Using IP blocklists at the internet side of your firewall is a key component of internet security. These
lists share key knowledge between us, allowing us to learn from each other and effectively isolate
fraudsters and attackers from our services.
I decided to upload these lists to a github repo because:
1. They are freely available on the internet. The intention of their creators is to help internet security.
Keep in mind though that a few of these lists may have special licences attached. Before using them, please check their source site for any information regarding proper use.
2. Github provides (via `git pull`) a unified way of updating all the lists together.
Pulling this repo regularly on your machines, you will update all the IP lists at once.
3. Github also provides a unified version control. Using it we can have a history of what each list has
done, which IPs or subnets were added and which were removed.
## DNSBLs
Check also another tool included in FireHOL v3+, called `dnsbl-ipset.sh`.
This tool is capable of creating an ipset based on your traffic by looking up information on DNSBLs and
scoring it according to your preferences.
More information [here](https://github.com/firehol/firehol/wiki/dnsbl-ipset.sh).
---
# Using these ipsets
Please be very careful what you choose to use and how you use it. If you blacklist traffic using these
lists you may end up blocking your users, your customers, even yourself (!) from accessing your services.
1. Go to to the site of each list and read how each list is maintained. You are going to trust these guys for doing their job right.
2. Most sites have either a donation system or commercial lists of higher quality. Try to support them.
3. I have included the TOR network in these lists (`bm_tor`, `dm_tor`, `et_tor`). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
4. Apply any blacklist at the internet side of your firewall. Be very careful. The `bogons` and `fullbogons` lists contain private, unrouteable IPs that should not be routed on the internet. If you apply such a blocklist on your DMZ or LAN side, you will be blocked out of your firewall.
5. Always have a whitelist too, containing the IP addresses or subnets you trust. Try to build the rules in such a way that if an IP is in the whitelist, it should not be blocked by these blocklists.
## Which ones to use
### Level 1 - Basic
These are the ones I trust. **Level 1** provides basic security against the most well-known attackers, with the minimum of false positives.
1. **Abuse.ch** lists `feodo`, `palevo`, `sslbl`, `zeus`, `zeus_badips`
These folks are doing a great job tracking crime ware. Their blocklists are very focused.
Keep in mind `zeus` may include some false positives. You can use `zeus_badips` instead.
2. **DShield.org** list `dshield`
It contains the top 20 attacking class C (/24) subnets, over the last three days.
3. **Spamhaus.org** lists `spamhaus_drop`, `spamhaus_edrop`
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers).
According to Spamhaus.org:
> When implemented at a network or ISP's 'core routers', DROP and EDROP will help protect the network's users from spamming, scanning, harvesting, DNS-hijacking and DDoS attacks originating on rogue netblocks.
>
> Spamhaus strongly encourages the use of DROP and EDROP by tier-1s and backbones.
Spamhaus is very responsive to adapt these lists when a network owner updates them that the issue has been solved (I had one such incident with one of my users).
4. **Team-Cymru.org** list `bogons` or `fullbogons`
These are lists of IPs that should not be routed on the internet. No one should be using them.
Be very careful to apply either of the two on the internet side of your network.
### Level 2 - Essentials
**Level 2** provide protection against current brute force attacks. This level may have a small percentage of false positives, mainly due to dynamic IPs being re-used by other users.
1. **OpenBL.org** lists `openbl*`
The team of OpenBL tracks brute force attacks on their hosts. They have a very short list for hosts, under their own control, collecting this information, to eliminate false positives.
They suggest to use the default blacklist which has a retention policy of 90 days (`openbl`), but they also provide lists with different retention policies (from 1 day to 1 year).
Their goal is to report abuse to the responsible provider so that the infection is disabled.
2. **Blocklist.de** lists `blocklist_de*`
Is a network of users reporting abuse mainly using `fail2ban`. They eliminate false positives using other lists available. Since they collect information from their users, their lists may be subject to poisoning, or false positives.
I asked them about poisoning. [Here](https://forum.blocklist.de/viewtopic.php?f=4&t=244&sid=847d00d26b0735add3518ff515242cad) you can find their answer. In short, they track it down so that they have an ignorable rate of false positives.
Also, they only include individual IPs (no subnets) which have attacked their users the last 48 hours and their list contains 20.000 to 40.000 IPs (which is small enough considering the size of the internet).
Like `openbl`, their goal is to report abuse back, so that the infection is disabled.
They also provide their blocklist per type of attack (mail, web, etc).
Of course, there are more lists included. You can check them and decide if they fit for your needs.
## Why are open proxy lists included
Of course, I haven't included them for you to use the open proxies. The port the proxy is listening, or the type of proxy, are not included (although most of them use the standard proxy ports and do serve web requests).
If you check the comparisons for the open proxy lists (`ri_connect_proxies`, `ri_web_proxies`, `xroxy`, `proxz`, `proxyrss`, etc)
you will find that they overlap to a great degree with other blocklists, like `blocklist_de`, `stopforumspam`, etc.
> This means the attackers also use open proxies to execute attacks.
So, if you are under attack, blocking the open proxies may help isolate a large part of the attack.
I don't suggest to permanently block IPs using the proxy lists. Their purpose of existence is questionable.
Their quality though may be acceptable, since lot of these sites advertise that they test open proxies before including them in their lists, so that there are no false positives, at least at the time they tested them.
---
## Using them in FireHOL
`update-ipsets.sh` itself does not alter your firewall. It can be used to update ipsets both on disk and in the kernel for any firewall solution you use.
The information below, shows you how to configure FireHOL to use the provides ipsets.
### Adding the ipsets in your firehol.conf
I use something like this:
```sh
# our wan interface
wan="dsl0"
# our whitelist
ipset4 create whitelist hash:net
ipset4 add whitelist A.B.C.D/E # A.B.C.D/E is whitelisted
# subnets - netsets
for x in fullbogons dshield spamhaus_drop spamhaus_edrop
do
ipset4 create ${x} hash:net
ipset4 addfile ${x} ipsets/${x}.netset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
# individual IPs - ipsets
for x in feodo palevo sslbl zeus openbl blocklist_de
do
ipset4 create ${x} hash:ip
ipset4 addfile ${x} ipsets/${x}.ipset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
... rest of firehol.conf ...
```
If you are concerned about iptables performance, change the `blacklist4` keyword `full` to `input`.
This will block only inbound NEW connections, i.e. only the first packet for every NEW inbound connection will be checked.
All other traffic passes through unchecked.
> Before adding these rules to your `firehol.conf` you should run `update-ipsets.sh` to enable them.
### Updating the ipsets while the firewall is running
Just use the `update-ipsets.sh` script from the firehol distribution.
This script will update each ipset and call firehol to update the ipset while the firewall is running.
> You can add `update-ipsets.sh` to cron, to run every 10 mins. `update-ipsets.sh` is smart enough to download
> a list only when it needs to.
---
# List of ipsets included
The following list was automatically generated on Wed Jan 23 11:24:25 UTC 2019.
The update frequency is the maximum allowed by internal configuration. A list will never be downloaded sooner than the update frequency stated. A list may also not be downloaded, after this frequency expired, if it has not been modified on the server (as reported by HTTP `IF_MODIFIED_SINCE` method).
name|info|type|entries|update|
:--:|:--:|:--:|:-----:|:----:|
[alienvault_reputation](http://iplists.firehol.org/?ipset=alienvault_reputation)|[AlienVault.com](https://www.alienvault.com/) IP reputation database|ipv4 hash:ip|70096 unique IPs|updated every 6 hours from [this link](https://reputation.alienvault.com/reputation.generic)
[asprox_c2](http://iplists.firehol.org/?ipset=asprox_c2)|[h3x.eu](http://atrack.h3x.eu/) ASPROX Tracker - Asprox C&C Sites|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](http://atrack.h3x.eu/c2)
[bambenek_banjori](http://iplists.firehol.org/?ipset=bambenek_banjori)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of banjori C&Cs with 90 minute lookback|ipv4 hash:ip|107 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt)
[bambenek_bebloh](http://iplists.firehol.org/?ipset=bambenek_bebloh)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of bebloh C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt)
[bambenek_c2](http://iplists.firehol.org/?ipset=bambenek_c2)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) master feed of known, active and non-sinkholed C&Cs IP addresses|ipv4 hash:ip|461 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt)
[bambenek_cl](http://iplists.firehol.org/?ipset=bambenek_cl)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cl C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cl-iplist.txt)
[bambenek_cryptowall](http://iplists.firehol.org/?ipset=bambenek_cryptowall)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cryptowall C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cryptowall-iplist.txt)
[bambenek_dircrypt](http://iplists.firehol.org/?ipset=bambenek_dircrypt)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dircrypt C&Cs with 90 minute lookback|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt)
[bambenek_dyre](http://iplists.firehol.org/?ipset=bambenek_dyre)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dyre C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt)
[bambenek_geodo](http://iplists.firehol.org/?ipset=bambenek_geodo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of geodo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt)
[bambenek_hesperbot](http://iplists.firehol.org/?ipset=bambenek_hesperbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of hesperbot C&Cs with 90 minute lookback|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt)
[bambenek_matsnu](http://iplists.firehol.org/?ipset=bambenek_matsnu)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of matsnu C&Cs with 90 minute lookback|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt)
[bambenek_necurs](http://iplists.firehol.org/?ipset=bambenek_necurs)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of necurs C&Cs with 90 minute lookback|ipv4 hash:ip|28 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt)
[bambenek_p2pgoz](http://iplists.firehol.org/?ipset=bambenek_p2pgoz)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of p2pgoz C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt)
[bambenek_pushdo](http://iplists.firehol.org/?ipset=bambenek_pushdo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pushdo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt)
[bambenek_pykspa](http://iplists.firehol.org/?ipset=bambenek_pykspa)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pykspa C&Cs with 90 minute lookback|ipv4 hash:ip|12 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt)
[bambenek_qakbot](http://iplists.firehol.org/?ipset=bambenek_qakbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of qakbot C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt)
[bambenek_ramnit](http://iplists.firehol.org/?ipset=bambenek_ramnit)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ramnit C&Cs with 90 minute lookback|ipv4 hash:ip|97 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt)
[bambenek_ranbyus](http://iplists.firehol.org/?ipset=bambenek_ranbyus)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ranbyus C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt)
[bambenek_simda](http://iplists.firehol.org/?ipset=bambenek_simda)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of simda C&Cs with 90 minute lookback|ipv4 hash:ip|135 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/simda-iplist.txt)
[bambenek_suppobox](http://iplists.firehol.org/?ipset=bambenek_suppobox)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of suppobox C&Cs with 90 minute lookback|ipv4 hash:ip|53 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt)
[bambenek_symmi](http://iplists.firehol.org/?ipset=bambenek_symmi)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of symmi C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt)
[bambenek_tinba](http://iplists.firehol.org/?ipset=bambenek_tinba)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of tinba C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt)
[bambenek_volatile](http://iplists.firehol.org/?ipset=bambenek_volatile)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of volatile C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt)
[bbcan177_ms1](http://iplists.firehol.org/?ipset=bbcan177_ms1)|pfBlockerNG Malicious Threats|ipv4 hash:net|2700 subnets, 5269985 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/bf29d47ea04391cb3eb0/raw)
[bbcan177_ms3](http://iplists.firehol.org/?ipset=bbcan177_ms3)|pfBlockerNG Malicious Threats|ipv4 hash:net|1146 subnets, 30151694 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/d7105c242f17f4498f81/raw)
[bds_atif](http://iplists.firehol.org/?ipset=bds_atif)|Artillery Threat Intelligence Feed and Banlist Feed|ipv4 hash:ip|3684 unique IPs|updated every 1 day from [this link](https://www.binarydefense.com/banlist.txt)
[bi_any_0_1d](http://iplists.firehol.org/?ipset=bi_any_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 0 and age less than 1d|ipv4 hash:ip|12588 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/any/0?age=1d)
[bi_any_1_7d](http://iplists.firehol.org/?ipset=bi_any_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 1 and age less than 7d|ipv4 hash:ip|25828 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/any/1?age=7d)
[bi_any_2_1d](http://iplists.firehol.org/?ipset=bi_any_2_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 1d|ipv4 hash:ip|2091 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/any/2?age=1d)
[bi_any_2_30d](http://iplists.firehol.org/?ipset=bi_any_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 30d|ipv4 hash:ip|45178 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/any/2?age=30d)
[bi_any_2_7d](http://iplists.firehol.org/?ipset=bi_any_2_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 7d|ipv4 hash:ip|22738 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/any/2?age=7d)
[bi_apache-404_0_1d](http://iplists.firehol.org/?ipset=bi_apache-404_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-404 with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-404/0?age=1d)
[bi_apache-modsec_0_1d](http://iplists.firehol.org/?ipset=bi_apache-modsec_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-modsec with score above 0 and age less than 1d|ipv4 hash:ip|17 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-modsec/0?age=1d)
[bi_apache-noscript_0_1d](http://iplists.firehol.org/?ipset=bi_apache-noscript_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-noscript with score above 0 and age less than 1d|ipv4 hash:ip|54 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-noscript/0?age=1d)
[bi_apache-noscript_2_30d](http://iplists.firehol.org/?ipset=bi_apache-noscript_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-noscript with score above 2 and age less than 30d|ipv4 hash:ip|214 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/apache-noscript/2?age=30d)
[bi_apache-phpmyadmin_0_1d](http://iplists.firehol.org/?ipset=bi_apache-phpmyadmin_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-phpmyadmin with score above 0 and age less than 1d|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-phpmyadmin/0?age=1d)
[bi_apache-scriddies_0_1d](http://iplists.firehol.org/?ipset=bi_apache-scriddies_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-scriddies with score above 0 and age less than 1d|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-scriddies/0?age=1d)
[bi_apache_0_1d](http://iplists.firehol.org/?ipset=bi_apache_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 0 and age less than 1d|ipv4 hash:ip|130 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache/0?age=1d)
[bi_apache_1_7d](http://iplists.firehol.org/?ipset=bi_apache_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 1 and age less than 7d|ipv4 hash:ip|166 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/apache/1?age=7d)
[bi_apache_2_30d](http://iplists.firehol.org/?ipset=bi_apache_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 2 and age less than 30d|ipv4 hash:ip|301 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/apache/2?age=30d)
[bi_apacheddos_0_1d](http://iplists.firehol.org/?ipset=bi_apacheddos_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apacheddos with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apacheddos/0?age=1d)
[bi_assp_0_1d](http://iplists.firehol.org/?ipset=bi_assp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category assp with score above 0 and age less than 1d|ipv4 hash:ip|5 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/assp/0?age=1d)
[bi_asterisk_0_1d](http://iplists.firehol.org/?ipset=bi_asterisk_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category asterisk with score above 0 and age less than 1d|ipv4 hash:ip|79 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/asterisk/0?age=1d)
[bi_asterisk_2_30d](http://iplists.firehol.org/?ipset=bi_asterisk_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category asterisk with score above 2 and age less than 30d|ipv4 hash:ip|202 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/asterisk/2?age=30d)
[bi_badbots_0_1d](http://iplists.firehol.org/?ipset=bi_badbots_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category badbots with score above 0 and age less than 1d|ipv4 hash:ip|3325 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/badbots/0?age=1d)
[bi_badbots_1_7d](http://iplists.firehol.org/?ipset=bi_badbots_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category badbots with score above 1 and age less than 7d|ipv4 hash:ip|6465 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/badbots/1?age=7d)
[bi_bruteforce_0_1d](http://iplists.firehol.org/?ipset=bi_bruteforce_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category bruteforce with score above 0 and age less than 1d|ipv4 hash:ip|3496 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/bruteforce/0?age=1d)
[bi_bruteforce_1_7d](http://iplists.firehol.org/?ipset=bi_bruteforce_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category bruteforce with score above 1 and age less than 7d|ipv4 hash:ip|6471 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/bruteforce/1?age=7d)
[bi_cms_0_1d](http://iplists.firehol.org/?ipset=bi_cms_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 0 and age less than 1d|ipv4 hash:ip|273 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/cms/0?age=1d)
[bi_cms_1_7d](http://iplists.firehol.org/?ipset=bi_cms_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 1 and age less than 7d|ipv4 hash:ip|161 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/cms/1?age=7d)
[bi_cms_2_30d](http://iplists.firehol.org/?ipset=bi_cms_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 2 and age less than 30d|ipv4 hash:ip|718 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/cms/2?age=30d)
[bi_courierauth_0_1d](http://iplists.firehol.org/?ipset=bi_courierauth_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category courierauth with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/courierauth/0?age=1d)
[bi_courierauth_2_30d](http://iplists.firehol.org/?ipset=bi_courierauth_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category courierauth with score above 2 and age less than 30d|ipv4 hash:ip|446 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/courierauth/2?age=30d)
[bi_default_0_1d](http://iplists.firehol.org/?ipset=bi_default_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 0 and age less than 1d|ipv4 hash:ip|743 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/default/0?age=1d)
[bi_default_1_7d](http://iplists.firehol.org/?ipset=bi_default_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 1 and age less than 7d|ipv4 hash:ip|258 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/default/1?age=7d)
[bi_default_2_30d](http://iplists.firehol.org/?ipset=bi_default_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 2 and age less than 30d|ipv4 hash:ip|530 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/default/2?age=30d)
[bi_dns_0_1d](http://iplists.firehol.org/?ipset=bi_dns_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dns with score above 0 and age less than 1d|ipv4 hash:ip|2 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dns/0?age=1d)
[bi_dovecot-pop3imap_0_1d](http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot-pop3imap with score above 0 and age less than 1d|ipv4 hash:ip|12 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dovecot-pop3imap/0?age=1d)
[bi_dovecot-pop3imap_2_30d](http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot-pop3imap with score above 2 and age less than 30d|ipv4 hash:ip|973 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/dovecot-pop3imap/2?age=30d)
[bi_dovecot_0_1d](http://iplists.firehol.org/?ipset=bi_dovecot_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 0 and age less than 1d|ipv4 hash:ip|15 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dovecot/0?age=1d)
[bi_dovecot_1_7d](http://iplists.firehol.org/?ipset=bi_dovecot_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 1 and age less than 7d|ipv4 hash:ip|2 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/dovecot/1?age=7d)
[bi_dovecot_2_30d](http://iplists.firehol.org/?ipset=bi_dovecot_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 2 and age less than 30d|ipv4 hash:ip|427 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/dovecot/2?age=30d)
[bi_drupal_0_1d](http://iplists.firehol.org/?ipset=bi_drupal_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category drupal with score above 0 and age less than 1d|ipv4 hash:ip|3 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/drupal/0?age=1d)
[bi_exim_0_1d](http://iplists.firehol.org/?ipset=bi_exim_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category exim with score above 0 and age less than 1d|ipv4 hash:ip|7 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/exim/0?age=1d)
[bi_exim_1_7d](http://iplists.firehol.org/?ipset=bi_exim_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category exim with score above 1 and age less than 7d|ipv4 hash:ip|0 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/exim/1?age=7d)
[bi_ftp_0_1d](http://iplists.firehol.org/?ipset=bi_ftp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 0 and age less than 1d|ipv4 hash:ip|207 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ftp/0?age=1d)
[bi_ftp_1_7d](http://iplists.firehol.org/?ipset=bi_ftp_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 1 and age less than 7d|ipv4 hash:ip|534 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/ftp/1?age=7d)
[bi_ftp_2_30d](http://iplists.firehol.org/?ipset=bi_ftp_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 2 and age less than 30d|ipv4 hash:ip|613 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ftp/2?age=30d)
[bi_http_0_1d](http://iplists.firehol.org/?ipset=bi_http_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 0 and age less than 1d|ipv4 hash:ip|448 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/http/0?age=1d)
[bi_http_1_7d](http://iplists.firehol.org/?ipset=bi_http_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 1 and age less than 7d|ipv4 hash:ip|345 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/http/1?age=7d)
[bi_http_2_30d](http://iplists.firehol.org/?ipset=bi_http_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 2 and age less than 30d|ipv4 hash:ip|1050 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/http/2?age=30d)
[bi_imap_0_1d](http://iplists.firehol.org/?ipset=bi_imap_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category imap with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/imap/0?age=1d)
[bi_mail_0_1d](http://iplists.firehol.org/?ipset=bi_mail_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 0 and age less than 1d|ipv4 hash:ip|1959 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/mail/0?age=1d)
[bi_mail_1_7d](http://iplists.firehol.org/?ipset=bi_mail_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 1 and age less than 7d|ipv4 hash:ip|1721 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/mail/1?age=7d)
[bi_mail_2_30d](http://iplists.firehol.org/?ipset=bi_mail_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 2 and age less than 30d|ipv4 hash:ip|3111 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/mail/2?age=30d)
[bi_named_0_1d](http://iplists.firehol.org/?ipset=bi_named_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category named with score above 0 and age less than 1d|ipv4 hash:ip|2 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/named/0?age=1d)
[bi_owncloud_0_1d](http://iplists.firehol.org/?ipset=bi_owncloud_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category owncloud with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/owncloud/0?age=1d)
[bi_plesk-postfix_0_1d](http://iplists.firehol.org/?ipset=bi_plesk-postfix_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category plesk-postfix with score above 0 and age less than 1d|ipv4 hash:ip|14 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/plesk-postfix/0?age=1d)
[bi_postfix-sasl_0_1d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 0 and age less than 1d|ipv4 hash:ip|155 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/postfix-sasl/0?age=1d)
[bi_postfix-sasl_1_7d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 1 and age less than 7d|ipv4 hash:ip|1177 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/postfix-sasl/1?age=7d)
[bi_postfix-sasl_2_30d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 2 and age less than 30d|ipv4 hash:ip|928 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/postfix-sasl/2?age=30d)
[bi_postfix_0_1d](http://iplists.firehol.org/?ipset=bi_postfix_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 0 and age less than 1d|ipv4 hash:ip|1190 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/postfix/0?age=1d)
[bi_postfix_1_7d](http://iplists.firehol.org/?ipset=bi_postfix_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 1 and age less than 7d|ipv4 hash:ip|320 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/postfix/1?age=7d)
[bi_postfix_2_30d](http://iplists.firehol.org/?ipset=bi_postfix_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 2 and age less than 30d|ipv4 hash:ip|657 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/postfix/2?age=30d)
[bi_proftpd_0_1d](http://iplists.firehol.org/?ipset=bi_proftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 0 and age less than 1d|ipv4 hash:ip|84 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/proftpd/0?age=1d)
[bi_proftpd_1_7d](http://iplists.firehol.org/?ipset=bi_proftpd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 1 and age less than 7d|ipv4 hash:ip|529 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/proftpd/1?age=7d)
[bi_proftpd_2_30d](http://iplists.firehol.org/?ipset=bi_proftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 2 and age less than 30d|ipv4 hash:ip|544 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/proftpd/2?age=30d)
[bi_pureftpd_0_1d](http://iplists.firehol.org/?ipset=bi_pureftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 0 and age less than 1d|ipv4 hash:ip|98 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/pureftpd/0?age=1d)
[bi_pureftpd_1_7d](http://iplists.firehol.org/?ipset=bi_pureftpd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 1 and age less than 7d|ipv4 hash:ip|10 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/pureftpd/1?age=7d)
[bi_pureftpd_2_30d](http://iplists.firehol.org/?ipset=bi_pureftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 2 and age less than 30d|ipv4 hash:ip|14 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/pureftpd/2?age=30d)
[bi_qmail-smtp_0_1d](http://iplists.firehol.org/?ipset=bi_qmail-smtp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category qmail-smtp with score above 0 and age less than 1d|ipv4 hash:ip|16 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/qmail-smtp/0?age=1d)
[bi_rdp_0_1d](http://iplists.firehol.org/?ipset=bi_rdp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category rdp with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/rdp/0?age=1d)
[bi_sasl_0_1d](http://iplists.firehol.org/?ipset=bi_sasl_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 0 and age less than 1d|ipv4 hash:ip|149 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sasl/0?age=1d)
[bi_sasl_1_7d](http://iplists.firehol.org/?ipset=bi_sasl_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 1 and age less than 7d|ipv4 hash:ip|67 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sasl/1?age=7d)
[bi_sasl_2_30d](http://iplists.firehol.org/?ipset=bi_sasl_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 2 and age less than 30d|ipv4 hash:ip|128 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sasl/2?age=30d)
[bi_sip_0_1d](http://iplists.firehol.org/?ipset=bi_sip_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 0 and age less than 1d|ipv4 hash:ip|16 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sip/0?age=1d)
[bi_sip_1_7d](http://iplists.firehol.org/?ipset=bi_sip_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 1 and age less than 7d|ipv4 hash:ip|3 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sip/1?age=7d)
[bi_sip_2_30d](http://iplists.firehol.org/?ipset=bi_sip_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 2 and age less than 30d|ipv4 hash:ip|5 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sip/2?age=30d)
[bi_smtp_0_1d](http://iplists.firehol.org/?ipset=bi_smtp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category smtp with score above 0 and age less than 1d|ipv4 hash:ip|16 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/smtp/0?age=1d)
[bi_spam_0_1d](http://iplists.firehol.org/?ipset=bi_spam_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category spam with score above 0 and age less than 1d|ipv4 hash:ip|525 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/spam/0?age=1d)
[bi_spam_1_7d](http://iplists.firehol.org/?ipset=bi_spam_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category spam with score above 1 and age less than 7d|ipv4 hash:ip|189 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/spam/1?age=7d)
[bi_sql-attack_0_1d](http://iplists.firehol.org/?ipset=bi_sql-attack_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sql-attack with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sql-attack/0?age=1d)
[bi_sql_0_1d](http://iplists.firehol.org/?ipset=bi_sql_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sql with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sql/0?age=1d)
[bi_ssh-blocklist_0_1d](http://iplists.firehol.org/?ipset=bi_ssh-blocklist_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-blocklist with score above 0 and age less than 1d|ipv4 hash:ip|46 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh-blocklist/0?age=1d)
[bi_ssh-ddos_0_1d](http://iplists.firehol.org/?ipset=bi_ssh-ddos_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-ddos with score above 0 and age less than 1d|ipv4 hash:ip|29 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh-ddos/0?age=1d)
[bi_ssh-ddos_2_30d](http://iplists.firehol.org/?ipset=bi_ssh-ddos_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-ddos with score above 2 and age less than 30d|ipv4 hash:ip|82 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ssh-ddos/2?age=30d)
[bi_ssh_0_1d](http://iplists.firehol.org/?ipset=bi_ssh_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 0 and age less than 1d|ipv4 hash:ip|7439 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh/0?age=1d)
[bi_ssh_1_7d](http://iplists.firehol.org/?ipset=bi_ssh_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 1 and age less than 7d|ipv4 hash:ip|20447 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/ssh/1?age=7d)
[bi_ssh_2_30d](http://iplists.firehol.org/?ipset=bi_ssh_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 2 and age less than 30d|ipv4 hash:ip|38404 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ssh/2?age=30d)
[bi_sshd_0_1d](http://iplists.firehol.org/?ipset=bi_sshd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 0 and age less than 1d|ipv4 hash:ip|4665 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sshd/0?age=1d)
[bi_sshd_1_7d](http://iplists.firehol.org/?ipset=bi_sshd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 1 and age less than 7d|ipv4 hash:ip|6773 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sshd/1?age=7d)
[bi_sshd_2_30d](http://iplists.firehol.org/?ipset=bi_sshd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 2 and age less than 30d|ipv4 hash:ip|7780 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sshd/2?age=30d)
[bi_telnet_0_1d](http://iplists.firehol.org/?ipset=bi_telnet_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 0 and age less than 1d|ipv4 hash:ip|43 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/telnet/0?age=1d)
[bi_telnet_1_7d](http://iplists.firehol.org/?ipset=bi_telnet_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 1 and age less than 7d|ipv4 hash:ip|8 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/telnet/1?age=7d)
[bi_telnet_2_30d](http://iplists.firehol.org/?ipset=bi_telnet_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 2 and age less than 30d|ipv4 hash:ip|17 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/telnet/2?age=30d)
[bi_unknown_0_1d](http://iplists.firehol.org/?ipset=bi_unknown_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 0 and age less than 1d|ipv4 hash:ip|1265 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/unknown/0?age=1d)
[bi_unknown_1_7d](http://iplists.firehol.org/?ipset=bi_unknown_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 1 and age less than 7d|ipv4 hash:ip|255 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/unknown/1?age=7d)
[bi_unknown_2_30d](http://iplists.firehol.org/?ipset=bi_unknown_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 2 and age less than 30d|ipv4 hash:ip|549 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/unknown/2?age=30d)
[bi_username-notfound_0_1d](http://iplists.firehol.org/?ipset=bi_username-notfound_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category username-notfound with score above 0 and age less than 1d|ipv4 hash:ip|128 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/username-notfound/0?age=1d)
[bi_voip_0_1d](http://iplists.firehol.org/?ipset=bi_voip_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 0 and age less than 1d|ipv4 hash:ip|88 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/voip/0?age=1d)
[bi_voip_1_7d](http://iplists.firehol.org/?ipset=bi_voip_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 1 and age less than 7d|ipv4 hash:ip|26 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/voip/1?age=7d)
[bi_voip_2_30d](http://iplists.firehol.org/?ipset=bi_voip_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 2 and age less than 30d|ipv4 hash:ip|204 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/voip/2?age=30d)
[bi_vsftpd_0_1d](http://iplists.firehol.org/?ipset=bi_vsftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category vsftpd with score above 0 and age less than 1d|ipv4 hash:ip|2 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/vsftpd/0?age=1d)
[bi_vsftpd_2_30d](http://iplists.firehol.org/?ipset=bi_vsftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category vsftpd with score above 2 and age less than 30d|ipv4 hash:ip|62 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/vsftpd/2?age=30d)
[bi_wordpress_0_1d](http://iplists.firehol.org/?ipset=bi_wordpress_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 0 and age less than 1d|ipv4 hash:ip|142 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/wordpress/0?age=1d)
[bi_wordpress_1_7d](http://iplists.firehol.org/?ipset=bi_wordpress_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 1 and age less than 7d|ipv4 hash:ip|110 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/wordpress/1?age=7d)
[bi_wordpress_2_30d](http://iplists.firehol.org/?ipset=bi_wordpress_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 2 and age less than 30d|ipv4 hash:ip|660 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/wordpress/2?age=30d)
[bitcoin_blockchain_info_1d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_1d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|988 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_30d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_30d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|8196 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_7d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_7d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|2636 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_nodes](http://iplists.firehol.org/?ipset=bitcoin_nodes)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|8694 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_1d](http://iplists.firehol.org/?ipset=bitcoin_nodes_1d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|9186 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_30d](http://iplists.firehol.org/?ipset=bitcoin_nodes_30d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|23236 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_7d](http://iplists.firehol.org/?ipset=bitcoin_nodes_7d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|12195 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[blocklist_de](http://iplists.firehol.org/?ipset=blocklist_de)|[Blocklist.de](https://www.blocklist.de/) IPs that have been detected by fail2ban in the last 48 hours|ipv4 hash:ip|52970 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/all.txt)
[blocklist_de_apache](http://iplists.firehol.org/?ipset=blocklist_de_apache)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.|ipv4 hash:ip|8928 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/apache.txt)
[blocklist_de_bots](http://iplists.firehol.org/?ipset=blocklist_de_bots)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = it has posted a Spam-Comment on a open Forum or Wiki).|ipv4 hash:ip|52 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bots.txt)
[blocklist_de_bruteforce](http://iplists.firehol.org/?ipset=blocklist_de_bruteforce)|[Blocklist.de](https://www.blocklist.de/) All IPs which attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.|ipv4 hash:ip|650 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bruteforcelogin.txt)
[blocklist_de_ftp](http://iplists.firehol.org/?ipset=blocklist_de_ftp)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.|ipv4 hash:ip|917 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ftp.txt)
[blocklist_de_imap](http://iplists.firehol.org/?ipset=blocklist_de_imap)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3, etc.|ipv4 hash:ip|4328 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/imap.txt)
[blocklist_de_mail](http://iplists.firehol.org/?ipset=blocklist_de_mail)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.|ipv4 hash:ip|41996 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/mail.txt)
[blocklist_de_sip](http://iplists.firehol.org/?ipset=blocklist_de_sip)|[Blocklist.de](https://www.blocklist.de/) All IP addresses that tried to login in a SIP, VOIP or Asterisk Server and are included in the IPs list from infiltrated.net|ipv4 hash:ip|123 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/sip.txt)
[blocklist_de_ssh](http://iplists.firehol.org/?ipset=blocklist_de_ssh)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.|ipv4 hash:ip|9219 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ssh.txt)
[blocklist_de_strongips](http://iplists.firehol.org/?ipset=blocklist_de_strongips)|[Blocklist.de](https://www.blocklist.de/) All IPs which are older then 2 month and have more then 5.000 attacks.|ipv4 hash:ip|160 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/strongips.txt)
[blocklist_net_ua](http://iplists.firehol.org/?ipset=blocklist_net_ua)|[blocklist.net.ua](https://blocklist.net.ua) The BlockList project was created to become protection against negative influence of the harmful and potentially dangerous events on the Internet. First of all this service will help internet and hosting providers to protect subscribers sites from being hacked. BlockList will help to stop receiving a large amount of spam from dubious SMTP relays or from attempts of brute force passwords to servers and network equipment.|ipv4 hash:ip|30691 unique IPs|updated every 10 mins from [this link](https://blocklist.net.ua/blocklist.csv)
[blueliv_crimeserver_last](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|24381 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_1d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_1d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|58312 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_2d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_2d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|71293 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_30d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_30d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|87551 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_7d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_7d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|77098 unique IPs|updated every 6 hours
[blueliv_crimeserver_online](http://iplists.firehol.org/?ipset=blueliv_crimeserver_online)|[blueliv.com](https://www.blueliv.com/) Online Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|15628 unique IPs|updated every 1 day
[blueliv_crimeserver_recent](http://iplists.firehol.org/?ipset=blueliv_crimeserver_recent)|[blueliv.com](https://www.blueliv.com/) Recent Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|64076 unique IPs|updated every 1 day
[bm_tor](http://iplists.firehol.org/?ipset=bm_tor)|[torstatus.blutmagie.de](https://torstatus.blutmagie.de) list of all TOR network servers|ipv4 hash:ip|6334 unique IPs|updated every 30 mins from [this link](https://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv)
[bogons](http://iplists.firehol.org/?ipset=bogons)|[Team-Cymru.org](http://www.team-cymru.org) private and reserved addresses defined by RFC 1918, RFC 5735, and RFC 6598 and netblocks that have not been allocated to a regional internet registry|ipv4 hash:net|13 subnets, 592708608 unique IPs|updated every 1 day
[botscout](http://iplists.firehol.org/?ipset=botscout)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|14 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_1d](http://iplists.firehol.org/?ipset=botscout_1d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|875 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_30d](http://iplists.firehol.org/?ipset=botscout_30d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|16858 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_7d](http://iplists.firehol.org/?ipset=botscout_7d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|4583 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botvrij_dst](http://iplists.firehol.org/?ipset=botvrij_dst)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious destination IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|56 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-dst.raw)
[botvrij_src](http://iplists.firehol.org/?ipset=botvrij_src)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious source IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-src.raw)
[bruteforceblocker](http://iplists.firehol.org/?ipset=bruteforceblocker)|[danger.rulez.sk bruteforceblocker](http://danger.rulez.sk/index.php/bruteforceblocker/) (fail2ban alternative for SSH on OpenBSD). This is an automatically generated list from users reporting failed authentication attempts. An IP seems to be included if 3 or more users report it. Its retention pocily seems 30 days.|ipv4 hash:ip|2214 unique IPs|updated every 3 hours from [this link](http://danger.rulez.sk/projects/bruteforceblocker/blist.php)
[ciarmy](http://iplists.firehol.org/?ipset=ciarmy)|[CIArmy.com](http://ciarmy.com/) IPs with poor Rogue Packet score that have not yet been identified as malicious by the community|ipv4 hash:ip|15000 unique IPs|updated every 3 hours from [this link](http://cinsscore.com/list/ci-badguys.txt)
[cidr_report_bogons](http://iplists.firehol.org/?ipset=cidr_report_bogons)|Unallocated (Free) Address Space, generated on a daily basis using the IANA registry files, the Regional Internet Registry stats files and the Regional Internet Registry whois data.|ipv4 hash:net|3119 subnets, 595651592 unique IPs|updated every 1 day from [this link](http://www.cidr-report.org/bogons/freespace-prefix.txt)
[cleanmx_phishing](http://iplists.firehol.org/?ipset=cleanmx_phishing)|[Clean-MX.de](http://support.clean-mx.de/) IPs sending phishing messages|ipv4 hash:ip|4519 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format=csv&domain=)
[cleanmx_viruses](http://iplists.firehol.org/?ipset=cleanmx_viruses)|[Clean-MX.de](http://support.clean-mx.de/clean-mx/viruses.php) IPs with viruses|ipv4 hash:ip|12190 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlviruses.php?response=alive&fields=ip)
[cleantalk](http://iplists.firehol.org/?ipset=cleantalk)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new cleantalk_updated)|ipv4 hash:ip|988 unique IPs|updated every 1 min
[cleantalk_1d](http://iplists.firehol.org/?ipset=cleantalk_1d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_1d cleantalk_updated_1d)|ipv4 hash:ip|10193 unique IPs|updated every 1 min
[cleantalk_30d](http://iplists.firehol.org/?ipset=cleantalk_30d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_30d cleantalk_updated_30d)|ipv4 hash:ip|104661 unique IPs|updated every 1 min
[cleantalk_7d](http://iplists.firehol.org/?ipset=cleantalk_7d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_7d cleantalk_updated_7d)|ipv4 hash:ip|27947 unique IPs|updated every 1 min
[cleantalk_new](http://iplists.firehol.org/?ipset=cleantalk_new)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|500 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_1d](http://iplists.firehol.org/?ipset=cleantalk_new_1d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|1639 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_30d](http://iplists.firehol.org/?ipset=cleantalk_new_30d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|40694 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_7d](http://iplists.firehol.org/?ipset=cleantalk_new_7d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|7833 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_top20](http://iplists.firehol.org/?ipset=cleantalk_top20)|[CleanTalk](https://cleantalk.org/) Top 20 HTTP Spammers|ipv4 hash:ip|20 unique IPs|updated every 1 day from [this link](https://cleantalk.org/blacklists/top20)
[cleantalk_updated](http://iplists.firehol.org/?ipset=cleantalk_updated)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|500 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_1d](http://iplists.firehol.org/?ipset=cleantalk_updated_1d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|9250 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_30d](http://iplists.firehol.org/?ipset=cleantalk_updated_30d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|85147 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_7d](http://iplists.firehol.org/?ipset=cleantalk_updated_7d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|22999 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[coinbl_hosts](http://iplists.firehol.org/?ipset=coinbl_hosts)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains all domains - A list for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|4347 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts)
[coinbl_hosts_browser](http://iplists.firehol.org/?ipset=coinbl_hosts_browser)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. A hosts list to prevent browser mining only. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|869 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser)
[coinbl_hosts_optional](http://iplists.firehol.org/?ipset=coinbl_hosts_optional)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains additional domains, for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|312 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts_optional)
[coinbl_ips](http://iplists.firehol.org/?ipset=coinbl_ips)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains all IPs - An additional list for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1390 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/MiningServerIPList.txt)
[cruzit_web_attacks](http://iplists.firehol.org/?ipset=cruzit_web_attacks)|[CruzIt.com](http://www.cruzit.com/wbl.php) IPs of compromised machines scanning for vulnerabilities and DDOS attacks|ipv4 hash:ip|9541 unique IPs|updated every 12 hours from [this link](http://www.cruzit.com/xwbl2txt.php)
[cta_cryptowall](http://iplists.firehol.org/?ipset=cta_cryptowall)|[Cyber Threat Alliance](http://www.cyberthreatalliance.org/cryptowall-dashboard.html) CryptoWall is one of the most lucrative and broad-reaching ransomware campaigns affecting Internet users today. Sharing intelligence and analysis resources, the CTA profiled the latest version of CryptoWall, which impacted hundreds of thousands of users, resulting in over US $325 million in damages worldwide.|ipv4 hash:ip|1360 unique IPs|updated every 1 day from [this link](https://public.tableau.com/views/CTAOnlineViz/DashboardData.csv?:embed=y&:showVizHome=no&:showTabs=y&:display_count=y&:display_static_image=y&:bootstrapWhenNotified=true)
[cybercrime](http://iplists.firehol.org/?ipset=cybercrime)|[CyberCrime](http://cybercrime-tracker.net/) A project tracking Command and Control.|ipv4 hash:ip|1367 unique IPs|updated every 12 hours from [this link](http://cybercrime-tracker.net/fuckerz.php)
[darklist_de](http://iplists.firehol.org/?ipset=darklist_de)|[darklist.de](http://www.darklist.de/) ssh fail2ban reporting|ipv4 hash:net|2483 subnets, 10142 unique IPs|updated every 1 day from [this link](http://www.darklist.de/raw.php)
[datacenters](http://iplists.firehol.org/?ipset=datacenters)|[Nick Galbreath](https://github.com/client9/ipcat) This is a list of IPv4 address that correspond to datacenters, co-location centers, shared and virtual webhosting providers. In other words, ip addresses that end web consumers should not be using.|ipv4 hash:net|4102 subnets, 87353124 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/client9/ipcat/master/datacenters.csv)
[dataplane_dnsrd](http://iplists.firehol.org/?ipset=dataplane_dnsrd)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending recursive DNS queries to a remote host. This report lists addresses that may be cataloging open DNS resolvers or evaluating cache entries.|ipv4 hash:ip|318 unique IPs|updated every 1 hour
[dataplane_dnsrdany](http://iplists.firehol.org/?ipset=dataplane_dnsrdany)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending recursive DNS IN ANY queries to a remote host. This report lists addresses that may be cataloging open DNS resolvers for the purpose of later using them to facilitate DNS amplification and reflection attacks.|ipv4 hash:ip|10 unique IPs|updated every 1 hour
[dataplane_dnsversion](http://iplists.firehol.org/?ipset=dataplane_dnsversion)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending DNS CH TXT VERSION.BIND queries to a remote host. This report lists addresses that may be cataloging DNS software.|ipv4 hash:ip|228 unique IPs|updated every 1 hour
[dataplane_sipinvitation](http://iplists.firehol.org/?ipset=dataplane_sipinvitation)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a SIP INVITE operation to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP client cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|45 unique IPs|updated every 1 hour
[dataplane_sipquery](http://iplists.firehol.org/?ipset=dataplane_sipquery)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating a SIP OPTIONS query to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP server cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|446 unique IPs|updated every 1 hour
[dataplane_sipregistration](http://iplists.firehol.org/?ipset=dataplane_sipregistration)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a SIP REGISTER operation to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP client cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|53 unique IPs|updated every 1 hour
[dataplane_sshclient](http://iplists.firehol.org/?ipset=dataplane_sshclient)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating an SSH connection to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SSH server cataloging or conducting authentication attack attempts.|ipv4 hash:ip|14989 unique IPs|updated every 1 hour
[dataplane_sshpwauth](http://iplists.firehol.org/?ipset=dataplane_sshpwauth)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen attempting to remotely login to a host using SSH password authentication. This report lists hosts that are highly suspicious and are likely conducting malicious SSH password authentication attacks.|ipv4 hash:ip|12647 unique IPs|updated every 1 hour
[dataplane_vncrfb](http://iplists.firehol.org/?ipset=dataplane_vncrfb)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a VNC remote frame buffer (RFB) session to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be VNC server cataloging or conducting various forms of remote access abuse.|ipv4 hash:ip|524 unique IPs|updated every 1 hour
[dm_tor](http://iplists.firehol.org/?ipset=dm_tor)|[dan.me.uk](https://www.dan.me.uk) dynamic list of TOR nodes|ipv4 hash:ip|6305 unique IPs|updated every 30 mins from [this link](https://www.dan.me.uk/torlist/)
[dronebl_anonymizers](http://iplists.firehol.org/?ipset=dronebl_anonymizers)|[DroneBL.org](https://dronebl.org) List of open proxies. It includes IPs which DroneBL categorizes as SOCKS proxies (8), HTTP proxies (9), web page proxies (11), WinGate proxies (14), proxy chains (10).|ipv4 hash:net|740909 subnets, 793174 unique IPs|updated every 1 min
[dronebl_auto_botnets](http://iplists.firehol.org/?ipset=dronebl_auto_botnets)|[DroneBL.org](https://dronebl.org) IPs of automatically detected botnets. It includes IPs for which DroneBL responds with 17.|ipv4 hash:net|9711 subnets, 9820 unique IPs|updated every 1 min
[dronebl_autorooting_worms](http://iplists.firehol.org/?ipset=dronebl_autorooting_worms)|[DroneBL.org](https://dronebl.org) IPs of autorooting worms. It includes IPs for which DroneBL responds with 16. These are usually SSH bruteforce attacks.|ipv4 hash:net|530 subnets, 559 unique IPs|updated every 1 min
[dronebl_compromised](http://iplists.firehol.org/?ipset=dronebl_compromised)|[DroneBL.org](https://dronebl.org) IPs of compromised routers / gateways. It includes IPs for which DroneBL responds with 15 (BOPM detected).|ipv4 hash:net|42648 subnets, 108850 unique IPs|updated every 1 min
[dronebl_ddos_drones](http://iplists.firehol.org/?ipset=dronebl_ddos_drones)|[DroneBL.org](https://dronebl.org) IPs of DDoS drones. It includes IPs for which DroneBL responds with 7.|ipv4 hash:net|803883 subnets, 844685 unique IPs|updated every 1 min
[dronebl_dns_mx_on_irc](http://iplists.firehol.org/?ipset=dronebl_dns_mx_on_irc)|[DroneBL.org](https://dronebl.org) List of IPs of DNS / MX hostname detected on IRC. It includes IPs for which DroneBL responds with 18.|ipv4 hash:net|588 subnets, 594 unique IPs|updated every 1 min
[dronebl_irc_drones](http://iplists.firehol.org/?ipset=dronebl_irc_drones)|[DroneBL.org](https://dronebl.org) List of IRC spam drones (litmus/sdbot/fyle). It includes IPs for which DroneBL responds with 3.|ipv4 hash:net|285198 subnets, 291192 unique IPs|updated every 1 min
[dronebl_unknown](http://iplists.firehol.org/?ipset=dronebl_unknown)|[DroneBL.org](https://dronebl.org) List of IPs of uncategorized threats. It includes IPs for which DroneBL responds with 255.|ipv4 hash:net|7 subnets, 7 unique IPs|updated every 1 min
[dronebl_worms_bots](http://iplists.firehol.org/?ipset=dronebl_worms_bots)|[DroneBL.org](https://dronebl.org) IPs of unknown worms or spambots. It includes IPs for which DroneBL responds with 6|ipv4 hash:net|59914 subnets, 137101 unique IPs|updated every 1 min
[dshield](http://iplists.firehol.org/?ipset=dshield)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|19 subnets, 5120 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_1d](http://iplists.firehol.org/?ipset=dshield_1d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|24 subnets, 6656 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_30d](http://iplists.firehol.org/?ipset=dshield_30d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|61 subnets, 16896 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_7d](http://iplists.firehol.org/?ipset=dshield_7d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|31 subnets, 8704 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_top_1000](http://iplists.firehol.org/?ipset=dshield_top_1000)|[DShield.org](https://dshield.org/) top 1000 attacking hosts in the last 30 days|ipv4 hash:ip|905 unique IPs|updated every 1 hour from [this link](https://isc.sans.edu/api/sources/attacks/1000/)
[dyndns_ponmocup](http://iplists.firehol.org/?ipset=dyndns_ponmocup)|[DynDNS.org](http://security-research.dyndns.org/pub/malware-feeds/) Ponmocup. The malware powering the botnet has been around since 2006 and it’s known under various names, including Ponmocup, Vundo, Virtumonde, Milicenso and Swisyn. It has been used for ad fraud, data theft and downloading additional threats to infected systems. Ponmocup is one of the largest currently active and, with nine consecutive years, also one of the longest running, but it is rarely noticed as the operators take care to keep it operating under the radar.|ipv4 hash:ip|107 unique IPs|updated every 1 day from [this link](http://security-research.dyndns.org/pub/malware-feeds/ponmocup-infected-domains-shadowserver.csv)
[esentire_14072015_com](http://iplists.firehol.org/?ipset=esentire_14072015_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|579 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015.com_watch_ip.lst)
[esentire_14072015q_com](http://iplists.firehol.org/?ipset=esentire_14072015q_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|575 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015q.com_watch_ip.lst)
[esentire_22072014a_com](http://iplists.firehol.org/?ipset=esentire_22072014a_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1290 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014a.com_watch_ip.lst)
[esentire_22072014b_com](http://iplists.firehol.org/?ipset=esentire_22072014b_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1288 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014b.com_watch_ip.lst)
[esentire_22072014c_com](http://iplists.firehol.org/?ipset=esentire_22072014c_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1289 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014c.com_watch_ip.lst)
[esentire_atomictrivia_ru](http://iplists.firehol.org/?ipset=esentire_atomictrivia_ru)|Andromeda/Gamarue Checkin|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/atomictrivia.ru_watch_ip.lst)
[esentire_auth_update_ru](http://iplists.firehol.org/?ipset=esentire_auth_update_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1306 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/auth-update.ru_watch_ip.lst)
[esentire_burmundisoul_ru](http://iplists.firehol.org/?ipset=esentire_burmundisoul_ru)|Ursnif Variant CnC|ipv4 hash:ip|2551 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/burmundisoul.ru_watch_ip.lst)
[esentire_crazyerror_su](http://iplists.firehol.org/?ipset=esentire_crazyerror_su)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|18613 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/crazyerror.su_watch_ip.lst)
[esentire_dagestanskiiviskis_ru](http://iplists.firehol.org/?ipset=esentire_dagestanskiiviskis_ru)|Ursnif Variant CnC|ipv4 hash:ip|517 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dagestanskiiviskis.ru_watch_ip.lst)
[esentire_differentia_ru](http://iplists.firehol.org/?ipset=esentire_differentia_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|12 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/differentia.ru_watch_ip.lst)
[esentire_disorderstatus_ru](http://iplists.firehol.org/?ipset=esentire_disorderstatus_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/disorderstatus.ru_watch_ip.lst)
[esentire_dorttlokolrt_com](http://iplists.firehol.org/?ipset=esentire_dorttlokolrt_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|23664 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dorttlokolrt.com_watch_ip.lst)
[esentire_downs1_ru](http://iplists.firehol.org/?ipset=esentire_downs1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7231 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/downs1.ru_watch_ip.lst)
[esentire_ebankoalalusys_ru](http://iplists.firehol.org/?ipset=esentire_ebankoalalusys_ru)|Ursnif Variant CnC|ipv4 hash:ip|898 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/ebankoalalusys.ru_watch_ip.lst)
[esentire_emptyarray_ru](http://iplists.firehol.org/?ipset=esentire_emptyarray_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|20139 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/emptyarray.ru_watch_ip.lst)
[esentire_fioartd_com](http://iplists.firehol.org/?ipset=esentire_fioartd_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|601 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/fioartd.com_watch_ip.lst)
[esentire_getarohirodrons_com](http://iplists.firehol.org/?ipset=esentire_getarohirodrons_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|2156 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/getarohirodrons.com_watch_ip.lst)
[esentire_hasanhashsde_ru](http://iplists.firehol.org/?ipset=esentire_hasanhashsde_ru)|Ursnif Variant CnC|ipv4 hash:ip|1184 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/hasanhashsde.ru_watch_ip.lst)
[esentire_inleet_ru](http://iplists.firehol.org/?ipset=esentire_inleet_ru)|Ursnif Variant CnC|ipv4 hash:ip|4219 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/inleet.ru_watch_ip.lst)
[esentire_islamislamdi_ru](http://iplists.firehol.org/?ipset=esentire_islamislamdi_ru)|Ursnif Variant CnC|ipv4 hash:ip|673 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/islamislamdi.ru_watch_ip.lst)
[esentire_krnqlwlplttc_com](http://iplists.firehol.org/?ipset=esentire_krnqlwlplttc_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/krnqlwlplttc.com_watch_ip.lst)
[esentire_maddox1_ru](http://iplists.firehol.org/?ipset=esentire_maddox1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|11345 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/maddox1.ru_watch_ip.lst)
[esentire_manning1_ru](http://iplists.firehol.org/?ipset=esentire_manning1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|6824 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/manning1.ru_watch_ip.lst)
[esentire_misteryherson_ru](http://iplists.firehol.org/?ipset=esentire_misteryherson_ru)|Ursnif Variant CnC|ipv4 hash:ip|176 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/misteryherson.ru_watch_ip.lst)
[esentire_mysebstarion_ru](http://iplists.firehol.org/?ipset=esentire_mysebstarion_ru)|Ursnif Variant CnC|ipv4 hash:ip|1058 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/mysebstarion.ru_watch_ip.lst)
[esentire_smartfoodsglutenfree_kz](http://iplists.firehol.org/?ipset=esentire_smartfoodsglutenfree_kz)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2674 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/smartfoodsglutenfree.kz_watch_ip.lst)
[esentire_venerologvasan93_ru](http://iplists.firehol.org/?ipset=esentire_venerologvasan93_ru)|Ursnif Variant CnC|ipv4 hash:ip|1263 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/venerologvasan93.ru_watch_ip.lst)
[esentire_volaya_ru](http://iplists.firehol.org/?ipset=esentire_volaya_ru)|Win32/PSW.Papras.CK CnC|ipv4 hash:ip|5080 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/volaya.ru_watch_ip.lst)
[et_block](http://iplists.firehol.org/?ipset=et_block)|[EmergingThreats.net](http://www.emergingthreats.net/) default blacklist (at the time of writing includes spamhaus DROP, dshield and abuse.ch trackers, which are available separately too - prefer to use the direct ipsets instead of this, they seem to lag a bit in updates)|ipv4 hash:net|880 subnets, 18786923 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt)
[et_botcc](http://iplists.firehol.org/?ipset=et_botcc)|[EmergingThreats.net Command and Control IPs](http://doc.emergingthreats.net/bin/view/Main/BotCC) These IPs are updates every 24 hours and should be considered VERY highly reliable indications that a host is communicating with a known and active Bot or Malware command and control server - (although they say this includes abuse.ch trackers, it does not - check its overlaps)|ipv4 hash:ip|55 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-CC.rules)
[et_compromised](http://iplists.firehol.org/?ipset=et_compromised)|[EmergingThreats.net compromised hosts](http://doc.emergingthreats.net/bin/view/Main/CompromisedHost)|ipv4 hash:ip|2473 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/compromised-ips.txt)
[et_dshield](http://iplists.firehol.org/?ipset=et_dshield)|[EmergingThreats.net](http://www.emergingthreats.net/) dshield blocklist|ipv4 hash:net|19 subnets, 5120 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DSHIELD.rules)
[et_spamhaus](http://iplists.firehol.org/?ipset=et_spamhaus)|[EmergingThreats.net](http://www.emergingthreats.net/) spamhaus blocklist|ipv4 hash:net|755 subnets, 18781952 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DROP.rules)
[et_tor](http://iplists.firehol.org/?ipset=et_tor)|[EmergingThreats.net TOR list](http://doc.emergingthreats.net/bin/view/Main/TorRules) of TOR network IPs|ipv4 hash:ip|6327 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/emerging-tor.rules)
[feodo](http://iplists.firehol.org/?ipset=feodo)|[Abuse.ch Feodo tracker](https://feodotracker.abuse.ch) trojan includes IPs which are being used by Feodo (also known as Cridex or Bugat) which commits ebanking fraud|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=ipblocklist)
[feodo_badips](http://iplists.firehol.org/?ipset=feodo_badips)|[Abuse.ch Feodo tracker BadIPs](https://feodotracker.abuse.ch) The Feodo Tracker Feodo BadIP Blocklist only contains IP addresses (IPv4) used as C&C communication channel by the Feodo Trojan version B. These IP addresses are usually servers rented by cybercriminals directly and used for the exclusive purpose of hosting a Feodo C&C server. Hence you should expect no legit traffic to those IP addresses. The site highly recommends you to block/drop any traffic towards any Feodo C&C using the Feodo BadIP Blocklist. Please consider that this blocklist only contains IP addresses used by version B of the Feodo Trojan. C&C communication channels used by version A, version C and version D are not covered by this blocklist.|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=badips)
[firehol_abusers_1d](http://iplists.firehol.org/?ipset=firehol_abusers_1d)|An ipset made from blocklists that track abusers in the last 24 hours. (includes: botscout_1d cleantalk_new_1d cleantalk_updated_1d php_commenters_1d php_dictionary_1d php_harvesters_1d php_spammers_1d stopforumspam_1d)|ipv4 hash:net|20455 subnets, 21050 unique IPs|updated every 1 min
[firehol_abusers_30d](http://iplists.firehol.org/?ipset=firehol_abusers_30d)|An ipset made from blocklists that track abusers in the last 30 days. (includes: cleantalk_new_30d cleantalk_updated_30d php_commenters_30d php_dictionary_30d php_harvesters_30d php_spammers_30d stopforumspam sblam)|ipv4 hash:net|253500 subnets, 269257 unique IPs|updated every 1 min
[firehol_anonymous](http://iplists.firehol.org/?ipset=firehol_anonymous)|An ipset that includes all the anonymizing IPs of the world. (includes: anonymous bm_tor dm_tor firehol_proxies tor_exits)|ipv4 hash:net|724971 subnets, 762592 unique IPs|updated every 1 min
[firehol_level1](http://iplists.firehol.org/?ipset=firehol_level1)|A firewall blacklist composed from IP lists, providing maximum protection with minimum false positives. Suitable for basic protection on all internet facing servers, routers and firewalls. (includes: bambenek_c2 dshield feodo fullbogons spamhaus_drop spamhaus_edrop sslbl zeus_badips ransomware_rw)|ipv4 hash:net|4685 subnets, 630295339 unique IPs|updated every 1 min
[firehol_level2](http://iplists.firehol.org/?ipset=firehol_level2)|An ipset made from blocklists that track attacks, during about the last 48 hours. (includes: blocklist_de dshield_1d greensnow)|ipv4 hash:net|45241 subnets, 60713 unique IPs|updated every 1 min
[firehol_level3](http://iplists.firehol.org/?ipset=firehol_level3)|An ipset made from blocklists that track attacks, spyware, viruses. It includes IPs than have been reported or detected in the last 30 days. (includes: bruteforceblocker ciarmy dshield_30d dshield_top_1000 malc0de maxmind_proxy_fraud myip shunlist snort_ipfilter sslbl_aggressive talosintel_ipfilter zeus vxvault)|ipv4 hash:net|20879 subnets, 38574 unique IPs|updated every 1 min
[firehol_level4](http://iplists.firehol.org/?ipset=firehol_level4)|An ipset made from blocklists that track attacks, but may include a large number of false positives. (includes: blocklist_net_ua botscout_30d cruzit_web_attacks cybercrime haley_ssh iblocklist_hijacked iblocklist_spyware iblocklist_webexploit ipblacklistcloud_top iw_wormlist malwaredomainlist)|ipv4 hash:net|102568 subnets, 9387833 unique IPs|updated every 1 min
[firehol_proxies](http://iplists.firehol.org/?ipset=firehol_proxies)|An ipset made from all sources that track open proxies. It includes IPs reported or detected in the last 30 days. (includes: iblocklist_proxies maxmind_proxy_fraud ip2proxy_px1lite proxylists_30d proxyrss_30d proxz_30d ri_connect_proxies_30d ri_web_proxies_30d socks_proxy_30d sslproxies_30d xroxy_30d)|ipv4 hash:net|719100 subnets, 750729 unique IPs|updated every 1 min
[firehol_webclient](http://iplists.firehol.org/?ipset=firehol_webclient)|An IP blacklist made from blocklists that track IPs that a web client should never talk to. This list is to be used on top of firehol_level1. (includes: ransomware_online sslbl_aggressive cybercrime dyndns_ponmocup maxmind_proxy_fraud)|ipv4 hash:net|1979 subnets, 2066 unique IPs|updated every 1 min
[firehol_webserver](http://iplists.firehol.org/?ipset=firehol_webserver)|A web server IP blacklist made from blocklists that track IPs that should never be used by your web users. (This list includes IPs that are servers hosting malware, bots, etc or users having a long criminal history. This list is to be used on top of firehol_level1, firehol_level2, firehol_level3 and possibly firehol_proxies or firehol_anonymous). (includes: maxmind_proxy_fraud myip pushing_inertia_blocklist stopforumspam_toxic)|ipv4 hash:net|3573 subnets, 34667945 unique IPs|updated every 1 min
[fullbogons](http://iplists.firehol.org/?ipset=fullbogons)|[Team-Cymru.org](http://www.team-cymru.org) IP space that has been allocated to an RIR, but not assigned by that RIR to an actual ISP or other end-user|ipv4 hash:net|3011 subnets, 610574280 unique IPs|updated every 1 day
geolite2_asn|[MaxMind GeoLite2 ASN](https://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|disabled|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN-CSV.zip)
[geolite2_country](https://github.com/firehol/blocklist-ipsets/tree/master/geolite2_country)|[MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/) databases are free IP geolocation databases comparable to, but less accurate than, MaxMind’s GeoIP2 databases. They include IPs per country, IPs per continent, IPs used by anonymous services (VPNs, Proxies, etc) and Satellite Providers.|ipv4 hash:net|All the world|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[gofferje_sip](http://iplists.firehol.org/?ipset=gofferje_sip)|[Stefan Gofferje](http://stefan.gofferje.net/it-stuff/sipfraud/sip-attacker-blacklist) A personal blacklist of networks and IPs of SIP attackers. To end up here, the IP or network must have been the origin of considerable and repeated attacks on my PBX and additionally, the ISP didn't react to any complaint. Note from the author: I don't give any guarantees of accuracy, completeness or even usability! USE AT YOUR OWN RISK! Also note that I block complete countries, namely China, Korea and Palestine with blocklists from ipdeny.com, so some attackers will never even get the chance to get noticed by me to be put on this blacklist. I also don't accept any liabilities related to this blocklist. If you're an ISP and don't like your IPs being listed here, too bad! You should have done something about your customers' behavior and reacted to my complaints. This blocklist is nothing but an expression of my personal opinion and exercising my right of free speech.|ipv4 hash:net|3303 subnets, 1097294 unique IPs|updated every 6 hours from [this link](http://stefan.gofferje.net/sipblocklist.zone)
[gpf_comics](http://iplists.firehol.org/?ipset=gpf_comics)|The GPF DNS Block List is a list of IP addresses on the Internet that have attacked the [GPF Comics](http://www.gpf-comics.com/) family of Web sites. IPs on this block list have been banned from accessing all of our servers because they were caught in the act of spamming, attempting to exploit our scripts, scanning for vulnerabilities, or consuming resources to the detriment of our human visitors.|ipv4 hash:ip|1024 unique IPs|updated every 1 day from [this link](https://www.gpf-comics.com/dnsbl/export.php)
[graphiclineweb](http://iplists.firehol.org/?ipset=graphiclineweb)|[GraphiclineWeb](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/) The IP’s, Hosts and Domains listed in this table are banned universally from accessing websites controlled by the maintainer. Some form of bad activity has been seen from the addresses listed. Bad activity includes: unwanted spiders, rule breakers, comment spammers, trackback spammers, spambots, hacker bots, registration bots and other scripting attackers, harvesters, nuisance spiders, spy bots and organizations spying on websites for commercial reasons.|ipv4 hash:net|2579 subnets, 330527 unique IPs|updated every 1 day from [this link](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/)
[greensnow](http://iplists.firehol.org/?ipset=greensnow)|[GreenSnow](https://greensnow.co/) is a team harvesting a large number of IPs from different computers located around the world. GreenSnow is comparable with SpamHaus.org for attacks of any kind except for spam. Their list is updated automatically and you can withdraw at any time your IP address if it has been listed. Attacks / bruteforce that are monitored are: Scan Port, FTP, POP3, mod_security, IMAP, SMTP, SSH, cPanel, etc.|ipv4 hash:ip|1505 unique IPs|updated every 30 mins from [this link](http://blocklist.greensnow.co/greensnow.txt)
[haley_ssh](http://iplists.firehol.org/?ipset=haley_ssh)|[Charles Haley](http://charles.the-haleys.org) IPs launching SSH dictionary attacks.|ipv4 hash:ip|48537 unique IPs|updated every 4 hours from [this link](http://charles.the-haleys.org/ssh_dico_attack_hdeny_format.php/hostsdeny.txt)
[hphosts_ats](http://iplists.firehol.org/?ipset=hphosts_ats)|[hpHosts](http://hosts-file.net/?s=Download) ad/tracking servers listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|13954 unique IPs|updated every 1 day from [this link](http://hosts-file.net/ad_servers.txt)
[hphosts_emd](http://iplists.firehol.org/?ipset=hphosts_emd)|[hpHosts](http://hosts-file.net/?s=Download) malware sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|54046 unique IPs|updated every 1 day from [this link](http://hosts-file.net/emd.txt)
[hphosts_exp](http://iplists.firehol.org/?ipset=hphosts_exp)|[hpHosts](http://hosts-file.net/?s=Download) exploit sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|196 unique IPs|updated every 1 day from [this link](http://hosts-file.net/exp.txt)
[hphosts_fsa](http://iplists.firehol.org/?ipset=hphosts_fsa)|[hpHosts](http://hosts-file.net/?s=Download) fraud sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|27565 unique IPs|updated every 1 day from [this link](http://hosts-file.net/fsa.txt)
[hphosts_grm](http://iplists.firehol.org/?ipset=hphosts_grm)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in spam (that do not otherwise meet any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|293 unique IPs|updated every 1 day from [this link](http://hosts-file.net/grm.txt)
[hphosts_hfs](http://iplists.firehol.org/?ipset=hphosts_hfs)|[hpHosts](http://hosts-file.net/?s=Download) sites spamming the hpHosts forums (and not meeting any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|245 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hfs.txt)
[hphosts_hjk](http://iplists.firehol.org/?ipset=hphosts_hjk)|[hpHosts](http://hosts-file.net/?s=Download) hijack sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|152 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hjk.txt)
[hphosts_mmt](http://iplists.firehol.org/?ipset=hphosts_mmt)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in misleading marketing (e.g. fake Flash update adverts) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1058 unique IPs|updated every 1 day from [this link](http://hosts-file.net/mmt.txt)
[hphosts_pha](http://iplists.firehol.org/?ipset=hphosts_pha)|[hpHosts](http://hosts-file.net/?s=Download) illegal pharmacy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|2482 unique IPs|updated every 1 day from [this link](http://hosts-file.net/pha.txt)
[hphosts_psh](http://iplists.firehol.org/?ipset=hphosts_psh)|[hpHosts](http://hosts-file.net/?s=Download) phishing sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|44555 unique IPs|updated every 1 day from [this link](http://hosts-file.net/psh.txt)
[hphosts_wrz](http://iplists.firehol.org/?ipset=hphosts_wrz)|[hpHosts](http://hosts-file.net/?s=Download) warez/piracy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|982 unique IPs|updated every 1 day from [this link](http://hosts-file.net/wrz.txt)
[iblocklist_abuse_palevo](http://iplists.firehol.org/?ipset=iblocklist_abuse_palevo)|palevotracker.abuse.ch IP blocklist.|ipv4 hash:net|12 subnets, 12 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=erqajhwrxiuvjxqrrwfj&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_spyeye](http://iplists.firehol.org/?ipset=iblocklist_abuse_spyeye)|spyeyetracker.abuse.ch IP blocklist.|ipv4 hash:net|83 subnets, 84 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zvjxsfuvdhoxktpeiokq&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_zeus](http://iplists.firehol.org/?ipset=iblocklist_abuse_zeus)|zeustracker.abuse.ch IP blocklist that contains IP addresses which are currently beeing tracked on the abuse.ch ZeuS Tracker.|ipv4 hash:net|209 subnets, 212 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ynkdjqsjyfmilsgbogqf&fileformat=p2p&archiveformat=gz)
[iblocklist_ads](http://iplists.firehol.org/?ipset=iblocklist_ads)|Advertising trackers and a short list of bad/intrusive porn sites.|ipv4 hash:net|3385 subnets, 888873 unique IPs|updated every 12 hours
[iblocklist_badpeers](http://iplists.firehol.org/?ipset=iblocklist_badpeers)|IPs that have been reported for bad deeds in p2p.|ipv4 hash:net|48578 subnets, 1569289 unique IPs|updated every 12 hours
[iblocklist_bogons](http://iplists.firehol.org/?ipset=iblocklist_bogons)|Unallocated address space.|ipv4 hash:net|2692 subnets, 647770791 unique IPs|updated every 12 hours
[iblocklist_ciarmy_malicious](http://iplists.firehol.org/?ipset=iblocklist_ciarmy_malicious)|ciarmy.com IP blocklist. Based on information from a network of Sentinel devices deployed around the world, they compile a list of known bad IP addresses. Sentinel devices are uniquely positioned to pick up traffic from bad guys without requiring any type of signature-based or rate-based identification. If an IP is identified in this way by a significant number of Sentinels, the IP is malicious and should be blocked.|ipv4 hash:net|14619 subnets, 15000 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=npkuuhuxcsllnhoamkvm&fileformat=p2p&archiveformat=gz)
[iblocklist_cidr_report_bogons](http://iplists.firehol.org/?ipset=iblocklist_cidr_report_bogons)|cidr-report.org IP list of Unallocated address space.|ipv4 hash:net|3125 subnets, 595690504 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=lujdnbasfaaixitgmxpp&fileformat=p2p&archiveformat=gz)
[iblocklist_cruzit_web_attacks](http://iplists.firehol.org/?ipset=iblocklist_cruzit_web_attacks)|CruzIT IP list with individual IP addresses of compromised machines scanning for vulnerabilities and DDOS attacks.|ipv4 hash:net|9398 subnets, 9592 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=czvaehmjpsnwwttrdoyl&fileformat=p2p&archiveformat=gz)
[iblocklist_dshield](http://iplists.firehol.org/?ipset=iblocklist_dshield)|known Hackers and such people.|ipv4 hash:net|16 subnets, 2566 unique IPs|updated every 12 hours
[iblocklist_edu](http://iplists.firehol.org/?ipset=iblocklist_edu)|IPs used by Educational Institutions.|ipv4 hash:net|43905 subnets, 227864028 unique IPs|updated every 12 hours
[iblocklist_exclusions](http://iplists.firehol.org/?ipset=iblocklist_exclusions)|Exclusions.|ipv4 hash:net|313 subnets, 7488 unique IPs|updated every 12 hours
[iblocklist_fornonlancomputers](http://iplists.firehol.org/?ipset=iblocklist_fornonlancomputers)|IP blocklist for non-LAN computers.|ipv4 hash:net|4 subnets, 302055424 unique IPs|updated every 12 hours
[iblocklist_forumspam](http://iplists.firehol.org/?ipset=iblocklist_forumspam)|Forum spam.|ipv4 hash:net|455 subnets, 479 unique IPs|updated every 12 hours
[iblocklist_hijacked](http://iplists.firehol.org/?ipset=iblocklist_hijacked)|Hijacked IP-Blocks. Contains hijacked IP-Blocks and known IP-Blocks that are used to deliver Spam. This list is a combination of lists with hijacked IP-Blocks. Hijacked IP space are IP blocks that are being used without permission by organizations that have no relation to original organization (or its legal successor) that received the IP block. In essence it's stealing of somebody else's IP resources.|ipv4 hash:net|514 subnets, 8933120 unique IPs|updated every 12 hours
[iblocklist_iana_multicast](http://iplists.firehol.org/?ipset=iblocklist_iana_multicast)|IANA Multicast IPs.|ipv4 hash:net|1 subnets, 268435456 unique IPs|updated every 12 hours
[iblocklist_iana_private](http://iplists.firehol.org/?ipset=iblocklist_iana_private)|IANA Private IPs.|ipv4 hash:net|58 subnets, 51643646 unique IPs|updated every 12 hours
[iblocklist_iana_reserved](http://iplists.firehol.org/?ipset=iblocklist_iana_reserved)|IANA Reserved IPs.|ipv4 hash:net|1 subnets, 536870912 unique IPs|updated every 12 hours
[iblocklist_isp_aol](http://iplists.firehol.org/?ipset=iblocklist_isp_aol)|AOL IPs.|ipv4 hash:net|16 subnets, 6627584 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=toboaiysofkflwgrttmb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_att](http://iplists.firehol.org/?ipset=iblocklist_isp_att)|AT&T IPs.|ipv4 hash:net|35 subnets, 55845128 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=grbtkzijgrowvobvessf&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_cablevision](http://iplists.firehol.org/?ipset=iblocklist_isp_cablevision)|Cablevision IPs.|ipv4 hash:net|11 subnets, 1787136 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=dwwbsmzirrykdlvpqozb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_charter](http://iplists.firehol.org/?ipset=iblocklist_isp_charter)|Charter IPs.|ipv4 hash:net|21 subnets, 6138112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=htnzojgossawhpkbulqw&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_comcast](http://iplists.firehol.org/?ipset=iblocklist_isp_comcast)|Comcast IPs.|ipv4 hash:net|33 subnets, 45121536 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=rsgyxvuklicibautguia&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_embarq](http://iplists.firehol.org/?ipset=iblocklist_isp_embarq)|Embarq IPs.|ipv4 hash:net|14 subnets, 2703360 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=twdblifaysaqtypevvdp&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_qwest](http://iplists.firehol.org/?ipset=iblocklist_isp_qwest)|Qwest IPs.|ipv4 hash:net|73 subnets, 15777552 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=jezlifrpefawuoawnfez&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_sprint](http://iplists.firehol.org/?ipset=iblocklist_isp_sprint)|Sprint IPs.|ipv4 hash:net|73 subnets, 6310570 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=hngtqrhhuadlceqxbrob&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_suddenlink](http://iplists.firehol.org/?ipset=iblocklist_isp_suddenlink)|Suddenlink IPs.|ipv4 hash:net|3 subnets, 458752 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=psaoblrwylfrdsspfuiq&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_twc](http://iplists.firehol.org/?ipset=iblocklist_isp_twc)|Time Warner Cable IPs.|ipv4 hash:net|56 subnets, 15015936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aqtsnttnqmcucwrjmohd&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_verizon](http://iplists.firehol.org/?ipset=iblocklist_isp_verizon)|Verizon IPs.|ipv4 hash:net|22 subnets, 18087936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cdmdbprvldivlqsaqjol&fileformat=p2p&archiveformat=gz)
[iblocklist_level1](http://iplists.firehol.org/?ipset=iblocklist_level1)|Level 1 (for use in p2p): Companies or organizations who are clearly involved with trying to stop filesharing (e.g. Baytsp, MediaDefender, Mediasentry). Companies which anti-p2p activity has been seen from. Companies that produce or have a strong financial interest in copyrighted material (e.g. music, movie, software industries a.o.). Government ranges or companies that have a strong financial interest in doing work for governments. Legal industry ranges. IPs or ranges of ISPs from which anti-p2p activity has been observed. Basically this list will block all kinds of internet connections that most people would rather not have during their internet travels.|ipv4 hash:net|236294 subnets, 756537166 unique IPs|updated every 12 hours
[iblocklist_level2](http://iplists.firehol.org/?ipset=iblocklist_level2)|Level 2 (for use in p2p). General corporate ranges. Ranges used by labs or researchers. Proxies.|ipv4 hash:net|78369 subnets, 337983792 unique IPs|updated every 12 hours
[iblocklist_level3](http://iplists.firehol.org/?ipset=iblocklist_level3)|Level 3 (for use in p2p). Many portal-type websites. ISP ranges that may be dodgy for some reason. Ranges that belong to an individual, but which have not been determined to be used by a particular company. Ranges for things that are unusual in some way. The L3 list is aka the paranoid list.|ipv4 hash:net|18857 subnets, 137248437 unique IPs|updated every 12 hours
[iblocklist_malc0de](http://iplists.firehol.org/?ipset=iblocklist_malc0de)|malc0de.com IP blocklist. Addresses that have been identified distributing malware during the past 30 days.|ipv4 hash:net|93 subnets, 93 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=pbqcylkejciyhmwttify&fileformat=p2p&archiveformat=gz)
[iblocklist_onion_router](http://iplists.firehol.org/?ipset=iblocklist_onion_router)|The Onion Router IP addresses.|ipv4 hash:net|6161 subnets, 6330 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=togdoptykrlolpddwbvz&fileformat=p2p&archiveformat=gz)
[iblocklist_org_activision](http://iplists.firehol.org/?ipset=iblocklist_org_activision)|Activision IPs.|ipv4 hash:net|49 subnets, 4902 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=gfnxlhxsijzrcuxwzebb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_apple](http://iplists.firehol.org/?ipset=iblocklist_org_apple)|Apple IPs.|ipv4 hash:net|1 subnets, 16777216 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aphcqvpxuqgrkgufjruj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_blizzard](http://iplists.firehol.org/?ipset=iblocklist_org_blizzard)|Blizzard IPs.|ipv4 hash:net|8 subnets, 16795139 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ercbntshuthyykfkmhxc&fileformat=p2p&archiveformat=gz)
[iblocklist_org_crowd_control](http://iplists.firehol.org/?ipset=iblocklist_org_crowd_control)|Crowd Control Productions IPs.|ipv4 hash:net|2 subnets, 768 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=eveiyhgmusglurfmjyag&fileformat=p2p&archiveformat=gz)
[iblocklist_org_electronic_arts](http://iplists.firehol.org/?ipset=iblocklist_org_electronic_arts)|Electronic Arts IPs.|ipv4 hash:net|42 subnets, 69720 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ejqebpcdmffinaetsvxj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_joost](http://iplists.firehol.org/?ipset=iblocklist_org_joost)|Joost IPs.|ipv4 hash:net|4 subnets, 16779456 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=alxugfmeszbhpxqfdits&fileformat=p2p&archiveformat=gz)
[iblocklist_org_linden_lab](http://iplists.firehol.org/?ipset=iblocklist_org_linden_lab)|Linden Lab IPs.|ipv4 hash:net|11 subnets, 23600 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=qnjdimxnaupjmpqolxcv&fileformat=p2p&archiveformat=gz)
[iblocklist_org_logmein](http://iplists.firehol.org/?ipset=iblocklist_org_logmein)|LogMeIn IPs.|ipv4 hash:net|13 subnets, 16781568 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tgbankumtwtrzllndbmb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_microsoft](http://iplists.firehol.org/?ipset=iblocklist_org_microsoft)|Microsoft IP ranges.|ipv4 hash:net|901 subnets, 1848599 unique IPs|updated every 12 hours
[iblocklist_org_ncsoft](http://iplists.firehol.org/?ipset=iblocklist_org_ncsoft)|NCsoft IPs.|ipv4 hash:net|5 subnets, 12560 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=mwjuwmebrnzyyxpbezxu&fileformat=p2p&archiveformat=gz)
[iblocklist_org_nintendo](http://iplists.firehol.org/?ipset=iblocklist_org_nintendo)|Nintendo IPs.|ipv4 hash:net|45 subnets, 3927 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=pevkykuhgaegqyayzbnr&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pandora](http://iplists.firehol.org/?ipset=iblocklist_org_pandora)|Pandora IPs.|ipv4 hash:net|1 subnets, 2048 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aevzidimyvwybzkletsg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pirate_bay](http://iplists.firehol.org/?ipset=iblocklist_org_pirate_bay)|The Pirate Bay IPs.|ipv4 hash:net|5 subnets, 323 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=nzldzlpkgrcncdomnttb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_punkbuster](http://iplists.firehol.org/?ipset=iblocklist_org_punkbuster)|Punkbuster IPs.|ipv4 hash:net|1 subnets, 1 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=zvwwndvzulqcltsicwdg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_riot_games](http://iplists.firehol.org/?ipset=iblocklist_org_riot_games)|Riot Games IPs.|ipv4 hash:net|6 subnets, 1792 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=sdlvfabdjvrdttfjotcy&fileformat=p2p&archiveformat=gz)
[iblocklist_org_sony_online](http://iplists.firehol.org/?ipset=iblocklist_org_sony_online)|Sony Online Entertainment IPs.|ipv4 hash:net|7 subnets, 24616 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tukpvrvlubsputmkmiwg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_square_enix](http://iplists.firehol.org/?ipset=iblocklist_org_square_enix)|Square Enix IPs.|ipv4 hash:net|2 subnets, 4112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=odyaqontcydnodrlyina&fileformat=p2p&archiveformat=gz)
[iblocklist_org_steam](http://iplists.firehol.org/?ipset=iblocklist_org_steam)|Steam IPs.|ipv4 hash:net|53 subnets, 596448 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cnxkgiklecdaihzukrud&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ubisoft](http://iplists.firehol.org/?ipset=iblocklist_org_ubisoft)|Ubisoft IPs.|ipv4 hash:net|10 subnets, 5308 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=etmcrglomupyxtaebzht&fileformat=p2p&archiveformat=gz)
[iblocklist_org_xfire](http://iplists.firehol.org/?ipset=iblocklist_org_xfire)|XFire IPs.|ipv4 hash:net|3 subnets, 3328 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ppqqnyihmcrryraaqsjo&fileformat=p2p&archiveformat=gz)
[iblocklist_pedophiles](http://iplists.firehol.org/?ipset=iblocklist_pedophiles)|IP ranges of people who we have found to be sharing child pornography in the p2p community.|ipv4 hash:net|29188 subnets, 847889 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=dufcxgnbjsdwmwctgfuj&fileformat=p2p&archiveformat=gz)
[iblocklist_proxies](http://iplists.firehol.org/?ipset=iblocklist_proxies)|Open Proxies IPs list (without TOR)|ipv4 hash:ip|672 unique IPs|updated every 12 hours
[iblocklist_rangetest](http://iplists.firehol.org/?ipset=iblocklist_rangetest)|Suspicious IPs that are under investigation.|ipv4 hash:net|576 subnets, 4280758 unique IPs|updated every 12 hours
[iblocklist_spamhaus_drop](http://iplists.firehol.org/?ipset=iblocklist_spamhaus_drop)|Spamhaus.org DROP (Don't Route Or Peer) list.|ipv4 hash:net|755 subnets, 18781952 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zbdlwrqkabxbcppvrnos&fileformat=p2p&archiveformat=gz)
[iblocklist_spider](http://iplists.firehol.org/?ipset=iblocklist_spider)|IP list intended to be used by webmasters to block hostile spiders from their web sites.|ipv4 hash:net|773 subnets, 846788 unique IPs|updated every 12 hours
[iblocklist_spyware](http://iplists.firehol.org/?ipset=iblocklist_spyware)|Known malicious SPYWARE and ADWARE IP Address ranges. It is compiled from various sources, including other available spyware blacklists, HOSTS files, from research found at many of the top anti-spyware forums, logs of spyware victims, etc.|ipv4 hash:net|3353 subnets, 334687 unique IPs|updated every 12 hours
[iblocklist_webexploit](http://iplists.firehol.org/?ipset=iblocklist_webexploit)|Web server hack and exploit attempts. IP addresses related to current web server hack and exploit attempts that have been logged or can be found in and cross referenced with other related IP databases. Malicious and other non search engine bots will also be listed here, along with anything found that can have a negative impact on a website or webserver such as proxies being used for negative SEO hijacks, unauthorised site mirroring, harvesting, scraping, snooping and data mining / spy bot / security & copyright enforcement companies that target and continuosly scan webservers.|ipv4 hash:ip|15382 unique IPs|updated every 12 hours
[iblocklist_yoyo_adservers](http://iplists.firehol.org/?ipset=iblocklist_yoyo_adservers)|pgl.yoyo.org ad servers|ipv4 hash:net|9829 subnets, 11480 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zhogegszwduurnvsyhdf&fileformat=p2p&archiveformat=gz)
[ip2location_country](https://github.com/ktsaou/blocklist-ipsets/tree/master/ip2location_country)|[IP2Location.com](http://lite.ip2location.com/database-ip-country) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_eh](http://iplists.firehol.org/?ipset=ip2location_country_eh)|Western Sahara (EH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sh](http://iplists.firehol.org/?ipset=ip2location_country_sh)|Saint Helena (SH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2proxy_px1lite](http://iplists.firehol.org/?ipset=ip2proxy_px1lite)|[IP2Location.com](https://lite.ip2location.com/database/px1-ip-country) IP2Proxy LITE IP-COUNTRY Database contains IP addresses which are used as public proxies. The LITE edition is a free version of database that is limited to public proxies IP address.|ipv4 hash:net|710388 subnets, 740060 unique IPs|updated every 1 day
[ipblacklistcloud_recent](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|32 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_1d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_1d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|32 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_30d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_30d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|685 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_7d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_7d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|184 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_top](http://iplists.firehol.org/?ipset=ipblacklistcloud_top)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the top IP addresses that have been blacklisted by many websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|232 unique IPs|updated every 1 day from [this link](http://www.ip-finder.me/ip-full-list/)
[ipdeny_country](https://github.com/firehol/blocklist-ipsets/tree/master/ipdeny_country)|[IPDeny.com](http://www.ipdeny.com/) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[iw_spamlist](http://iplists.firehol.org/?ipset=iw_spamlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending spam, in the last 3 days|ipv4 hash:ip|943 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/spamlist)
[iw_wormlist](http://iplists.firehol.org/?ipset=iw_wormlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending emails with viruses or worms, in the last 3 days|ipv4 hash:ip|0 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/wormlist)
[lashback_ubl](http://iplists.firehol.org/?ipset=lashback_ubl)|[The LashBack UBL](http://blacklist.lashback.com/) The Unsubscribe Blacklist (UBL) is a real-time blacklist of IP addresses which are sending email to names harvested from suppression files (this is a big list, more than 500.000 IPs)|ipv4 hash:ip|550159 unique IPs|updated every 1 day from [this link](http://www.unsubscore.com/blacklist.txt)
[malc0de](http://iplists.firehol.org/?ipset=malc0de)|[Malc0de.com](http://malc0de.com) malicious IPs of the last 30 days|ipv4 hash:ip|90 unique IPs|updated every 1 day from [this link](http://malc0de.com/bl/IP_Blacklist.txt)
[malwaredomainlist](http://iplists.firehol.org/?ipset=malwaredomainlist)|[malwaredomainlist.com](http://www.malwaredomainlist.com) list of malware active ip addresses|ipv4 hash:ip|1001 unique IPs|updated every 12 hours from [this link](http://www.malwaredomainlist.com/hostslist/ip.txt)
[maxmind_proxy_fraud](http://iplists.firehol.org/?ipset=maxmind_proxy_fraud)|[MaxMind.com](https://www.maxmind.com/en/high-risk-ip-sample-list) sample list of high-risk IP addresses.|ipv4 hash:ip|572 unique IPs|updated every 4 hours from [this link](https://www.maxmind.com/en/high-risk-ip-sample-list)
[myip](http://iplists.firehol.org/?ipset=myip)|[myip.ms](http://www.myip.ms/info/about) IPs identified as web bots in the last 10 days, using several sites that require human action|ipv4 hash:ip|2787 unique IPs|updated every 1 day from [this link](http://www.myip.ms/files/blacklist/csf/latest_blacklist.txt)
[nixspam](http://iplists.firehol.org/?ipset=nixspam)|[NiX Spam](http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html) IP addresses that sent spam in the last hour - automatically generated entries without distinguishing open proxies from relays, dialup gateways, and so on. All IPs are removed after 12 hours if there is no spam from there.|ipv4 hash:ip|8620 unique IPs|updated every 15 mins from [this link](http://www.dnsbl.manitu.net/download/nixspam-ip.dump.gz)
[normshield_all_attack](http://iplists.firehol.org/?ipset=normshield_all_attack)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category attack with severity all|ipv4 hash:ip|5265 unique IPs|updated every 12 hours
[normshield_all_bruteforce](http://iplists.firehol.org/?ipset=normshield_all_bruteforce)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category bruteforce with severity all|ipv4 hash:ip|3562 unique IPs|updated every 12 hours
[normshield_all_ddosbot](http://iplists.firehol.org/?ipset=normshield_all_ddosbot)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category ddosbot with severity all|ipv4 hash:ip|10 unique IPs|updated every 12 hours
[normshield_all_dnsscan](http://iplists.firehol.org/?ipset=normshield_all_dnsscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category dnsscan with severity all|ipv4 hash:ip|18 unique IPs|updated every 12 hours
[normshield_all_spam](http://iplists.firehol.org/?ipset=normshield_all_spam)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category spam with severity all|ipv4 hash:ip|60 unique IPs|updated every 12 hours
[normshield_all_suspicious](http://iplists.firehol.org/?ipset=normshield_all_suspicious)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category suspicious with severity all|ipv4 hash:ip|115 unique IPs|updated every 12 hours
[normshield_all_wannacry](http://iplists.firehol.org/?ipset=normshield_all_wannacry)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wannacry with severity all|ipv4 hash:ip|4824 unique IPs|updated every 12 hours
[normshield_all_webscan](http://iplists.firehol.org/?ipset=normshield_all_webscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category webscan with severity all|ipv4 hash:ip|1196 unique IPs|updated every 12 hours
[normshield_all_wormscan](http://iplists.firehol.org/?ipset=normshield_all_wormscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wormscan with severity all|ipv4 hash:ip|137 unique IPs|updated every 12 hours
[normshield_high_attack](http://iplists.firehol.org/?ipset=normshield_high_attack)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category attack with severity high|ipv4 hash:ip|5198 unique IPs|updated every 12 hours
[normshield_high_bruteforce](http://iplists.firehol.org/?ipset=normshield_high_bruteforce)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category bruteforce with severity high|ipv4 hash:ip|3535 unique IPs|updated every 12 hours
[normshield_high_ddosbot](http://iplists.firehol.org/?ipset=normshield_high_ddosbot)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category ddosbot with severity high|ipv4 hash:ip|10 unique IPs|updated every 12 hours
[normshield_high_dnsscan](http://iplists.firehol.org/?ipset=normshield_high_dnsscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category dnsscan with severity high|ipv4 hash:ip|18 unique IPs|updated every 12 hours
[normshield_high_spam](http://iplists.firehol.org/?ipset=normshield_high_spam)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category spam with severity high|ipv4 hash:ip|60 unique IPs|updated every 12 hours
[normshield_high_suspicious](http://iplists.firehol.org/?ipset=normshield_high_suspicious)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category suspicious with severity high|ipv4 hash:ip|115 unique IPs|updated every 12 hours
[normshield_high_wannacry](http://iplists.firehol.org/?ipset=normshield_high_wannacry)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wannacry with severity high|ipv4 hash:ip|4735 unique IPs|updated every 12 hours
[normshield_high_webscan](http://iplists.firehol.org/?ipset=normshield_high_webscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category webscan with severity high|ipv4 hash:ip|1154 unique IPs|updated every 12 hours
[normshield_high_wormscan](http://iplists.firehol.org/?ipset=normshield_high_wormscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wormscan with severity high|ipv4 hash:ip|136 unique IPs|updated every 12 hours
[nt_malware_dns](http://iplists.firehol.org/?ipset=nt_malware_dns)|[No Think](http://www.nothink.org/) Malware DNS (the original list includes hostnames and domains, which are ignored)|ipv4 hash:ip|235 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_dns.txt)
[nt_malware_http](http://iplists.firehol.org/?ipset=nt_malware_http)|[No Think](http://www.nothink.org/) Malware HTTP|ipv4 hash:ip|69 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_http.txt)
[nt_malware_irc](http://iplists.firehol.org/?ipset=nt_malware_irc)|[No Think](http://www.nothink.org/) Malware IRC|ipv4 hash:ip|42 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_irc.txt)
[nt_ssh_7d](http://iplists.firehol.org/?ipset=nt_ssh_7d)|[NoThink](http://www.nothink.org/) Last 7 days SSH attacks|ipv4 hash:ip|55 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_ssh_week.txt)
[nullsecure](http://iplists.firehol.org/?ipset=nullsecure)|[nullsecure.org](http://nullsecure.org/) This is a free threat feed provided for use in any acceptable manner. This feed was aggregated using the [Tango Honeypot Intelligence Splunk App](https://github.com/aplura/Tango) by Brian Warehime, a Senior Security Analyst at Defense Point Security.|ipv4 hash:ip|29439 unique IPs|updated every 8 hours from [this link](http://nullsecure.org/threatfeed/master.txt)
[packetmail](http://iplists.firehol.org/?ipset=packetmail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 206.82.85.196/30 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|3986 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep.txt)
[packetmail_emerging_ips](http://iplists.firehol.org/?ipset=packetmail_emerging_ips)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected as potentially of interest based on the number of unique users of the packetmail IP Reputation system. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|26 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_emerging_ips.txt)
[packetmail_mail](http://iplists.firehol.org/?ipset=packetmail_mail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing behavior not in compliance with the requirements this system enforces for email acceptance. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|73 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_mail.txt)
[packetmail_ramnode](http://iplists.firehol.org/?ipset=packetmail_ramnode)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 81.4.103.251 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|2502 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_ramnode.txt)
php_bad|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) bad web hosts (this list is composed using an RSS feed)|ipv4 hash:ip|disabled|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=b&rss=1)
[php_commenters](http://iplists.firehol.org/?ipset=php_commenters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_1d](http://iplists.firehol.org/?ipset=php_commenters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_30d](http://iplists.firehol.org/?ipset=php_commenters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|1152 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_7d](http://iplists.firehol.org/?ipset=php_commenters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|305 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_dictionary](http://iplists.firehol.org/?ipset=php_dictionary)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_1d](http://iplists.firehol.org/?ipset=php_dictionary_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|98 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_30d](http://iplists.firehol.org/?ipset=php_dictionary_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|1165 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_7d](http://iplists.firehol.org/?ipset=php_dictionary_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|355 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_harvesters](http://iplists.firehol.org/?ipset=php_harvesters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_1d](http://iplists.firehol.org/?ipset=php_harvesters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|81 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_30d](http://iplists.firehol.org/?ipset=php_harvesters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|601 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_7d](http://iplists.firehol.org/?ipset=php_harvesters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|186 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_spammers](http://iplists.firehol.org/?ipset=php_spammers)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_1d](http://iplists.firehol.org/?ipset=php_spammers_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|98 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_30d](http://iplists.firehol.org/?ipset=php_spammers_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|1209 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_7d](http://iplists.firehol.org/?ipset=php_spammers_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|361 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[proxylists](http://iplists.firehol.org/?ipset=proxylists)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|6902 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_1d](http://iplists.firehol.org/?ipset=proxylists_1d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|9006 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_30d](http://iplists.firehol.org/?ipset=proxylists_30d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|14900 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_7d](http://iplists.firehol.org/?ipset=proxylists_7d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|11020 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxyrss](http://iplists.firehol.org/?ipset=proxyrss)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|4878 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_1d](http://iplists.firehol.org/?ipset=proxyrss_1d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|6275 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_30d](http://iplists.firehol.org/?ipset=proxyrss_30d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|11064 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_7d](http://iplists.firehol.org/?ipset=proxyrss_7d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|7848 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyspy_1d](http://iplists.firehol.org/?ipset=proxyspy_1d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|300 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_30d](http://iplists.firehol.org/?ipset=proxyspy_30d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|6720 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_7d](http://iplists.firehol.org/?ipset=proxyspy_7d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|2828 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxz](http://iplists.firehol.org/?ipset=proxz)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|26 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_1d](http://iplists.firehol.org/?ipset=proxz_1d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|208 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_30d](http://iplists.firehol.org/?ipset=proxz_30d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|2491 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_7d](http://iplists.firehol.org/?ipset=proxz_7d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|889 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[pushing_inertia_blocklist](http://iplists.firehol.org/?ipset=pushing_inertia_blocklist)|[Pushing Inertia](https://github.com/pushinginertia/ip-blacklist) IPs of hosting providers that are known to host various bots, spiders, scrapers, etc. to block access from these providers to web servers.|ipv4 hash:net|879 subnets, 34512268 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/pushinginertia/ip-blacklist/master/ip_blacklist.conf)
[ransomware_cryptowall_ps](http://iplists.firehol.org/?ipset=ransomware_cryptowall_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is CW_PS_IPBL: CryptoWall Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|0 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/CW_PS_IPBL.txt)
[ransomware_feed](http://iplists.firehol.org/?ipset=ransomware_feed)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. The IPs in this list have been extracted from the tracker data feed.|ipv4 hash:ip|4833 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_locky_c2](http://iplists.firehol.org/?ipset=ransomware_locky_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is LY_C2_IPBL: Locky Ransomware C2 URL blocklist.|ipv4 hash:ip|320 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_C2_IPBL.txt)
[ransomware_locky_ps](http://iplists.firehol.org/?ipset=ransomware_locky_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is LY_PS_IPBL: Locky Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_PS_IPBL.txt)
[ransomware_online](http://iplists.firehol.org/?ipset=ransomware_online)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. The IPs in this list have been extracted from the tracker data feed, filtering only online IPs.|ipv4 hash:ip|24 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_rw](http://iplists.firehol.org/?ipset=ransomware_rw)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list includes TC_PS_IPBL, LY_C2_IPBL, TL_C2_IPBL, TL_PS_IPBL and it is the recommended blocklist. It might not catch everything, but the false positive rate should be low. However, false positives are possible, especially with regards to RW_IPBL. IP addresses associated with Ransomware Payment Sites (*_PS_IPBL) or Locky botnet C&Cs (LY_C2_IPBL) stay listed on RW_IPBL for a time of 30 days after the last appearance. This means that an IP address stays listed on RW_IPBL even after the threat has been eliminated (e.g. the VPS / server has been suspended by the hosting provider) for another 30 days.|ipv4 hash:ip|315 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt)
[ransomware_teslacrypt_ps](http://iplists.firehol.org/?ipset=ransomware_teslacrypt_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TC_PS_IPBL: TeslaCrypt Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|0 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TC_PS_IPBL.txt)
[ransomware_torrentlocker_c2](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TL_C2_IPBL: TorrentLocker Ransomware C2 IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_C2_IPBL.txt)
[ransomware_torrentlocker_ps](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TL_PS_IPBL: TorrentLocker Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_PS_IPBL.txt)
[ri_connect_proxies](http://iplists.firehol.org/?ipset=ri_connect_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_1d](http://iplists.firehol.org/?ipset=ri_connect_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_30d](http://iplists.firehol.org/?ipset=ri_connect_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_7d](http://iplists.firehol.org/?ipset=ri_connect_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_web_proxies](http://iplists.firehol.org/?ipset=ri_web_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_1d](http://iplists.firehol.org/?ipset=ri_web_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_30d](http://iplists.firehol.org/?ipset=ri_web_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_7d](http://iplists.firehol.org/?ipset=ri_web_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[sblam](http://iplists.firehol.org/?ipset=sblam)|[sblam.com](http://sblam.com) IPs used by web form spammers, during the last month|ipv4 hash:ip|12923 unique IPs|updated every 1 day from [this link](http://sblam.com/blacklist.txt)
[shunlist](http://iplists.firehol.org/?ipset=shunlist)|[AutoShun.org](http://autoshun.org/) IPs identified as hostile by correlating logs from distributed snort installations running the autoshun plugin|ipv4 hash:ip|500 unique IPs|updated every 4 hours
[snort_ipfilter](http://iplists.firehol.org/?ipset=snort_ipfilter)|[labs.snort.org](https://labs.snort.org/) supplied IP blacklist (this list seems to be updated frequently, but we found no information about it)|ipv4 hash:ip|1571 unique IPs|updated every 12 hours from [this link](http://labs.snort.org/feeds/ip-filter.blf)
[socks_proxy](http://iplists.firehol.org/?ipset=socks_proxy)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|80 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_1d](http://iplists.firehol.org/?ipset=socks_proxy_1d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|5614 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_30d](http://iplists.firehol.org/?ipset=socks_proxy_30d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|33973 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_7d](http://iplists.firehol.org/?ipset=socks_proxy_7d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|16444 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[sorbs_anonymizers](http://iplists.firehol.org/?ipset=sorbs_anonymizers)|[Sorbs.net](https://www.sorbs.net/) List of open HTTP and SOCKS proxies.|ipv4 hash:net|597391 subnets, 610263 unique IPs|updated every 1 min
sorbs_block|[Sorbs.net](https://www.sorbs.net/) List of hosts demanding that they never be tested by SORBS.|ipv4 hash:net|disabled|
[sorbs_dul](http://iplists.firehol.org/?ipset=sorbs_dul)|[Sorbs.net](https://www.sorbs.net/) Dynamic IP Addresses.|ipv4 hash:net|607718 subnets, 375474210 unique IPs|updated every 1 min
[sorbs_escalations](http://iplists.firehol.org/?ipset=sorbs_escalations)|[Sorbs.net](https://www.sorbs.net/) Netblocks of spam supporting service providers, including those who provide websites, DNS or drop boxes for a spammer. Spam supporters are added on a 'third strike and you are out' basis, where the third spam will cause the supporter to be added to the list.|ipv4 hash:net|8 subnets, 2304 unique IPs|updated every 1 min
[sorbs_new_spam](http://iplists.firehol.org/?ipset=sorbs_new_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 48 hours|ipv4 hash:net|33977 subnets, 35967 unique IPs|updated every 1 min
[sorbs_noserver](http://iplists.firehol.org/?ipset=sorbs_noserver)|[Sorbs.net](https://www.sorbs.net/) IP addresses and netblocks of where system administrators and ISPs owning the network have indicated that servers should not be present.|ipv4 hash:net|15066 subnets, 22951270 unique IPs|updated every 1 min
[sorbs_recent_spam](http://iplists.firehol.org/?ipset=sorbs_recent_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 28 days (includes sorbs_new_spam)|ipv4 hash:net|522240 subnets, 555438 unique IPs|updated every 1 min
[sorbs_smtp](http://iplists.firehol.org/?ipset=sorbs_smtp)|[Sorbs.net](https://www.sorbs.net/) List of SMTP Open Relays.|ipv4 hash:net|1968 subnets, 1976 unique IPs|updated every 1 min
[sorbs_web](http://iplists.firehol.org/?ipset=sorbs_web)|[Sorbs.net](https://www.sorbs.net/) List of IPs which have spammer abusable vulnerabilities (e.g. FormMail scripts)|ipv4 hash:net|5895259 subnets, 6375029 unique IPs|updated every 1 min
[sorbs_zombie](http://iplists.firehol.org/?ipset=sorbs_zombie)|[Sorbs.net](https://www.sorbs.net/) List of networks hijacked from their original owners, some of which have already used for spamming.|ipv4 hash:net|78 subnets, 1903876 unique IPs|updated every 1 min
[spamhaus_drop](http://iplists.firehol.org/?ipset=spamhaus_drop)|[Spamhaus.org](http://www.spamhaus.org) DROP list (according to their site this list should be dropped at tier-1 ISPs globally)|ipv4 hash:net|756 subnets, 18782976 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/drop.txt)
[spamhaus_edrop](http://iplists.firehol.org/?ipset=spamhaus_edrop)|[Spamhaus.org](http://www.spamhaus.org) EDROP (extended matches that should be used with DROP)|ipv4 hash:net|95 subnets, 969472 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/edrop.txt)
[sslbl](http://iplists.firehol.org/?ipset=sslbl)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) bad SSL traffic related to malware or botnet activities|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist.csv)
[sslbl_aggressive](http://iplists.firehol.org/?ipset=sslbl_aggressive)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) The aggressive version of the SSL IP Blacklist contains all IPs that SSLBL ever detected being associated with a malicious SSL certificate. Since IP addresses can be reused (e.g. when the customer changes), this blacklist may cause false positives. Hence I highly recommend you to use the standard version instead of the aggressive one.|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.csv)
[sslproxies](http://iplists.firehol.org/?ipset=sslproxies)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|100 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_1d](http://iplists.firehol.org/?ipset=sslproxies_1d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|2547 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_30d](http://iplists.firehol.org/?ipset=sslproxies_30d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|16492 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_7d](http://iplists.firehol.org/?ipset=sslproxies_7d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|9554 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[stopforumspam](http://iplists.firehol.org/?ipset=stopforumspam)|[StopForumSpam.com](http://www.stopforumspam.com) Banned IPs used by forum spammers|ipv4 hash:ip|200007 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/bannedips.zip)
[stopforumspam_180d](http://iplists.firehol.org/?ipset=stopforumspam_180d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 180 days)|ipv4 hash:ip|286918 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_180.zip)
[stopforumspam_1d](http://iplists.firehol.org/?ipset=stopforumspam_1d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers in the last 24 hours|ipv4 hash:ip|12334 unique IPs|updated every 1 hour from [this link](http://www.stopforumspam.com/downloads/listed_ip_1.zip)
[stopforumspam_30d](http://iplists.firehol.org/?ipset=stopforumspam_30d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 30 days)|ipv4 hash:ip|88094 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_30.zip)
[stopforumspam_365d](http://iplists.firehol.org/?ipset=stopforumspam_365d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 365 days)|ipv4 hash:ip|372317 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_365.zip)
[stopforumspam_7d](http://iplists.firehol.org/?ipset=stopforumspam_7d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 7 days)|ipv4 hash:ip|34764 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_7.zip)
[stopforumspam_90d](http://iplists.firehol.org/?ipset=stopforumspam_90d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 90 days)|ipv4 hash:ip|201850 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_90.zip)
[stopforumspam_toxic](http://iplists.firehol.org/?ipset=stopforumspam_toxic)|[StopForumSpam.com](http://www.stopforumspam.com) Networks that have large amounts of spambots and are flagged as toxic. Toxic IP ranges are infrequently changed.|ipv4 hash:net|85 subnets, 520803 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/toxic_ip_cidr.txt)
[taichung](http://iplists.firehol.org/?ipset=taichung)|[Taichung Education Center](https://www.tc.edu.tw/net/netflow/lkout/recent/30) Blocked IP Addresses (attacks and bots).|ipv4 hash:ip|9891 unique IPs|updated every 1 day from [this link](https://www.tc.edu.tw/net/netflow/lkout/recent/30)
[talosintel_ipfilter](http://iplists.firehol.org/?ipset=talosintel_ipfilter)|[TalosIntel.com](http://talosintel.com/additional-resources/) List of known malicious network threats|ipv4 hash:ip|1566 unique IPs|updated every 15 mins from [this link](http://talosintel.com/feeds/ip-filter.blf)
[threatcrowd](http://iplists.firehol.org/?ipset=threatcrowd)|[Crowdsourced IP feed from ThreatCrowd](http://threatcrowd.blogspot.gr/2016/02/crowdsourced-feeds-from-threatcrowd.html). These feeds are not a substitute for the scale of auto-extracted command and control domains or the quality of some commercially provided feeds. But crowd-sourcing does go some way towards the quick sharing of threat intelligence between the community.|ipv4 hash:ip|977 unique IPs|updated every 1 hour from [this link](https://www.threatcrowd.org/feeds/ips.txt)
[tor_exits](http://iplists.firehol.org/?ipset=tor_exits)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|880 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_1d](http://iplists.firehol.org/?ipset=tor_exits_1d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|915 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_30d](http://iplists.firehol.org/?ipset=tor_exits_30d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1737 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_7d](http://iplists.firehol.org/?ipset=tor_exits_7d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1080 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[turris_greylist](http://iplists.firehol.org/?ipset=turris_greylist)|[Turris Greylist](https://www.turris.cz/en/greylist) IPs that are blocked on the firewalls of Turris routers. The data is processed and clasified every week and behaviour of IP addresses that accessed a larger number of Turris routers is evaluated. The result is a list of addresses that have tried to obtain information about services on the router or tried to gain access to them. We do not recommend to use these data as a list of addresses that should be blocked but it can be used for example in analysis of the traffic in other networks.|ipv4 hash:ip|22563 unique IPs|updated every 7 days from [this link](https://www.turris.cz/greylist-data/greylist-latest.csv)
[urandomusto_dns](http://iplists.firehol.org/?ipset=urandomusto_dns)|IP Feed about dns, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|67 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=dns&out=txt&submit=go)
[urandomusto_ftp](http://iplists.firehol.org/?ipset=urandomusto_ftp)|IP Feed about ftp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|152 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ftp&out=txt&submit=go)
[urandomusto_http](http://iplists.firehol.org/?ipset=urandomusto_http)|IP Feed about http, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|289 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=http&out=txt&submit=go)
[urandomusto_mailer](http://iplists.firehol.org/?ipset=urandomusto_mailer)|IP Feed about mailer, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|259 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=mailer&out=txt&submit=go)
[urandomusto_malware](http://iplists.firehol.org/?ipset=urandomusto_malware)|IP Feed about malware, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|1 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=malware&out=txt&submit=go)
[urandomusto_ntp](http://iplists.firehol.org/?ipset=urandomusto_ntp)|IP Feed about ntp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|72 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ntp&out=txt&submit=go)
[urandomusto_rdp](http://iplists.firehol.org/?ipset=urandomusto_rdp)|IP Feed about rdp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|133 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=rdp&out=txt&submit=go)
[urandomusto_smb](http://iplists.firehol.org/?ipset=urandomusto_smb)|IP Feed about smb, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|45 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=smb&out=txt&submit=go)
[urandomusto_spam](http://iplists.firehol.org/?ipset=urandomusto_spam)|IP Feed about spam, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|4 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=spam&out=txt&submit=go)
[urandomusto_ssh](http://iplists.firehol.org/?ipset=urandomusto_ssh)|IP Feed about ssh, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|126 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ssh&out=txt&submit=go)
[urandomusto_telnet](http://iplists.firehol.org/?ipset=urandomusto_telnet)|IP Feed about telnet, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|299 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=telnet&out=txt&submit=go)
[urandomusto_unspecified](http://iplists.firehol.org/?ipset=urandomusto_unspecified)|IP Feed about unspecified, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|178 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=unspecified&out=txt&submit=go)
[urandomusto_vnc](http://iplists.firehol.org/?ipset=urandomusto_vnc)|IP Feed about vnc, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|27 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=vnc&out=txt&submit=go)
[urlvir](http://iplists.firehol.org/?ipset=urlvir)|[URLVir.com](http://www.urlvir.com/) Active Malicious IP Addresses Hosting Malware. URLVir is an online security service developed by NoVirusThanks Company Srl that automatically monitors changes of malicious URLs (executable files).|ipv4 hash:ip|354 unique IPs|updated every 1 day from [this link](http://www.urlvir.com/export-ip-addresses/)
[uscert_hidden_cobra](http://iplists.firehol.org/?ipset=uscert_hidden_cobra)|Since 2009, HIDDEN COBRA actors have leveraged their capabilities to target and compromise a range of victims; some intrusions have resulted in the exfiltration of data while others have been disruptive in nature. Commercial reporting has referred to this activity as Lazarus Group and Guardians of Peace. DHS and FBI assess that HIDDEN COBRA actors will continue to use cyber operations to advance their government’s military and strategic objectives. Tools and capabilities used by HIDDEN COBRA actors include DDoS botnets, keyloggers, remote access tools (RATs), and wiper malware. Variants of malware and tools used by HIDDEN COBRA actors include Destover, Wild Positron/Duuzer and Hangman.|ipv4 hash:ip|627 unique IPs|updated every 1 day from [this link](https://www.us-cert.gov/sites/default/files/publications/TA-17-164A_csv.csv)
[voipbl](http://iplists.firehol.org/?ipset=voipbl)|[VoIPBL.org](http://www.voipbl.org/) a distributed VoIP blacklist that is aimed to protects against VoIP Fraud and minimizing abuse for network that have publicly accessible PBX's. Several algorithms, external sources and manual confirmation are used before they categorize something as an attack and determine the threat level.|ipv4 hash:net|56576 subnets, 61578 unique IPs|updated every 4 hours from [this link](http://www.voipbl.org/update/)
[vxvault](http://iplists.firehol.org/?ipset=vxvault)|[VxVault](http://vxvault.net) The latest 100 additions of VxVault.|ipv4 hash:ip|65 unique IPs|updated every 12 hours from [this link](http://vxvault.net/ViriList.php?s=0&m=100)
[xforce_bccs](http://iplists.firehol.org/?ipset=xforce_bccs)|[IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/) Botnet Command and Control Servers|ipv4 hash:ip|396 unique IPs|updated every 1 day from [this link](https://api.xforce.ibmcloud.com/taxii)
[xroxy](http://iplists.firehol.org/?ipset=xroxy)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|65 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_1d](http://iplists.firehol.org/?ipset=xroxy_1d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|103 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_30d](http://iplists.firehol.org/?ipset=xroxy_30d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|346 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_7d](http://iplists.firehol.org/?ipset=xroxy_7d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|181 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[yoyo_adservers](http://iplists.firehol.org/?ipset=yoyo_adservers)|[Yoyo.org](http://pgl.yoyo.org/adservers/) IPs of ad servers|ipv4 hash:ip|11480 unique IPs|updated every 12 hours from [this link](http://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext)
[zeus](http://iplists.firehol.org/?ipset=zeus)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) standard, contains the same data as the ZeuS IP blocklist (zeus_badips) but with the slight difference that it doesn't exclude hijacked websites (level 2) and free web hosting providers (level 3). This means that this blocklist contains all IPv4 addresses associated with ZeuS C&Cs which are currently being tracked by ZeuS Tracker. Hence this blocklist will likely cause some false positives.|ipv4 hash:ip|113 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist)
[zeus_badips](http://iplists.firehol.org/?ipset=zeus_badips)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) badips includes IPv4 addresses that are used by the ZeuS trojan. It is the recommened blocklist if you want to block only ZeuS IPs. It excludes IP addresses that ZeuS Tracker believes to be hijacked (level 2) or belong to a free web hosting provider (level 3). Hence the false postive rate should be much lower compared to the standard ZeuS IP blocklist.|ipv4 hash:ip|108 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=badips)

70126
alienvault_reputation.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

30
asprox_c2.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# asprox_c2
#
# ipv4 hash:ip ipset
#
# [h3x.eu] (http://atrack.h3x.eu/) ASPROX Tracker - Asprox
# C&C Sites
#
# Maintainer : h3x.eu
# Maintainer URL : http://atrack.h3x.eu/
# List source URL : http://atrack.h3x.eu/c2
# Source File Date: Mon Nov 6 03:04:11 UTC 2017
#
# Category : malware
# Version : 1
#
# This File Date : Sun Jun 3 05:36:21 UTC 2018
# Update Frequency: 1 day
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=asprox_c2
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

138
bambenek_banjori.ipset Normal file
View File

@ -0,0 +1,138 @@
#
# bambenek_banjori
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of banjori C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt
# Source File Date: Wed Jan 23 11:05:48 UTC 2019
#
# Category : malware
# Version : 5242
#
# This File Date : Wed Jan 23 11:20:53 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 107 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_banjori
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.89.20.107
23.89.102.179
23.105.99.15
23.107.124.53
23.236.62.147
23.245.61.250
31.11.33.228
43.230.142.125
43.241.196.105
52.25.92.0
52.58.78.16
52.78.124.149
62.149.142.219
64.95.103.185
67.55.92.182
67.55.92.183
74.208.236.219
74.220.199.8
74.220.207.152
78.24.9.52
78.46.156.194
80.113.169.69
81.169.145.88
81.169.145.159
81.169.145.160
81.169.145.161
83.137.194.79
85.158.203.201
96.30.52.60
103.70.226.182
103.71.236.189
103.254.148.124
104.18.56.87
104.18.57.87
104.171.24.25
104.171.24.26
104.238.71.250
106.187.51.202
107.160.183.81
107.174.152.88
107.175.239.2
107.180.20.91
108.59.12.98
108.59.12.99
108.59.12.100
108.187.67.6
109.70.4.246
109.71.51.55
112.78.125.29
112.121.187.246
112.127.77.125
119.23.127.213
119.188.157.23
121.40.153.149
122.10.99.22
122.114.232.40
123.1.194.96
123.254.108.81
130.211.40.170
133.242.195.32
134.73.61.187
134.73.227.39
142.234.174.47
149.255.58.42
150.95.255.38
154.94.125.9
156.233.65.197
156.233.139.8
158.69.254.60
162.210.102.66
162.255.119.180
163.44.191.38
173.233.72.39
173.239.23.228
178.22.59.66
184.168.131.241
184.168.221.96
186.202.153.222
192.169.243.26
192.190.87.140
193.222.100.37
196.22.132.17
198.23.48.104
198.38.82.115
198.38.83.24
198.71.233.87
199.58.179.10
199.168.185.2
202.124.241.178
202.181.97.76
202.254.234.152
203.156.192.80
204.11.56.48
208.73.210.202
208.73.210.217
208.73.211.165
208.73.211.177
208.109.80.14
212.12.54.87
213.186.33.5
216.40.47.17
216.120.247.66
217.26.53.16
217.26.63.20
217.70.184.38
219.118.71.121
219.235.5.224

31
bambenek_bebloh.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_bebloh
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of bebloh C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt
# Source File Date: Thu Jun 7 00:02:37 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:33 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_bebloh
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

492
bambenek_c2.ipset Normal file
View File

@ -0,0 +1,492 @@
#
# bambenek_c2
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) master feed of
# known, active and non-sinkholed C&Cs IP addresses
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt
# Source File Date: Wed Jan 23 11:11:12 UTC 2019
#
# Category : malware
# Version : 5524
#
# This File Date : Wed Jan 23 11:20:53 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 461 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_c2
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.79.79.210
5.79.79.211
5.79.79.212
18.213.250.117
18.215.128.143
23.20.239.12
23.88.226.74
23.89.20.107
23.89.102.68
23.89.102.179
23.105.99.15
23.107.124.53
23.236.62.147
23.245.61.250
24.62.118.13
31.11.33.228
31.186.169.41
31.192.228.197
34.197.76.50
34.225.182.233
35.170.58.11
35.184.193.177
35.187.36.248
35.225.106.34
35.225.160.245
37.9.175.13
37.97.254.27
39.109.7.240
40.255.0.62
43.230.142.125
43.241.196.105
45.41.94.151
45.194.132.201
45.194.179.185
45.227.252.56
46.8.21.103
46.16.61.114
46.28.2.13
46.28.105.107
46.30.213.62
46.30.213.198
46.30.213.254
46.30.215.2
46.30.215.194
46.151.97.7
46.165.220.141
46.165.220.142
46.165.220.143
46.165.220.144
46.165.220.145
46.165.220.146
46.165.220.147
46.165.220.148
46.165.220.149
46.165.220.150
46.165.220.151
46.165.220.152
46.165.220.153
46.165.220.154
46.165.220.155
46.165.221.136
46.165.221.144
46.165.221.154
46.165.229.164
46.165.229.165
46.165.229.166
46.165.229.167
46.165.254.193
46.165.254.194
46.165.254.195
46.165.254.196
46.165.254.197
46.165.254.198
46.165.254.199
46.165.254.200
46.165.254.201
46.165.254.202
46.165.254.203
46.165.254.204
46.165.254.205
46.165.254.206
46.165.254.207
46.165.254.208
46.165.254.209
46.165.254.210
46.165.254.211
46.165.254.212
46.165.254.213
46.165.254.214
46.249.43.105
50.3.238.206
50.63.95.1
52.0.217.44
52.4.209.250
52.17.170.144
52.25.92.0
52.58.78.16
52.78.124.149
52.209.56.252
58.76.184.4
62.129.200.14
62.149.128.72
62.149.128.74
62.149.128.151
62.149.128.154
62.149.128.157
62.149.128.160
62.149.128.163
62.149.128.166
62.149.142.219
62.153.122.95
62.197.128.123
63.251.126.12
64.21.149.167
64.95.103.185
65.15.185.179
66.29.58.119
66.47.75.49
66.70.187.244
66.96.149.31
66.147.244.100
66.215.138.51
67.55.92.182
67.55.92.183
67.55.121.97
67.59.157.51
67.159.249.209
67.167.75.86
67.195.197.76
68.178.213.61
69.41.162.77
69.55.47.83
69.195.124.70
70.223.178.114
71.47.126.177
74.208.236.219
74.220.199.8
74.220.207.152
75.5.255.185
77.55.97.141
77.87.198.232
78.24.9.52
78.46.156.194
78.47.106.15
79.98.25.1
79.170.40.236
80.85.86.6
80.113.169.69
80.237.132.180
81.2.194.62
81.2.194.128
81.2.194.176
81.95.96.29
81.169.145.68
81.169.145.84
81.169.145.88
81.169.145.94
81.169.145.105
81.169.145.159
81.169.145.160
81.169.145.161
81.177.165.51
82.64.11.138
82.98.135.43
82.100.220.53
82.112.184.197
83.137.194.79
84.38.228.119
84.234.64.242
85.13.129.76
85.13.132.239
85.114.135.128
85.128.128.104
85.128.151.58
85.128.219.198
85.158.203.201
85.214.112.103
85.214.136.11
85.214.228.140
85.236.47.218
87.98.154.146
87.98.230.60
88.198.56.106
88.214.194.86
89.19.236.133
89.31.143.1
89.31.143.20
89.42.219.208
89.223.109.60
91.121.59.137
91.121.154.229
91.121.208.116
91.195.240.82
91.195.240.240
91.196.124.119
91.199.77.50
91.212.28.29
91.240.216.11
92.43.203.171
92.61.39.239
93.90.146.101
93.94.226.29
93.185.103.42
93.189.40.79
93.190.48.3
93.237.137.27
94.126.40.154
94.136.40.51
94.152.8.56
96.30.52.60
98.124.199.9
103.18.109.71
103.21.59.201
103.70.226.182
103.71.236.189
103.224.212.222
103.254.148.124
104.18.56.87
104.18.57.87
104.24.106.18
104.24.107.18
104.27.168.113
104.27.169.113
104.27.180.17
104.27.181.17
104.31.88.58
104.31.89.58
104.48.89.227
104.133.123.3
104.171.24.25
104.171.24.26
104.238.71.250
105.77.21.39
106.29.45.194
106.93.52.99
106.187.51.202
106.213.254.69
107.160.183.81
107.172.147.54
107.174.152.88
107.175.239.2
107.180.20.91
107.180.50.163
108.59.12.98
108.59.12.99
108.59.12.100
108.85.8.196
108.165.237.195
108.167.189.107
108.187.67.6
108.205.158.65
109.70.4.246
109.71.51.55
109.95.158.17
109.189.115.0
109.197.221.199
109.213.51.37
109.248.250.216
110.133.204.100
111.109.89.35
111.197.4.2
112.78.125.29
112.121.187.246
112.124.180.106
112.127.77.125
116.126.87.59
119.23.127.213
119.188.157.23
121.40.153.149
121.254.178.252
122.10.99.22
122.114.232.40
123.1.194.96
123.254.108.81
130.211.40.170
133.242.195.32
134.73.61.187
134.73.227.39
139.59.59.137
139.162.216.181
141.8.225.31
141.8.230.20
141.105.126.87
142.234.174.47
143.215.15.199
146.148.34.125
149.216.106.61
149.255.58.42
150.95.255.38
151.139.240.29
154.82.51.92
154.94.125.9
154.95.233.57
156.233.65.197
156.233.139.8
157.7.107.168
157.7.107.194
158.69.254.60
159.253.25.197
159.253.28.197
160.153.57.198
162.210.102.66
162.220.63.115
162.251.21.104
162.255.119.71
162.255.119.180
163.44.191.38
163.172.86.124
165.160.13.20
165.160.15.20
166.62.73.3
166.78.34.98
173.205.126.156
173.231.184.54
173.233.72.39
173.239.5.6
173.239.8.164
173.239.23.228
176.9.7.211
176.56.237.128
178.22.59.66
178.32.208.147
178.254.10.14
180.101.125.67
183.110.225.165
184.154.12.237
184.168.131.241
184.168.221.96
184.168.221.104
185.5.53.11
185.22.152.93
185.51.65.84
185.53.178.6
185.66.237.14
185.114.108.15
185.134.245.113
185.159.129.140
185.183.8.67
185.197.75.35
185.211.246.124
185.211.247.61
185.230.60.173
185.254.94.130
186.202.153.222
188.165.143.5
191.5.59.60
192.64.147.231
192.74.247.68
192.163.177.138
192.169.243.26
192.190.87.140
192.255.247.45
193.146.253.36
193.146.253.39
193.222.100.37
194.9.94.85
194.9.94.86
194.58.56.35
194.58.56.144
194.87.96.153
194.87.109.215
194.150.113.18
194.150.113.50
194.242.61.31
195.8.208.58
195.110.124.188
196.22.132.17
198.23.48.104
198.38.82.115
198.38.83.24
198.49.23.144
198.49.23.145
198.54.115.163
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
198.57.151.37
198.71.233.87
198.95.37.93
198.185.159.144
198.185.159.145
198.187.30.249
199.58.179.10
199.168.185.2
199.191.50.185
202.124.241.178
202.160.130.38
202.181.97.76
202.254.234.152
203.156.192.80
204.11.56.48
205.178.189.129
206.189.61.126
206.248.141.199
207.10.232.16
207.10.232.21
208.73.210.202
208.73.210.217
208.73.211.165
208.73.211.177
208.75.250.50
208.83.136.86
208.91.197.66
208.91.197.91
208.91.197.132
208.109.80.14
209.99.40.219
209.99.40.220
209.99.64.43
209.140.30.61
209.160.65.66
210.56.58.147
210.172.183.32
211.43.203.53
212.12.54.87
212.57.32.63
212.85.106.71
212.227.247.63
213.186.33.5
213.247.47.190
216.21.239.197
216.40.47.17
216.120.247.66
217.19.237.54
217.20.116.129
217.20.116.130
217.20.116.131
217.20.116.132
217.20.116.133
217.20.116.134
217.20.116.135
217.20.116.136
217.20.116.137
217.20.116.138
217.20.116.139
217.20.116.140
217.20.116.141
217.20.116.142
217.20.116.143
217.20.116.149
217.20.116.150
217.20.116.151
217.26.53.16
217.26.63.20
217.70.184.38
217.76.156.252
217.160.0.27
217.160.0.28
217.160.0.59
217.160.0.74
217.160.0.169
217.160.0.225
217.160.0.239
217.160.122.61
217.160.233.84
219.118.71.121
219.235.5.224
220.124.143.34
225.10.85.91
228.66.141.189

31
bambenek_cl.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_cl
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of cl C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/cl-iplist.txt
# Source File Date: Fri Dec 14 00:05:01 UTC 2018
#
# Category : malware
# Version : 18
#
# This File Date : Fri Dec 14 00:08:08 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_cl
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_cryptowall.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_cryptowall
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of cryptowall C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/cryptowall-iplist.txt
# Source File Date: Thu Dec 3 12:25:05 UTC 2015
#
# Category : malware
# Version : 5
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_cryptowall
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

35
bambenek_dircrypt.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bambenek_dircrypt
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of dircrypt C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt
# Source File Date: Thu Jan 17 09:07:45 UTC 2019
#
# Category : malware
# Version : 54
#
# This File Date : Thu Jan 17 09:13:40 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_dircrypt
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.225.160.245
45.194.179.185
63.251.126.12
192.74.247.68

31
bambenek_dyre.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_dyre
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of dyre C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt
# Source File Date: Thu Jun 7 00:03:08 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_dyre
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_geodo.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_geodo
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of geodo C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt
# Source File Date: Thu Jun 7 00:02:33 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_geodo
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

32
bambenek_hesperbot.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bambenek_hesperbot
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of hesperbot C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt
# Source File Date: Thu Jan 17 09:02:25 UTC 2019
#
# Category : malware
# Version : 50
#
# This File Date : Thu Jan 17 09:04:32 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_hesperbot
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
63.251.126.12

35
bambenek_matsnu.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bambenek_matsnu
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of matsnu C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt
# Source File Date: Mon Jan 21 03:01:26 UTC 2019
#
# Category : malware
# Version : 97
#
# This File Date : Mon Jan 21 03:04:29 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_matsnu
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
198.49.23.144
198.49.23.145
198.185.159.144
198.185.159.145

59
bambenek_necurs.ipset Normal file
View File

@ -0,0 +1,59 @@
#
# bambenek_necurs
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of necurs C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt
# Source File Date: Wed Jan 23 08:06:14 UTC 2019
#
# Category : malware
# Version : 2712
#
# This File Date : Wed Jan 23 08:16:22 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 28 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_necurs
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
65.15.185.179
66.47.75.49
66.215.138.51
67.159.249.209
67.167.75.86
69.55.47.83
70.223.178.114
71.47.126.177
104.48.89.227
104.133.123.3
105.77.21.39
106.29.45.194
106.93.52.99
106.213.254.69
108.85.8.196
108.165.237.195
108.205.158.65
109.189.115.0
109.197.221.199
109.213.51.37
110.133.204.100
111.109.89.35
111.197.4.2
198.95.37.93
202.160.130.38
206.248.141.199
225.10.85.91
228.66.141.189

31
bambenek_p2pgoz.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_p2pgoz
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of p2pgoz C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt
# Source File Date: Wed Jan 23 04:00:32 UTC 2019
#
# Category : malware
# Version : 169
#
# This File Date : Wed Jan 23 04:04:16 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_p2pgoz
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_pushdo.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_pushdo
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of pushdo C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt
# Source File Date: Thu Jun 7 00:01:48 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:36 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_pushdo
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

43
bambenek_pykspa.ipset Normal file
View File

@ -0,0 +1,43 @@
#
# bambenek_pykspa
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of pykspa C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt
# Source File Date: Tue Jan 22 00:08:20 UTC 2019
#
# Category : malware
# Version : 639
#
# This File Date : Tue Jan 22 00:12:39 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 12 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_pykspa
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.187.36.248
40.255.0.62
78.47.106.15
85.214.228.140
104.24.106.18
104.24.107.18
173.231.184.54
191.5.59.60
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200

31
bambenek_qakbot.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_qakbot
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of qakbot C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt
# Source File Date: Wed Jan 23 04:01:22 UTC 2019
#
# Category : malware
# Version : 44
#
# This File Date : Wed Jan 23 04:04:17 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_qakbot
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

128
bambenek_ramnit.ipset Normal file
View File

@ -0,0 +1,128 @@
#
# bambenek_ramnit
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of ramnit C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt
# Source File Date: Tue Jan 22 21:03:17 UTC 2019
#
# Category : malware
# Version : 913
#
# This File Date : Tue Jan 22 21:08:39 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 97 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_ramnit
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
18.213.250.117
18.215.128.143
31.192.228.197
34.197.76.50
34.225.182.233
35.184.193.177
35.225.106.34
35.225.160.245
45.227.252.56
46.8.21.103
46.165.220.141
46.165.220.142
46.165.220.143
46.165.220.144
46.165.220.145
46.165.220.146
46.165.220.147
46.165.220.148
46.165.220.149
46.165.220.150
46.165.220.151
46.165.220.152
46.165.220.153
46.165.220.154
46.165.220.155
46.165.221.136
46.165.221.144
46.165.221.154
46.165.229.164
46.165.229.165
46.165.229.166
46.165.229.167
46.165.254.193
46.165.254.194
46.165.254.195
46.165.254.196
46.165.254.197
46.165.254.198
46.165.254.199
46.165.254.200
46.165.254.201
46.165.254.202
46.165.254.203
46.165.254.204
46.165.254.205
46.165.254.206
46.165.254.207
46.165.254.208
46.165.254.209
46.165.254.210
46.165.254.211
46.165.254.212
46.165.254.213
46.165.254.214
52.0.217.44
52.4.209.250
82.112.184.197
89.223.109.60
93.189.40.79
109.248.250.216
139.59.59.137
159.253.25.197
159.253.28.197
173.231.184.54
178.32.208.147
185.22.152.93
185.159.129.140
185.197.75.35
185.211.246.124
185.211.247.61
193.146.253.36
194.58.56.35
194.58.56.144
194.87.96.153
194.87.109.215
206.189.61.126
208.91.197.66
209.99.40.220
209.99.64.43
217.20.116.129
217.20.116.130
217.20.116.131
217.20.116.132
217.20.116.133
217.20.116.134
217.20.116.135
217.20.116.136
217.20.116.137
217.20.116.138
217.20.116.139
217.20.116.140
217.20.116.141
217.20.116.142
217.20.116.143
217.20.116.149
217.20.116.150
217.20.116.151

31
bambenek_ranbyus.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_ranbyus
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of ranbyus C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt
# Source File Date: Thu Jul 5 02:07:41 UTC 2018
#
# Category : malware
# Version : 99
#
# This File Date : Thu Jul 5 02:12:11 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_ranbyus
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

166
bambenek_simda.ipset Normal file
View File

@ -0,0 +1,166 @@
#
# bambenek_simda
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of simda C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/simda-iplist.txt
# Source File Date: Wed Jan 23 11:07:23 UTC 2019
#
# Category : malware
# Version : 5056
#
# This File Date : Wed Jan 23 11:20:55 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 135 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_simda
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.79.79.210
5.79.79.211
5.79.79.212
23.20.239.12
23.89.102.68
23.236.62.147
31.186.169.41
35.225.160.245
37.9.175.13
46.28.2.13
46.28.105.107
46.30.213.62
46.30.213.198
46.30.213.254
46.30.215.2
46.30.215.194
46.151.97.7
46.249.43.105
52.17.170.144
52.58.78.16
52.209.56.252
62.129.200.14
62.149.128.72
62.149.128.74
62.149.128.151
62.149.128.154
62.149.128.157
62.149.128.160
62.149.128.163
62.149.128.166
62.153.122.95
62.197.128.123
67.55.121.97
77.55.97.141
79.98.25.1
79.170.40.236
80.85.86.6
80.237.132.180
81.2.194.62
81.2.194.128
81.2.194.176
81.95.96.29
81.169.145.68
81.169.145.84
81.169.145.94
81.169.145.105
81.169.145.161
81.177.165.51
82.64.11.138
82.98.135.43
82.100.220.53
84.38.228.119
84.234.64.242
85.13.129.76
85.13.132.239
85.114.135.128
85.128.128.104
85.128.151.58
85.128.219.198
85.214.112.103
85.236.47.218
87.98.154.146
87.98.230.60
88.198.56.106
89.31.143.1
89.42.219.208
91.121.59.137
91.121.154.229
91.121.208.116
91.195.240.240
91.196.124.119
91.199.77.50
91.212.28.29
91.240.216.11
92.43.203.171
92.61.39.239
93.90.146.101
93.94.226.29
93.185.103.42
93.190.48.3
93.237.137.27
94.152.8.56
98.124.199.9
103.224.212.222
104.31.88.58
104.31.89.58
107.172.147.54
109.95.158.17
141.8.230.20
141.105.126.87
146.148.34.125
149.216.106.61
151.139.240.29
157.7.107.168
163.172.86.124
173.239.5.6
173.239.8.164
178.32.208.147
178.254.10.14
183.110.225.165
185.5.53.11
185.51.65.84
185.66.237.14
185.114.108.15
185.183.8.67
188.165.143.5
192.64.147.231
193.146.253.39
194.9.94.85
194.9.94.86
194.150.113.18
194.242.61.31
195.8.208.58
195.110.124.188
198.54.115.163
198.187.30.249
199.191.50.185
208.91.197.91
209.99.40.219
209.140.30.61
210.172.183.32
211.43.203.53
212.57.32.63
212.85.106.71
213.186.33.5
213.247.47.190
217.19.237.54
217.70.184.38
217.76.156.252
217.160.0.59
217.160.0.169
217.160.0.225
217.160.0.239
217.160.122.61
217.160.233.84

84
bambenek_suppobox.ipset Normal file
View File

@ -0,0 +1,84 @@
#
# bambenek_suppobox
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of suppobox C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt
# Source File Date: Wed Jan 23 08:07:58 UTC 2019
#
# Category : malware
# Version : 3229
#
# This File Date : Wed Jan 23 08:16:23 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 53 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_suppobox
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
18.213.250.117
18.215.128.143
23.236.62.147
24.62.118.13
45.41.94.151
52.4.209.250
58.76.184.4
66.70.187.244
66.96.149.31
66.147.244.100
67.195.197.76
68.178.213.61
77.87.198.232
85.214.136.11
88.214.194.86
89.19.236.133
89.31.143.1
89.31.143.20
91.195.240.82
94.126.40.154
94.136.40.51
104.27.168.113
104.27.169.113
104.27.180.17
104.27.181.17
116.126.87.59
139.162.216.181
141.8.225.31
162.220.63.115
165.160.13.20
165.160.15.20
166.78.34.98
173.205.126.156
176.9.7.211
184.168.131.241
184.168.221.96
192.255.247.45
198.49.23.144
198.49.23.145
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
198.185.159.144
198.185.159.145
208.75.250.50
208.83.136.86
210.56.58.147
212.227.247.63
216.21.239.197
217.160.0.28
217.160.0.74
220.124.143.34

31
bambenek_symmi.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_symmi
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of symmi C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt
# Source File Date: Tue Jul 3 03:09:04 UTC 2018
#
# Category : malware
# Version : 11
#
# This File Date : Tue Jul 3 03:16:20 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_symmi
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_tinba.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_tinba
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of tinba C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt
# Source File Date: Sat Dec 29 19:00:53 UTC 2018
#
# Category : malware
# Version : 1032
#
# This File Date : Sat Dec 29 19:08:38 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_tinba
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_volatile.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_volatile
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of volatile C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt
# Source File Date: Sat Dec 8 22:07:53 UTC 2018
#
# Category : malware
# Version : 9
#
# This File Date : Sat Dec 8 22:16:23 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_volatile
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

2729
bbcan177_ms1.netset Normal file
View File

File diff suppressed because it is too large Load Diff

1175
bbcan177_ms3.netset Normal file
View File

File diff suppressed because it is too large Load Diff

3713
bds_atif.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

12618
bi_any_0_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

25858
bi_any_1_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

2121
bi_any_2_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

45208
bi_any_2_30d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

22768
bi_any_2_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

31
bi_apache-404_0_1d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_apache-404_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-404 with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-404/0?age=1d
# Source File Date: Tue Jan 22 22:16:11 UTC 2019
#
# Category : attacks
# Version : 2052
#
# This File Date : Tue Jan 22 22:16:11 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-404_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
180.180.243.223

47
bi_apache-modsec_0_1d.ipset Normal file
View File

@ -0,0 +1,47 @@
#
# bi_apache-modsec_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-modsec with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-modsec/0?age=1d
# Source File Date: Wed Jan 23 10:34:26 UTC 2019
#
# Category : attacks
# Version : 5870
#
# This File Date : Wed Jan 23 10:34:26 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 17 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-modsec_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
27.115.124.5
40.77.167.191
70.42.131.170
71.6.146.186
78.46.128.204
83.128.192.110
88.15.144.66
104.131.145.217
144.217.162.14
157.230.49.175
178.32.120.230
179.111.33.249
189.129.168.228
190.130.26.48
196.52.43.51
211.162.74.217
218.93.13.188

84
bi_apache-noscript_0_1d.ipset Normal file
View File

@ -0,0 +1,84 @@
#
# bi_apache-noscript_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-noscript with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-noscript/0?age=1d
# Source File Date: Wed Jan 23 11:04:49 UTC 2019
#
# Category : attacks
# Version : 8127
#
# This File Date : Wed Jan 23 11:04:49 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 54 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-noscript_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
3.88.15.97
5.188.210.12
13.94.32.219
39.106.146.60
58.59.203.242
60.12.18.6
62.165.50.254
66.249.69.175
81.169.158.6
95.213.177.123
95.213.177.125
95.213.177.126
103.80.28.7
103.224.250.73
103.255.47.204
104.248.119.185
106.12.89.252
108.178.16.154
109.248.9.47
111.230.48.142
114.116.151.137
114.118.85.110
114.217.151.48
116.255.214.25
117.34.105.202
117.50.50.55
118.24.122.13
119.27.186.31
122.10.118.173
122.114.70.240
123.207.236.127
124.81.123.71
125.64.94.206
129.204.32.247
129.204.77.253
132.232.32.150
132.232.144.15
132.232.224.155
134.175.5.227
134.175.40.34
141.8.142.15
147.135.79.124
148.70.56.36
148.70.77.54
150.109.66.75
157.55.39.15
158.69.19.38
185.209.0.8
195.206.105.217
212.92.107.85
216.244.66.247
217.69.143.67
219.83.160.137
220.128.237.100

244
bi_apache-noscript_2_30d.ipset Normal file
View File

@ -0,0 +1,244 @@
#
# bi_apache-noscript_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-noscript with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-noscript/2?age=30d
# Source File Date: Wed Jan 23 03:36:18 UTC 2019
#
# Category : attacks
# Version : 165
#
# This File Date : Wed Jan 23 03:36:18 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 214 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-noscript_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
37.187.71.102
40.77.167.1
40.77.167.6
40.77.167.10
40.77.167.12
40.77.167.74
40.77.167.104
47.75.66.60
62.109.4.125
64.246.165.50
64.246.165.140
64.246.165.150
64.246.165.160
64.246.165.200
64.246.178.34
66.240.236.119
66.249.64.22
66.249.64.27
66.249.64.30
66.249.64.57
66.249.64.66
66.249.64.70
66.249.64.80
66.249.64.81
66.249.64.83
66.249.64.84
66.249.64.142
66.249.64.147
66.249.64.198
66.249.65.84
66.249.66.138
66.249.66.154
66.249.66.157
66.249.69.82
66.249.69.86
66.249.69.155
66.249.70.9
66.249.75.23
66.249.75.24
66.249.75.135
66.249.75.137
66.249.79.70
66.249.79.120
69.30.198.186
69.30.198.242
69.30.211.2
69.30.213.82
69.58.178.59
69.197.177.50
77.75.76.161
77.75.77.11
77.75.77.17
87.118.116.90
89.248.160.193
91.219.236.171
94.23.196.14
103.194.242.158
104.128.144.131
123.207.236.127
125.64.94.206
149.202.38.124
157.55.39.0
157.55.39.5
157.55.39.11
157.55.39.13
157.55.39.19
157.55.39.23
157.55.39.24
157.55.39.25
157.55.39.28
157.55.39.29
157.55.39.32
157.55.39.34
157.55.39.36
157.55.39.42
157.55.39.43
157.55.39.46
157.55.39.47
157.55.39.61
157.55.39.64
157.55.39.65
157.55.39.66
157.55.39.68
157.55.39.75
157.55.39.78
157.55.39.85
157.55.39.90
157.55.39.92
157.55.39.93
157.55.39.95
157.55.39.96
157.55.39.97
157.55.39.99
157.55.39.110
157.55.39.114
157.55.39.115
157.55.39.118
157.55.39.122
157.55.39.127
157.55.39.129
157.55.39.131
157.55.39.132
157.55.39.136
157.55.39.137
157.55.39.140
157.55.39.145
157.55.39.151
157.55.39.156
157.55.39.157
157.55.39.159
157.55.39.160
157.55.39.161
157.55.39.162
157.55.39.166
157.55.39.173
157.55.39.175
157.55.39.180
157.55.39.181
157.55.39.185
157.55.39.187
157.55.39.189
157.55.39.193
157.55.39.194
157.55.39.196
157.55.39.197
157.55.39.198
157.55.39.201
157.55.39.204
157.55.39.205
157.55.39.206
157.55.39.208
157.55.39.220
157.55.39.228
157.55.39.229
157.55.39.233
157.55.39.234
157.55.39.235
157.55.39.248
157.55.39.250
157.55.39.253
162.210.196.98
162.210.196.129
173.208.157.186
173.234.153.122
173.234.159.250
178.151.245.174
178.165.13.220
180.76.15.7
180.76.15.9
180.76.15.137
180.76.15.154
185.100.87.246
185.220.101.44
185.234.217.132
190.181.40.250
190.210.183.93
192.160.102.169
193.201.224.210
198.204.243.138
199.58.86.211
206.253.224.75
207.46.13.4
207.46.13.6
207.46.13.11
207.46.13.12
207.46.13.21
207.46.13.22
207.46.13.25
207.46.13.28
207.46.13.31
207.46.13.33
207.46.13.34
207.46.13.35
207.46.13.38
207.46.13.45
207.46.13.46
207.46.13.49
207.46.13.53
207.46.13.56
207.46.13.62
207.46.13.66
207.46.13.71
207.46.13.76
207.46.13.82
207.46.13.86
207.46.13.88
207.46.13.97
207.46.13.100
207.46.13.105
207.46.13.108
207.46.13.109
207.46.13.115
207.46.13.116
207.46.13.118
207.46.13.119
207.46.13.120
207.46.13.121
207.46.13.123
207.46.13.129
207.46.13.130
207.46.13.135
207.46.13.141
207.46.13.142
207.46.13.143
207.46.13.147
207.46.13.158
207.46.13.163
207.46.13.169
207.46.13.174
207.46.13.180
207.46.13.184
216.145.5.42
216.145.17.190
222.76.212.56

34
bi_apache-phpmyadmin_0_1d.ipset Normal file
View File

@ -0,0 +1,34 @@
#
# bi_apache-phpmyadmin_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-phpmyadmin with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-phpmyadmin/0?age=1d
# Source File Date: Wed Jan 23 11:04:49 UTC 2019
#
# Category : attacks
# Version : 2734
#
# This File Date : Wed Jan 23 11:04:49 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-phpmyadmin_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.229.86.33
98.192.43.134
106.13.53.58
139.199.227.86

34
bi_apache-scriddies_0_1d.ipset Normal file
View File

@ -0,0 +1,34 @@
#
# bi_apache-scriddies_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-scriddies with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-scriddies/0?age=1d
# Source File Date: Wed Jan 23 07:12:27 UTC 2019
#
# Category : attacks
# Version : 2207
#
# This File Date : Wed Jan 23 07:12:27 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-scriddies_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
66.249.66.194
66.249.66.197
112.187.151.245
148.70.29.88

160
bi_apache_0_1d.ipset Normal file
View File

@ -0,0 +1,160 @@
#
# bi_apache_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/0?age=1d
# Source File Date: Wed Jan 23 11:21:00 UTC 2019
#
# Category : attacks
# Version : 10209
#
# This File Date : Wed Jan 23 11:21:00 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 130 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.229.86.33
3.88.15.97
5.170.0.42
5.188.210.12
13.94.32.219
14.63.171.75
27.17.244.244
27.115.124.5
34.207.98.73
37.57.34.135
37.187.133.37
37.215.89.140
39.106.146.60
40.77.167.191
42.7.26.95
51.68.115.5
52.169.15.184
58.59.203.242
60.12.18.6
62.165.50.254
62.212.82.105
66.63.178.186
66.249.66.194
66.249.66.197
66.249.69.175
70.42.131.170
71.6.135.131
71.6.146.186
72.199.15.211
78.46.128.204
79.36.55.88
81.146.20.11
81.169.158.6
83.9.156.92
83.128.192.110
85.106.31.91
86.45.47.106
87.102.64.73
88.15.144.66
88.74.136.34
91.212.25.71
91.225.109.78
94.102.49.125
94.103.95.181
94.191.90.133
95.52.6.243
95.213.177.123
95.213.177.125
95.213.177.126
98.21.247.174
98.192.43.134
103.80.28.7
103.224.250.73
103.255.47.204
104.131.145.217
104.248.119.185
106.12.89.252
106.13.53.58
106.114.71.226
107.178.194.218
108.178.16.154
109.248.9.47
111.230.48.142
112.187.151.245
114.116.151.137
114.118.85.110
114.217.151.48
116.255.214.25
117.34.105.202
117.50.50.55
118.24.122.13
119.27.186.31
119.28.13.105
122.10.118.173
122.114.70.240
123.207.236.127
124.81.123.71
124.156.176.170
125.64.94.206
129.204.32.247
129.204.77.253
132.232.32.150
132.232.131.248
132.232.224.155
134.175.5.227
134.175.40.34
139.199.227.86
141.8.142.15
144.217.162.14
147.135.79.124
148.70.29.88
148.70.56.36
148.70.77.54
150.109.66.75
157.55.39.15
157.230.49.175
158.69.19.38
169.0.163.197
172.223.76.61
173.208.149.154
177.249.188.203
178.32.120.230
178.36.100.87
179.111.33.249
180.180.243.223
181.57.36.136
181.67.41.24
183.82.118.147
185.29.160.110
185.149.69.105
185.156.177.164
185.209.0.8
189.129.168.228
189.177.244.161
190.130.26.48
194.113.106.124
195.206.105.217
196.52.43.51
197.99.121.54
210.14.113.247
211.162.74.217
212.92.107.85
212.237.0.113
216.244.66.247
217.69.143.67
218.93.13.188
219.83.160.137
220.85.181.120
220.128.237.100
221.148.183.133

196
bi_apache_1_7d.ipset Normal file
View File

@ -0,0 +1,196 @@
#
# bi_apache_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/1?age=7d
# Source File Date: Wed Jan 23 06:04:42 UTC 2019
#
# Category : attacks
# Version : 673
#
# This File Date : Wed Jan 23 06:04:43 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 166 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.9.155.37
5.135.138.188
34.207.98.73
37.157.193.84
40.77.167.30
40.77.167.32
40.77.167.104
40.77.167.115
46.4.116.197
51.255.65.46
54.36.148.70
54.36.148.85
54.36.148.91
54.36.148.113
54.36.148.127
54.36.148.139
54.36.148.167
54.36.148.168
54.36.148.172
54.36.148.178
54.36.148.197
54.36.148.198
54.36.148.206
54.36.148.232
54.36.148.235
54.36.148.237
54.36.148.243
54.36.148.244
54.36.148.249
54.36.148.253
54.36.149.3
54.36.149.6
54.36.149.7
54.36.149.8
54.36.149.12
54.36.149.13
54.36.149.18
54.36.149.21
54.36.149.26
54.36.149.28
54.36.149.35
54.36.149.39
54.36.149.43
54.36.149.44
54.36.149.46
54.36.149.51
54.36.149.56
54.36.149.61
54.36.149.64
54.36.149.70
54.36.149.78
54.36.149.80
54.36.149.81
54.36.149.85
54.36.149.87
54.36.149.90
54.36.149.91
54.36.149.93
54.36.149.104
60.191.20.210
64.246.161.30
64.246.161.42
64.246.161.190
64.246.165.10
64.246.165.50
64.246.165.180
64.246.165.190
64.246.165.210
64.246.187.42
66.249.69.11
66.249.69.131
66.249.69.135
66.249.69.139
66.249.69.150
66.249.69.155
66.249.69.158
66.249.75.23
66.249.75.24
66.249.75.130
66.249.75.132
66.249.75.195
66.249.76.67
66.249.79.22
66.249.79.70
66.249.79.83
66.249.79.104
66.249.79.246
71.6.167.142
80.127.116.96
91.209.51.22
94.102.49.125
94.102.49.193
104.128.144.131
111.231.236.170
123.207.236.127
125.64.94.206
144.76.6.230
157.55.39.5
157.55.39.9
157.55.39.23
157.55.39.24
157.55.39.32
157.55.39.34
157.55.39.35
157.55.39.43
157.55.39.48
157.55.39.68
157.55.39.80
157.55.39.112
157.55.39.130
157.55.39.131
157.55.39.133
157.55.39.137
157.55.39.149
157.55.39.150
157.55.39.151
157.55.39.156
157.55.39.194
157.55.39.223
157.55.39.224
157.55.39.225
157.55.39.227
157.55.39.237
173.234.153.122
178.73.215.171
180.76.15.7
180.76.15.9
180.76.15.137
180.76.15.154
185.100.87.246
185.100.87.249
185.220.101.44
190.210.183.93
192.151.152.98
193.201.224.210
196.52.43.51
196.52.43.96
198.204.243.138
207.46.13.2
207.46.13.3
207.46.13.10
207.46.13.12
207.46.13.66
207.46.13.71
207.46.13.82
207.46.13.98
207.46.13.113
207.46.13.114
207.46.13.117
207.46.13.120
207.46.13.121
207.46.13.123
207.46.13.155
207.46.13.161
210.209.87.134
213.23.12.149
216.145.11.94
216.145.14.142
216.244.66.202
216.244.66.203
216.244.66.232
216.244.66.239
216.244.66.249
216.244.66.250
219.138.66.104
223.112.190.70

331
bi_apache_2_30d.ipset Normal file
View File

@ -0,0 +1,331 @@
#
# bi_apache_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/2?age=30d
# Source File Date: Wed Jan 23 09:55:02 UTC 2019
#
# Category : attacks
# Version : 196
#
# This File Date : Wed Jan 23 09:55:02 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 301 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.2.211.92
5.135.138.188
36.110.211.2
37.58.150.203
37.187.71.102
40.77.167.1
40.77.167.6
40.77.167.10
40.77.167.12
40.77.167.74
40.77.167.104
45.6.188.2
47.75.66.60
47.75.165.214
62.109.4.125
64.41.200.104
64.246.165.50
64.246.165.140
64.246.165.150
64.246.165.160
64.246.165.200
64.246.178.34
66.240.236.119
66.249.64.22
66.249.64.27
66.249.64.30
66.249.64.57
66.249.64.66
66.249.64.70
66.249.64.80
66.249.64.81
66.249.64.83
66.249.64.84
66.249.64.142
66.249.64.147
66.249.64.198
66.249.65.84
66.249.66.138
66.249.66.154
66.249.66.157
66.249.69.82
66.249.69.86
66.249.69.155
66.249.70.9
66.249.75.23
66.249.75.24
66.249.75.135
66.249.75.137
66.249.79.70
66.249.79.120
69.30.198.186
69.30.198.242
69.30.211.2
69.30.213.82
69.58.178.59
69.197.177.50
71.6.167.142
77.75.76.161
77.75.77.11
77.75.77.17
87.98.227.4
87.118.116.90
89.248.160.193
91.200.12.9
91.200.12.12
91.205.173.48
91.219.236.171
93.174.95.106
94.23.196.14
94.102.49.125
94.102.49.193
95.105.171.133
96.127.158.235
103.194.242.158
104.128.144.131
107.170.192.241
107.170.193.99
107.170.199.134
107.170.199.159
107.170.224.252
107.170.226.201
107.170.228.217
107.170.228.248
107.170.230.54
107.170.230.97
107.170.230.250
107.170.231.45
107.170.231.183
107.170.231.244
107.170.232.242
107.170.236.40
107.170.237.80
107.170.237.92
107.170.238.226
107.170.238.228
107.170.253.245
107.170.254.21
111.231.236.170
123.207.236.127
125.64.94.206
125.64.94.208
139.162.78.135
139.162.106.181
139.162.116.133
140.143.241.113
149.202.38.124
155.94.222.12
157.55.39.0
157.55.39.5
157.55.39.11
157.55.39.13
157.55.39.19
157.55.39.23
157.55.39.24
157.55.39.25
157.55.39.28
157.55.39.29
157.55.39.32
157.55.39.34
157.55.39.36
157.55.39.42
157.55.39.43
157.55.39.46
157.55.39.47
157.55.39.61
157.55.39.64
157.55.39.65
157.55.39.66
157.55.39.68
157.55.39.75
157.55.39.78
157.55.39.85
157.55.39.90
157.55.39.92
157.55.39.93
157.55.39.95
157.55.39.96
157.55.39.97
157.55.39.99
157.55.39.110
157.55.39.114
157.55.39.115
157.55.39.118
157.55.39.122
157.55.39.127
157.55.39.129
157.55.39.131
157.55.39.132
157.55.39.136
157.55.39.137
157.55.39.140
157.55.39.145
157.55.39.151
157.55.39.156
157.55.39.157
157.55.39.159
157.55.39.160
157.55.39.161
157.55.39.162
157.55.39.166
157.55.39.173
157.55.39.175
157.55.39.180
157.55.39.181
157.55.39.185
157.55.39.187
157.55.39.189
157.55.39.193
157.55.39.194
157.55.39.196
157.55.39.197
157.55.39.198
157.55.39.201
157.55.39.204
157.55.39.205
157.55.39.206
157.55.39.208
157.55.39.220
157.55.39.228
157.55.39.229
157.55.39.233
157.55.39.234
157.55.39.235
157.55.39.248
157.55.39.250
157.55.39.253
158.85.81.115
158.85.81.116
158.85.81.120
162.210.196.98
162.210.196.129
163.172.192.121
168.1.128.36
168.1.128.38
168.1.128.51
168.1.128.62
168.1.128.77
169.53.184.28
169.54.233.117
169.54.233.119
169.54.233.123
169.54.244.78
173.208.157.186
173.234.153.122
173.234.159.250
178.73.215.171
178.151.245.174
178.165.13.220
180.76.15.7
180.76.15.9
180.76.15.137
180.76.15.154
185.100.87.190
185.100.87.191
185.100.87.245
185.100.87.246
185.100.87.247
185.100.87.248
185.100.87.249
185.100.87.250
185.129.148.167
185.220.101.44
185.234.217.132
190.181.40.250
190.210.183.93
192.160.102.169
192.187.108.186
193.106.30.99
193.201.224.210
196.52.43.51
196.52.43.59
196.52.43.79
196.52.43.86
196.52.43.96
196.52.43.99
196.52.43.109
197.248.136.250
198.143.133.154
198.143.158.82
198.143.158.86
198.204.243.138
199.58.86.211
206.253.224.75
207.46.13.4
207.46.13.6
207.46.13.11
207.46.13.12
207.46.13.21
207.46.13.22
207.46.13.25
207.46.13.28
207.46.13.31
207.46.13.33
207.46.13.34
207.46.13.35
207.46.13.38
207.46.13.45
207.46.13.46
207.46.13.49
207.46.13.53
207.46.13.56
207.46.13.62
207.46.13.66
207.46.13.71
207.46.13.76
207.46.13.82
207.46.13.86
207.46.13.88
207.46.13.97
207.46.13.100
207.46.13.105
207.46.13.108
207.46.13.109
207.46.13.115
207.46.13.116
207.46.13.118
207.46.13.119
207.46.13.120
207.46.13.121
207.46.13.123
207.46.13.129
207.46.13.130
207.46.13.135
207.46.13.141
207.46.13.142
207.46.13.143
207.46.13.147
207.46.13.158
207.46.13.163
207.46.13.169
207.46.13.174
207.46.13.180
207.46.13.184
210.72.142.7
213.23.12.149
216.145.5.42
216.145.17.190
219.138.66.104
222.76.212.56
222.186.57.195
223.112.190.70

30
bi_apacheddos_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_apacheddos_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apacheddos with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apacheddos/0?age=1d
# Source File Date: Tue Jan 22 14:52:42 UTC 2019
#
# Category : attacks
# Version : 617
#
# This File Date : Tue Jan 22 15:24:37 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apacheddos_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

35
bi_assp_0_1d.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bi_assp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# assp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/assp/0?age=1d
# Source File Date: Wed Jan 23 11:04:52 UTC 2019
#
# Category : attacks
# Version : 5582
#
# This File Date : Wed Jan 23 11:04:52 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 5 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_assp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
49.67.55.48
52.218.208.99
120.43.54.54
125.72.232.158
209.85.222.194

109
bi_asterisk_0_1d.ipset Normal file
View File

@ -0,0 +1,109 @@
#
# bi_asterisk_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# asterisk with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/asterisk/0?age=1d
# Source File Date: Wed Jan 23 11:04:52 UTC 2019
#
# Category : attacks
# Version : 8320
#
# This File Date : Wed Jan 23 11:04:52 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 79 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_asterisk_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.62.41.10
5.62.63.183
5.62.63.221
5.62.63.222
5.133.24.230
5.199.143.119
31.200.196.68
37.8.81.206
37.49.231.35
37.49.231.103
37.49.231.171
37.49.231.199
37.49.231.211
37.49.231.222
43.229.207.225
46.29.166.62
51.158.20.215
62.210.11.82
62.210.29.135
62.210.76.75
62.210.83.104
62.210.84.136
62.210.84.153
62.210.86.103
62.210.86.117
62.210.88.58
62.210.90.247
62.210.96.16
62.210.141.112
69.162.110.222
91.92.144.67
93.115.29.191
102.165.39.212
137.74.179.202
147.135.79.2
147.135.79.220
158.69.240.185
158.69.240.193
167.86.68.200
185.31.160.33
185.40.4.46
185.40.4.185
185.53.88.20
185.53.88.34
185.53.88.40
185.53.88.41
185.53.88.60
185.53.88.64
185.53.91.25
185.53.91.27
185.53.91.29
185.53.91.30
185.53.91.31
185.53.91.39
185.53.91.40
185.53.91.41
185.53.91.44
185.53.91.46
185.53.91.48
185.53.91.57
185.53.91.73
185.93.2.106
188.214.128.17
195.154.77.58
195.154.232.85
195.154.236.21
195.154.237.62
195.154.237.88
204.19.141.194
207.180.242.195
212.83.144.79
212.83.169.202
212.83.175.76
212.83.178.209
212.129.4.33
212.129.18.48
213.202.233.154
217.147.1.38
217.147.1.183

232
bi_asterisk_2_30d.ipset Normal file
View File

@ -0,0 +1,232 @@
#
# bi_asterisk_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# asterisk with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/asterisk/2?age=30d
# Source File Date: Wed Jan 23 09:55:06 UTC 2019
#
# Category : attacks
# Version : 182
#
# This File Date : Wed Jan 23 09:55:07 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 202 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_asterisk_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.62.39.232
5.62.39.234
5.62.39.236
5.62.39.237
5.62.39.238
5.62.41.13
5.62.41.20
5.62.41.43
5.62.41.62
5.62.47.25
5.62.59.66
5.62.59.71
5.62.61.21
5.62.63.181
5.62.63.182
5.62.63.221
5.62.63.222
5.62.63.223
5.133.24.131
5.133.24.156
5.133.25.122
5.133.30.220
5.189.190.95
5.196.149.220
5.199.133.18
31.223.185.58
37.8.72.173
37.49.231.14
37.49.231.86
37.59.43.215
37.61.217.178
37.61.218.237
46.17.40.128
46.29.162.23
46.29.162.24
46.166.139.6
46.166.151.80
46.166.151.114
51.15.154.45
51.15.161.156
51.15.196.51
51.15.216.200
62.112.10.166
62.210.13.182
62.210.72.13
62.210.141.25
62.210.141.112
62.210.146.201
62.210.149.32
62.210.162.98
62.210.167.181
62.210.188.203
62.233.65.182
67.21.68.223
67.211.217.94
72.214.236.245
80.255.5.196
80.255.5.197
80.255.5.213
80.255.7.5
82.205.6.171
82.205.11.106
82.205.25.193
83.244.49.86
83.244.50.90
83.244.51.156
83.244.53.206
85.93.93.99
85.114.99.162
85.114.99.186
85.114.99.196
85.114.99.251
85.114.107.230
85.114.110.36
85.114.110.72
85.114.118.85
85.114.121.89
85.114.122.65
85.114.125.169
103.16.142.13
107.167.229.121
107.167.229.126
134.119.216.157
134.119.221.7
145.249.107.14
158.69.50.245
158.69.246.17
163.172.68.45
163.172.120.251
163.172.121.136
163.172.194.33
163.172.194.122
163.172.195.231
163.172.197.210
163.172.200.78
163.172.226.201
167.114.23.73
169.45.136.212
169.45.136.213
173.208.249.218
173.212.247.242
173.249.29.26
173.249.39.91
176.67.108.124
176.106.46.241
178.238.238.133
185.22.152.191
185.22.152.238
185.40.4.11
185.40.4.41
185.40.4.46
185.40.4.67
185.40.4.82
185.40.4.95
185.40.4.130
185.40.4.185
185.51.228.247
185.130.236.5
185.234.216.174
188.138.33.46
188.161.2.158
188.161.3.62
188.161.3.81
188.161.5.16
188.161.8.92
188.161.9.170
188.161.12.246
188.161.13.28
188.161.13.238
188.161.14.65
188.161.14.88
188.161.15.10
188.161.15.70
188.161.64.129
188.161.64.183
188.161.65.66
188.161.65.219
188.161.67.42
188.161.67.138
188.161.67.170
188.161.179.22
188.161.180.2
188.161.180.67
188.161.181.74
188.161.181.85
188.161.181.91
188.161.181.92
188.161.181.180
188.161.181.250
188.161.183.175
188.161.184.33
188.161.185.10
188.161.185.225
188.161.186.71
188.161.186.123
188.161.186.186
188.161.186.223
188.161.195.93
188.161.195.137
188.165.222.17
192.187.118.26
192.228.100.242
193.111.140.133
195.154.53.30
195.154.62.53
195.154.183.222
195.154.191.163
195.154.199.155
195.154.211.214
198.204.253.210
209.126.117.222
212.47.235.31
212.47.246.89
212.83.130.10
212.83.130.108
212.83.134.244
212.83.137.201
212.83.145.185
212.83.146.50
212.83.154.178
212.83.157.117
212.83.158.91
212.83.172.35
212.83.173.116
212.83.186.32
212.83.189.237
212.83.190.37
212.83.191.49
212.129.2.188
212.129.3.22
212.129.10.158
212.129.18.48
212.129.27.34
212.129.30.255
212.129.31.98
212.129.36.126
212.129.37.126
212.129.46.61
212.129.47.132
212.129.52.78
217.79.190.135
217.182.206.192

3355
bi_badbots_0_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

6495
bi_badbots_1_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

3526
bi_bruteforce_0_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

6501
bi_bruteforce_1_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

303
bi_cms_0_1d.ipset Normal file
View File

@ -0,0 +1,303 @@
#
# bi_cms_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/0?age=1d
# Source File Date: Wed Jan 23 11:04:54 UTC 2019
#
# Category : attacks
# Version : 10295
#
# This File Date : Wed Jan 23 11:04:54 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 273 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.101.142.70
5.188.62.5
13.73.178.106
14.161.43.54
14.161.48.38
14.162.63.146
14.162.86.89
14.169.248.187
14.177.154.15
14.184.36.255
14.186.28.255
14.186.32.93
14.186.188.38
14.186.240.207
14.187.9.93
14.187.46.145
14.187.154.99
14.190.120.4
14.231.218.243
14.232.2.124
23.94.156.162
23.228.96.82
23.238.16.4
27.72.131.168
27.147.216.140
31.28.163.44
35.196.195.73
35.196.212.41
43.252.231.204
43.255.152.4
45.64.113.206
45.116.76.177
45.116.78.193
45.119.82.132
46.8.209.97
46.8.209.98
46.118.155.222
46.119.121.84
46.119.126.222
46.201.245.220
47.93.35.42
47.98.175.190
47.98.176.76
47.104.104.123
47.190.19.75
50.62.176.10
50.62.176.37
50.62.177.139
51.38.69.87
51.68.115.5
51.75.247.213
54.37.77.145
54.39.188.215
54.39.190.102
64.32.122.20
67.222.135.191
67.227.236.114
77.81.165.49
78.63.60.171
81.88.49.16
82.127.188.193
85.193.229.6
87.236.20.141
91.121.12.106
91.221.109.101
93.72.84.153
94.191.8.36
94.242.59.245
103.21.142.12
103.27.239.3
103.56.112.223
103.96.75.160
103.215.81.107
103.229.124.89
103.229.125.168
103.243.25.104
104.238.93.163
105.73.80.162
107.77.249.5
107.179.96.11
108.174.147.136
110.54.247.107
113.66.35.129
113.111.81.197
113.111.82.194
113.161.56.31
113.162.91.71
113.162.182.100
113.162.189.125
113.162.191.118
113.172.27.3
113.172.196.159
113.172.208.85
113.172.219.252
113.172.235.188
113.173.97.229
113.173.105.249
113.173.118.116
113.173.183.192
113.173.250.69
113.186.142.119
113.190.234.150
114.215.99.132
115.28.43.234
115.28.154.44
115.28.229.143
115.29.76.145
115.84.92.148
115.84.92.198
115.84.99.63
116.104.120.10
116.104.193.72
116.111.51.25
117.0.53.180
118.24.63.246
119.29.4.85
119.29.5.68
119.29.82.97
119.145.148.219
119.158.48.130
120.27.31.148
120.27.37.74
120.27.100.100
120.27.114.224
120.76.121.20
120.76.126.197
121.42.50.93
121.42.52.27
121.42.54.54
121.42.143.123
121.42.205.30
123.20.5.190
123.20.8.32
123.20.26.56
123.20.32.200
123.20.113.33
123.20.126.24
123.20.133.31
123.20.164.116
123.20.243.86
123.21.83.191
123.21.106.10
123.21.115.209
123.21.196.56
123.21.212.143
123.24.98.72
123.31.30.209
123.207.5.43
123.207.45.15
123.207.94.126
123.249.50.75
125.254.65.94
132.232.187.21
134.249.141.24
139.99.40.106
139.129.40.112
140.227.200.215
141.101.96.117
141.101.96.193
142.11.219.92
143.255.154.77
143.255.155.89
143.255.155.168
143.255.155.169
144.48.242.231
148.72.232.39
148.72.232.109
148.72.232.129
158.69.19.38
159.226.20.83
162.213.253.61
163.44.194.54
163.172.107.29
166.62.120.154
171.224.241.117
171.245.124.238
172.68.238.48
172.68.238.60
172.68.238.144
172.68.239.25
172.68.239.115
176.28.118.42
177.75.143.211
178.128.163.25
178.132.220.241
181.126.84.96
182.50.132.82
182.50.135.57
185.67.45.160
185.86.12.178
185.86.93.3
185.86.93.5
185.86.93.6
185.86.93.13
185.86.93.16
185.86.93.22
185.86.93.30
185.86.93.32
185.86.93.35
185.86.93.36
185.86.93.45
185.86.93.60
185.86.93.64
185.86.164.99
185.86.164.106
185.86.164.107
185.86.164.109
185.86.167.4
185.159.157.19
185.176.42.72
185.211.245.158
185.234.217.119
185.234.217.123
185.234.217.127
185.234.217.128
185.234.217.130
185.234.217.132
185.234.217.135
185.234.217.137
185.234.217.150
185.234.217.151
185.234.217.152
185.234.217.153
185.234.217.203
185.234.217.204
185.234.217.205
185.234.217.206
185.234.217.207
185.234.217.208
185.234.217.209
185.234.217.210
185.244.43.60
185.244.43.64
185.244.43.69
185.244.43.175
185.244.43.176
185.244.43.178
185.244.43.179
185.244.43.180
185.244.43.181
185.244.43.182
185.244.214.117
186.182.233.113
189.206.78.44
192.154.224.61
192.169.189.50
193.106.30.98
193.164.131.223
193.201.224.211
193.201.224.225
194.110.171.200
194.113.106.11
194.113.106.124
194.113.106.125
194.113.106.126
197.45.161.241
197.50.72.191
198.27.69.191
198.54.114.55
198.71.226.54
198.71.230.20
202.29.30.204
202.137.141.46
202.137.155.137
206.78.76.50
210.16.189.4
212.81.36.58
212.81.36.232
212.81.37.152
212.81.37.188
213.59.146.28
213.181.192.10
222.252.6.216

191
bi_cms_1_7d.ipset Normal file
View File

@ -0,0 +1,191 @@
#
# bi_cms_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/1?age=7d
# Source File Date: Wed Jan 23 06:56:18 UTC 2019
#
# Category : attacks
# Version : 839
#
# This File Date : Wed Jan 23 06:56:18 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 161 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.188.62.117
5.188.211.26
5.188.211.35
39.108.187.244
46.119.121.84
46.148.17.90
47.93.35.42
47.98.175.190
47.98.176.76
47.106.103.192
58.62.55.130
58.214.25.190
60.172.64.229
60.172.69.66
61.163.229.226
68.171.211.178
86.109.170.96
89.42.217.11
89.108.105.13
89.234.157.254
91.121.12.106
91.221.109.101
94.190.53.209
97.74.228.245
103.21.142.12
109.226.23.26
111.230.48.64
111.230.51.65
111.230.52.42
114.104.158.172
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.28.62
115.28.43.234
115.28.71.161
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.159.99.54
115.159.147.138
118.24.63.246
118.89.17.89
118.89.31.212
118.89.139.150
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.76.121.20
120.76.126.197
120.76.132.64
120.76.146.29
120.79.46.121
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
123.207.5.43
123.207.29.152
123.207.94.126
123.249.50.75
134.249.141.24
139.129.14.230
139.129.40.112
139.129.60.64
139.129.130.253
164.132.51.91
177.135.101.5
182.50.132.82
182.254.129.82
185.81.157.113
185.81.157.172
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.85.239.195
185.86.13.213
185.86.93.2
185.86.93.3
185.86.93.5
185.86.93.6
185.86.93.11
185.86.93.12
185.86.93.13
185.86.93.15
185.86.93.16
185.86.93.20
185.86.93.22
185.86.93.23
185.86.93.24
185.86.93.30
185.86.93.35
185.86.93.36
185.86.93.45
185.86.93.50
185.86.93.54
185.86.93.56
185.86.93.58
185.86.93.60
185.86.93.64
185.86.93.65
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.104
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.119.81.11
185.119.81.50
185.234.217.130
185.234.217.132
185.234.217.135
185.234.217.201
185.234.217.203
185.234.217.204
185.234.217.207
185.234.217.210
186.215.198.137
186.215.199.65
193.112.48.249
193.201.224.17
193.201.224.211
193.201.224.225
210.12.219.1
210.16.189.4
220.162.158.2
222.73.129.15

748
bi_cms_2_30d.ipset Normal file
View File

@ -0,0 +1,748 @@
#
# bi_cms_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/2?age=30d
# Source File Date: Wed Jan 23 09:55:09 UTC 2019
#
# Category : attacks
# Version : 217
#
# This File Date : Wed Jan 23 09:55:09 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 718 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.85.7.26
1.255.70.86
1.255.70.114
5.62.39.236
5.101.40.93
5.188.62.117
5.188.211.26
5.188.211.35
14.177.235.133
27.17.15.26
27.17.57.98
31.13.227.4
31.168.157.167
31.186.8.168
35.162.25.94
36.7.110.188
36.33.0.160
36.33.35.217
36.67.120.85
37.187.129.166
39.108.187.244
39.152.66.7
41.39.153.11
41.41.10.130
41.128.185.155
41.210.49.98
41.210.223.10
43.227.254.4
46.20.205.233
46.148.17.90
46.165.230.5
47.93.35.42
47.98.165.187
47.98.175.190
47.98.176.76
47.106.103.192
50.62.177.193
51.15.49.134
51.254.159.78
52.23.190.115
58.17.221.4
58.18.137.83
58.20.36.88
58.53.146.60
58.56.145.94
58.58.135.158
58.59.14.195
58.62.55.130
58.210.126.206
58.211.71.40
58.213.46.110
58.214.13.246
58.214.24.53
58.214.25.190
58.214.239.53
58.215.78.97
58.216.170.50
58.216.238.76
58.222.105.114
58.240.2.38
58.242.164.10
58.244.173.130
59.46.102.202
59.49.33.247
59.51.153.93
59.52.8.211
59.125.2.63
59.173.252.58
60.2.15.52
60.2.50.114
60.6.223.191
60.6.227.95
60.8.207.34
60.13.181.244
60.28.131.10
60.30.5.5
60.30.66.199
60.30.224.189
60.161.215.7
60.166.48.158
60.167.19.30
60.171.110.17
60.171.135.254
60.171.164.47
60.172.64.229
60.172.69.66
60.173.133.229
60.174.92.50
60.174.130.19
60.175.209.77
60.216.116.178
60.222.227.195
60.250.29.229
61.28.113.58
61.37.150.6
61.38.236.98
61.82.71.36
61.128.208.174
61.133.218.19
61.134.52.164
61.136.81.234
61.136.104.131
61.145.228.110
61.148.29.198
61.148.124.108
61.148.196.114
61.150.76.201
61.158.140.152
61.158.188.21
61.160.81.62
61.161.147.218
61.161.209.134
61.163.36.24
61.163.69.170
61.163.229.226
61.163.231.150
61.167.79.135
61.177.25.58
61.177.60.140
61.177.181.109
61.178.74.27
61.178.243.56
61.182.27.121
61.184.35.3
61.185.41.221
61.185.139.72
61.185.242.195
61.187.123.74
61.189.47.93
61.191.220.250
61.191.252.218
61.219.67.188
61.232.0.130
62.99.78.120
62.99.80.170
62.210.37.82
64.113.32.29
67.190.118.9
68.171.211.178
69.195.197.70
72.34.40.81
72.34.47.10
74.208.216.211
74.208.244.107
77.44.110.101
77.72.83.230
78.83.105.149
80.22.131.131
80.147.59.28
81.10.121.137
82.130.202.35
82.188.133.50
82.208.65.46
85.84.203.9
85.174.224.42
85.248.227.164
86.109.170.96
88.32.17.110
89.42.217.11
89.234.157.254
91.121.12.106
91.183.149.230
91.221.109.101
91.233.156.93
93.146.73.50
95.110.202.110
97.74.4.211
97.74.228.245
97.81.19.228
99.198.118.150
103.21.142.12
103.107.17.102
104.168.170.146
104.238.116.211
107.174.86.179
107.174.86.180
108.179.199.76
109.74.65.178
109.170.160.102
109.170.160.109
109.170.184.211
109.226.23.26
110.17.188.30
110.249.143.106
110.249.218.69
111.1.89.230
111.8.150.31
111.40.73.83
111.40.84.27
111.85.220.242
111.206.163.56
111.230.48.64
111.230.51.65
111.230.52.42
112.2.52.100
112.4.172.182
112.24.103.242
112.24.104.228
112.24.104.236
112.26.80.145
112.26.82.52
112.26.122.164
112.26.146.13
112.27.129.78
112.27.129.154
112.27.130.127
112.53.66.27
112.74.94.30
112.91.59.106
112.101.80.250
112.101.220.75
112.113.241.17
112.218.211.227
113.28.129.125
113.140.84.86
113.161.4.51
113.204.147.26
113.240.237.10
114.35.243.41
114.103.180.148
114.104.158.172
114.104.162.36
114.141.189.194
114.199.112.138
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.17.58
115.28.28.62
115.28.43.234
115.28.44.252
115.28.71.161
115.28.76.22
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.84.105.146
115.84.112.138
115.159.99.54
115.159.147.138
115.239.244.198
116.112.207.235
116.113.86.246
116.113.96.22
116.228.90.9
116.247.106.198
116.249.127.11
117.28.250.42
117.40.236.179
117.69.253.252
117.71.62.14
117.159.84.142
118.24.63.246
118.62.9.2
118.89.17.89
118.89.31.212
118.89.139.150
118.121.39.14
118.121.233.54
118.144.83.130
118.144.88.132
118.163.58.117
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
119.53.91.170
119.53.149.66
119.60.26.162
119.60.29.78
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.29.140.188
120.33.205.162
120.35.12.153
120.76.114.201
120.76.121.20
120.76.126.197
120.76.132.64
120.76.146.29
120.76.176.146
120.79.46.121
120.194.7.10
120.194.173.77
120.194.212.234
120.202.36.46
120.203.25.58
120.209.71.14
121.15.254.22
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
121.199.58.190
122.97.16.154
122.139.5.237
122.193.106.54
122.195.155.194
122.224.135.138
122.226.129.25
122.226.136.90
122.227.20.90
123.7.54.235
123.138.78.210
123.138.199.66
123.178.123.190
123.206.197.121
123.206.212.37
123.206.217.106
123.207.5.43
123.207.29.152
123.207.45.15
123.207.94.126
123.232.125.198
123.234.215.242
123.249.50.75
124.43.18.138
124.66.133.106
124.112.45.222
124.128.73.58
124.207.57.146
124.207.209.114
125.65.244.38
125.77.127.97
125.227.146.182
125.227.179.59
129.121.177.223
134.249.141.24
137.74.169.241
139.129.14.230
139.129.40.112
139.129.60.64
139.129.130.253
140.143.90.193
140.143.93.167
140.206.65.34
140.207.52.114
142.4.17.157
145.239.91.37
149.202.247.172
157.122.183.218
162.219.250.17
162.223.88.13
164.132.51.91
166.62.45.148
166.62.81.105
169.239.220.35
171.8.76.24
171.34.72.10
171.221.201.212
171.221.226.23
171.221.253.69
171.221.255.5
173.230.252.250
174.37.231.104
175.198.214.201
176.10.99.200
177.19.163.109
177.19.164.147
177.19.164.149
177.19.165.26
177.19.181.169
177.19.185.235
177.19.187.79
177.43.243.211
177.43.247.139
177.43.247.237
177.43.251.153
177.99.211.149
177.99.217.233
177.135.98.161
177.135.101.5
177.135.101.101
177.135.103.25
177.135.103.94
177.159.103.9
177.159.103.123
177.159.122.251
178.116.142.91
179.184.23.195
180.169.58.42
182.50.132.82
182.71.239.18
182.74.112.226
182.75.82.102
182.75.117.122
182.106.216.4
182.131.125.7
182.140.131.130
182.176.139.38
182.176.139.142
182.190.3.182
182.190.4.53
182.190.4.60
182.190.4.68
182.190.4.84
182.254.129.82
183.62.158.97
183.64.166.163
183.64.247.122
183.161.35.38
183.214.89.122
183.220.53.39
183.233.169.210
183.233.169.211
185.59.75.47
185.81.157.113
185.81.157.172
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.85.239.195
185.86.13.213
185.86.93.5
185.86.93.10
185.86.93.11
185.86.93.13
185.86.93.15
185.86.93.29
185.86.93.31
185.86.93.32
185.86.93.35
185.86.93.36
185.86.93.39
185.86.93.40
185.86.93.50
185.86.93.58
185.86.93.60
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.104
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.104.120.4
185.116.214.195
185.119.81.11
185.119.81.50
185.220.101.32
185.220.101.34
185.220.102.6
185.220.102.7
185.234.217.130
185.234.217.132
185.234.217.135
185.234.217.201
185.234.217.203
185.234.217.204
185.234.217.207
185.234.217.210
185.234.218.21
185.234.218.40
185.234.218.41
185.234.218.42
185.234.218.43
185.234.218.44
186.215.130.159
186.215.130.242
186.215.139.209
186.215.143.149
186.215.195.249
186.215.197.15
186.215.198.137
186.215.198.223
186.215.199.65
186.229.28.106
186.232.136.240
187.58.134.57
187.58.134.87
187.58.151.15
187.115.123.74
188.35.167.7
189.59.5.81
189.59.69.3
189.114.67.141
189.114.67.195
189.114.67.213
189.114.140.70
189.204.6.157
189.204.52.236
189.204.52.237
189.254.142.228
190.13.106.214
190.56.70.131
190.202.44.194
190.210.182.93
192.3.243.103
192.31.237.156
192.169.255.46
193.112.48.249
193.201.224.17
193.201.224.211
193.201.224.220
193.201.224.225
193.227.179.18
194.165.132.194
197.44.124.142
197.45.86.14
197.45.161.241
197.50.72.191
197.231.221.211
198.71.53.163
198.100.149.32
199.249.223.77
200.58.160.67
200.175.104.101
200.175.104.103
201.47.245.162
201.47.252.79
201.140.110.78
201.184.241.243
202.93.35.19
202.96.199.157
202.97.147.183
202.109.164.31
202.110.187.146
202.111.43.14
203.93.109.130
203.125.152.9
203.162.96.90
203.242.126.4
206.219.17.55
209.212.145.197
210.12.219.1
210.16.189.4
210.16.189.19
210.75.202.138
210.86.168.116
211.20.181.113
211.72.89.101
211.75.13.207
211.137.8.103
211.138.182.198
211.141.155.131
211.141.209.131
211.142.86.210
211.150.90.186
211.161.90.99
211.232.116.145
212.142.159.61
213.156.100.220
213.251.182.105
216.145.154.243
216.189.15.251
217.26.1.82
218.3.64.241
218.3.210.2
218.4.177.21
218.17.195.66
218.22.66.30
218.22.100.42
218.22.180.146
218.22.186.115
218.22.187.66
218.22.190.133
218.22.198.212
218.22.235.138
218.23.26.50
218.23.240.146
218.24.236.4
218.25.31.150
218.26.97.162
218.26.163.125
218.26.178.146
218.28.171.213
218.29.52.2
218.29.219.18
218.57.237.243
218.58.227.67
218.75.90.46
218.76.252.245
218.87.46.173
218.89.142.30
218.90.162.234
218.92.14.18
218.92.229.178
218.93.220.102
218.95.153.90
218.104.133.243
218.107.46.228
218.189.15.187
218.200.55.214
218.200.61.170
218.201.14.134
218.201.79.71
218.201.83.148
218.204.69.3
218.204.70.20
219.138.244.91
219.143.72.21
219.148.39.134
219.149.30.61
219.154.66.223
219.159.229.115
219.232.115.95
219.237.78.2
220.124.240.66
220.162.158.2
220.164.2.61
220.164.2.65
220.164.2.76
220.164.2.87
220.164.2.90
220.164.2.99
220.164.2.100
220.164.2.111
220.164.2.114
220.164.2.118
220.164.2.119
220.164.2.124
220.164.162.146
220.165.28.189
220.169.102.6
220.171.48.39
220.174.209.154
220.176.196.40
220.177.50.195
220.178.18.42
220.178.26.20
220.178.109.10
220.179.250.175
220.189.205.2
220.189.235.126
220.191.211.167
220.225.7.90
220.227.147.150
221.1.177.2
221.4.128.114
221.4.205.30
221.7.133.28
221.131.83.162
221.131.86.182
221.176.112.45
221.176.134.36
221.178.138.106
221.178.194.144
221.178.227.10
221.199.41.218
221.207.20.154
221.212.18.146
221.224.2.202
221.226.50.162
221.229.247.179
221.230.139.83
222.35.21.206
222.73.129.15
222.80.105.90
222.82.225.186
222.84.60.21
222.89.231.12
222.92.142.226
222.92.204.50
222.137.252.18
222.160.126.34
222.161.47.82
222.170.168.106
222.171.61.97
222.172.14.115
222.172.14.123
222.175.49.22
222.175.244.74
222.184.86.186
222.185.255.227
222.188.97.62
222.189.41.46
222.189.186.67
222.209.223.91
222.214.238.73
222.217.221.181
222.218.17.20
222.218.17.189
222.222.71.101
222.223.41.92
222.223.204.186
222.223.217.34
222.229.112.168
222.240.159.130
222.242.226.99
222.247.40.242
223.27.218.54
223.30.252.114
223.72.168.150
223.223.201.217

31
bi_courierauth_0_1d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_courierauth_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# courierauth with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/courierauth/0?age=1d
# Source File Date: Tue Jan 22 02:01:54 UTC 2019
#
# Category : attacks
# Version : 3377
#
# This File Date : Tue Jan 22 02:01:54 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_courierauth_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
94.102.53.10

476
bi_courierauth_2_30d.ipset Normal file
View File

@ -0,0 +1,476 @@
#
# bi_courierauth_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# courierauth with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/courierauth/2?age=30d
# Source File Date: Sat Jan 19 05:40:44 UTC 2019
#
# Category : attacks
# Version : 63
#
# This File Date : Sat Jan 19 05:40:44 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 446 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_courierauth_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.190.175.66
27.42.165.226
36.7.110.188
41.33.229.210
41.210.223.10
42.243.154.6
58.17.221.4
58.18.137.83
58.18.170.107
58.19.182.235
58.19.204.129
58.20.55.71
58.20.185.12
58.20.187.21
58.22.194.44
58.53.146.60
58.59.14.195
58.59.103.230
58.62.55.130
58.210.119.226
58.210.126.206
58.211.169.50
58.213.46.110
58.214.24.53
58.214.25.190
58.214.239.53
58.215.78.97
58.216.156.58
58.216.170.50
58.216.199.229
58.216.224.59
58.216.239.202
58.220.234.18
58.221.60.110
58.240.2.38
58.244.173.130
59.39.92.162
59.44.27.195
59.44.47.106
59.46.102.202
59.48.82.14
59.49.33.247
59.49.176.208
59.49.233.24
59.50.85.74
59.50.95.129
59.173.252.58
60.2.50.114
60.2.101.221
60.6.227.95
60.8.207.34
60.11.113.164
60.12.84.190
60.13.3.26
60.13.154.174
60.13.181.244
60.13.197.131
60.13.253.189
60.14.36.202
60.28.131.10
60.30.66.199
60.30.224.189
60.161.139.49
60.161.215.7
60.166.48.158
60.166.52.51
60.166.60.26
60.167.19.30
60.169.26.22
60.169.65.62
60.171.110.17
60.171.140.110
60.171.155.26
60.172.64.229
60.172.69.66
60.172.73.3
60.172.231.12
60.173.105.110
60.173.114.254
60.173.133.229
60.173.143.222
60.173.149.204
60.173.229.2
60.174.37.226
60.174.92.50
60.174.164.45
60.174.192.240
60.175.71.194
60.194.6.9
60.212.42.56
60.216.106.162
60.222.227.195
60.223.252.6
60.247.92.186
60.247.93.238
61.28.113.58
61.37.150.6
61.50.130.146
61.53.66.4
61.131.3.225
61.132.233.195
61.133.218.19
61.134.36.13
61.134.36.100
61.134.36.115
61.134.44.28
61.134.52.164
61.136.81.154
61.136.81.234
61.136.94.166
61.136.104.131
61.145.228.110
61.147.255.159
61.150.76.201
61.153.54.38
61.158.140.152
61.158.186.84
61.158.188.21
61.161.109.153
61.161.147.218
61.161.209.134
61.163.36.24
61.163.69.170
61.163.196.149
61.163.229.226
61.163.231.150
61.167.79.135
61.177.25.58
61.177.60.140
61.177.181.109
61.178.243.56
61.182.27.121
61.182.82.34
61.184.35.3
61.184.176.231
61.185.41.221
61.185.137.161
61.185.139.72
61.185.242.195
61.186.136.36
61.186.219.33
61.187.123.74
61.189.47.93
61.190.99.62
61.191.130.198
61.191.220.250
61.191.252.74
61.191.252.218
80.147.59.28
110.17.188.30
110.123.44.6
111.1.89.230
111.8.150.31
111.26.198.30
111.30.31.176
111.40.73.83
111.43.111.140
111.75.167.157
111.85.220.242
111.113.11.82
111.206.163.56
112.4.235.211
112.16.203.48
112.23.7.76
112.23.7.88
112.24.103.242
112.25.220.99
112.26.80.46
112.27.130.127
112.53.66.27
112.91.58.238
112.91.59.106
112.113.66.235
112.113.241.17
112.113.241.207
113.8.194.3
113.161.4.51
113.204.147.26
113.240.237.10
114.104.158.172
114.104.162.36
114.119.10.171
114.141.189.194
115.84.112.138
115.236.24.10
115.238.31.114
115.238.34.226
115.238.247.228
115.239.244.198
116.113.86.246
116.113.96.22
116.228.90.9
116.249.127.11
117.21.221.58
117.28.250.42
117.141.215.16
117.149.2.142
118.121.233.54
118.144.83.130
118.144.88.132
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
119.1.98.121
119.10.114.92
119.39.84.75
119.53.91.170
119.53.149.66
119.55.121.74
119.60.26.162
119.90.34.135
119.90.40.171
119.146.144.19
120.42.52.82
120.68.44.204
120.194.7.10
120.194.193.7
120.194.212.234
120.202.36.46
120.203.25.58
120.209.20.16
120.209.31.231
120.209.71.14
120.209.164.118
120.209.233.191
120.236.135.204
121.15.254.22
121.28.40.179
121.199.58.190
122.139.5.237
122.140.95.92
122.189.240.46
122.195.155.194
122.224.36.28
122.224.135.138
122.226.129.25
122.227.20.90
122.228.165.38
123.7.54.235
123.15.58.162
123.52.232.236
123.138.78.210
123.138.199.66
123.232.125.198
123.234.215.242
124.112.45.222
124.112.193.26
124.128.25.147
124.161.35.88
124.164.235.209
124.165.232.138
124.165.247.42
124.193.199.202
124.207.209.114
125.32.1.146
125.35.93.62
125.65.244.38
125.72.92.174
125.77.127.97
125.227.146.182
125.227.179.59
153.37.22.155
157.122.183.218
157.122.183.220
171.221.255.5
172.87.163.42
177.19.165.26
178.234.35.42
180.169.58.42
182.71.16.42
182.106.216.4
182.137.14.72
182.140.131.130
183.62.158.97
183.64.79.122
183.65.17.118
183.134.3.83
183.167.205.103
183.167.231.206
183.214.89.122
183.220.53.39
183.233.169.211
186.215.198.223
189.204.6.157
189.206.125.171
190.210.182.93
201.140.110.78
202.107.34.250
202.137.141.81
203.93.109.130
203.242.126.4
206.219.17.55
210.12.219.1
210.82.28.41
211.137.8.103
211.138.182.198
211.141.155.131
211.141.209.131
211.142.86.210
211.161.90.99
218.3.64.241
218.3.210.2
218.4.177.21
218.6.146.70
218.22.100.42
218.22.129.38
218.22.135.190
218.22.148.105
218.22.180.146
218.22.186.115
218.22.187.66
218.22.198.212
218.22.206.178
218.22.235.138
218.23.26.50
218.23.114.22
218.23.156.227
218.23.161.2
218.23.240.146
218.24.236.4
218.26.97.162
218.26.163.125
218.26.178.146
218.27.162.22
218.28.50.51
218.28.76.99
218.28.135.178
218.28.164.218
218.28.171.213
218.28.234.53
218.29.52.2
218.29.219.18
218.56.102.14
218.57.142.194
218.57.237.243
218.58.105.206
218.64.57.12
218.64.165.194
218.75.148.181
218.76.140.155
218.77.80.51
218.84.117.90
218.87.46.173
218.90.162.234
218.90.180.110
218.92.14.18
218.92.237.2
218.95.153.90
218.107.46.228
218.107.49.71
218.108.102.209
218.201.14.134
218.201.62.71
218.201.83.148
218.204.69.3
218.204.70.20
218.206.132.194
219.138.59.240
219.138.243.196
219.138.244.91
219.142.25.106
219.142.101.1
219.148.39.134
219.154.66.223
219.154.133.161
219.159.70.68
219.159.229.115
220.133.24.4
220.162.158.2
220.164.2.91
220.164.2.106
220.164.2.112
220.164.2.114
220.164.2.121
220.164.162.146
220.164.193.238
220.165.28.189
220.169.102.6
220.171.48.39
220.173.107.124
220.174.209.154
220.176.196.40
220.178.2.114
220.178.26.20
220.178.221.6
220.179.250.175
220.180.104.130
220.189.235.126
221.1.177.2
221.4.128.114
221.4.197.154
221.4.205.30
221.12.137.6
221.130.130.238
221.131.83.162
221.176.112.45
221.176.176.126
221.178.192.194
221.178.194.144
221.178.227.10
221.199.41.218
221.202.201.85
221.207.20.154
221.212.18.146
221.212.58.242
221.224.114.229
221.226.176.254
221.230.139.83
221.231.109.126
221.237.208.10
222.35.21.206
222.80.105.90
222.91.248.106
222.92.204.50
222.137.252.18
222.141.50.134
222.160.126.34
222.161.47.82
222.161.209.130
222.161.229.55
222.162.70.249
222.170.168.106
222.171.61.97
222.175.49.22
222.180.100.198
222.185.255.227
222.186.68.154
222.187.41.10
222.188.97.62
222.189.41.46
222.189.186.67
222.191.233.238
222.209.223.91
222.214.238.73
222.217.221.178
222.217.221.179
222.218.17.187
222.222.71.101
222.222.219.154
222.223.101.58
222.223.217.34
222.243.211.200
223.72.168.150
223.100.152.42
223.241.100.16

773
bi_default_0_1d.ipset Normal file
View File

@ -0,0 +1,773 @@
#
# bi_default_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/0?age=1d
# Source File Date: Wed Jan 23 11:04:55 UTC 2019
#
# Category : attacks
# Version : 10234
#
# This File Date : Wed Jan 23 11:04:55 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 743 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.190.188.43
5.39.77.117
5.101.1.49
5.128.60.74
5.135.135.116
5.196.75.70
5.196.137.213
5.249.145.73
12.96.122.37
12.208.100.66
13.65.202.130
13.67.50.17
13.127.206.244
14.29.250.24
14.45.233.239
14.63.170.28
14.63.221.108
14.116.217.18
14.161.6.201
14.161.36.71
23.96.112.255
23.253.108.113
24.37.196.182
24.44.18.253
24.44.121.229
24.51.108.179
27.40.23.221
27.155.99.161
27.254.137.144
31.14.133.167
31.44.184.132
31.46.16.95
31.168.253.60
31.220.51.240
32.97.110.52
32.97.110.54
34.221.63.104
35.185.78.91
35.200.174.79
35.204.47.208
35.229.147.116
35.241.232.214
35.243.104.224
36.67.59.193
36.250.234.65
37.59.6.106
37.59.100.22
37.59.110.165
37.114.131.135
37.114.131.137
37.114.168.240
37.187.0.20
37.187.114.136
37.187.180.11
37.187.216.4
37.207.34.156
37.252.185.53
37.252.200.248
39.155.237.26
40.73.67.205
40.73.118.199
40.76.50.216
40.113.243.254
40.114.25.203
41.33.61.165
41.44.143.228
41.77.145.34
41.77.199.28
41.202.169.51
41.214.20.60
42.81.133.34
42.112.28.28
43.226.122.185
43.249.30.119
45.32.83.102
45.55.129.23
45.55.174.38
45.55.190.46
45.119.82.174
45.119.83.196
45.249.48.21
46.4.103.186
46.18.3.47
46.101.9.250
46.101.149.230
46.105.123.11
46.216.186.38
46.228.199.105
49.51.241.95
50.18.126.129
50.63.165.214
50.71.229.131
50.73.95.203
50.100.193.142
51.15.235.74
51.38.38.221
51.38.48.127
51.38.51.113
51.38.54.87
51.38.133.110
51.38.186.48
51.38.238.205
51.38.239.50
51.68.122.216
51.68.174.205
51.75.24.207
51.75.65.72
51.75.143.169
51.75.202.58
51.75.247.138
51.75.251.33
51.75.253.94
51.75.255.138
51.143.88.126
51.254.220.20
51.255.35.58
51.255.194.249
52.38.94.70
52.42.220.61
52.56.131.94
52.172.25.156
54.36.151.64
54.36.189.143
54.37.19.130
54.37.82.213
54.37.158.40
54.37.233.163
54.38.55.182
58.26.233.195
58.87.72.113
58.212.242.209
58.242.83.16
59.120.243.8
60.12.249.230
61.76.175.195
61.91.109.34
61.162.59.102
62.82.11.74
62.210.107.172
62.210.168.182
62.234.133.230
64.76.6.126
67.186.244.255
67.205.135.127
67.205.163.213
67.205.165.5
68.181.160.9
68.183.17.76
68.183.62.109
70.178.97.250
73.34.124.146
73.134.228.26
73.141.47.152
74.95.83.153
74.130.22.36
75.80.193.222
76.64.162.193
76.74.150.42
76.74.177.229
77.81.230.10
77.93.255.68
77.158.223.83
78.182.101.74
79.2.173.187
79.161.105.12
80.111.29.139
80.211.230.129
80.211.240.158
81.136.189.195
81.173.203.130
81.174.227.27
81.176.229.168
81.248.70.60
82.209.117.87
83.102.251.109
83.208.39.202
83.221.222.251
84.254.0.120
85.70.70.64
87.98.162.59
87.228.111.210
88.129.167.204
89.40.116.98
89.154.162.113
89.184.68.227
89.187.228.99
89.188.223.205
89.215.238.26
89.250.82.53
90.88.26.157
90.90.207.251
90.92.135.215
90.114.110.109
91.121.205.83
91.134.139.87
91.202.132.172
91.210.224.245
91.225.120.202
92.42.108.115
92.222.70.130
92.222.218.139
94.21.200.230
94.23.55.228
94.23.224.107
94.25.38.70
94.56.79.242
94.101.181.238
94.132.79.55
94.191.24.164
94.191.70.57
94.191.86.24
94.191.87.254
94.230.136.33
95.48.54.106
95.58.194.148
95.78.171.197
95.86.194.212
100.3.130.84
101.89.145.133
101.167.174.108
101.207.248.64
101.207.248.73
101.207.248.92
101.251.197.238
101.251.245.220
102.176.112.215
103.21.119.34
103.37.150.170
103.37.160.252
103.41.23.205
103.44.28.43
103.74.193.250
103.86.50.176
103.94.121.242
103.129.220.248
103.245.181.2
103.249.205.78
104.41.217.104
104.41.223.117
104.128.68.247
104.154.155.178
104.155.93.55
104.199.113.121
104.199.198.7
104.209.237.25
104.234.223.14
104.236.142.200
104.244.77.155
104.248.37.10
104.248.64.25
104.248.121.67
104.248.149.29
104.248.181.102
104.248.188.192
104.248.190.16
104.248.194.119
104.248.248.82
105.235.193.251
105.235.201.251
105.247.157.59
106.2.6.143
106.12.24.108
106.12.42.98
106.12.102.6
106.12.113.194
106.12.125.212
106.12.200.165
106.12.205.171
106.12.212.39
106.13.35.212
106.13.47.10
106.13.52.247
106.13.53.160
106.51.70.251
106.75.157.9
107.170.63.221
107.170.73.105
107.170.76.170
107.172.150.177
108.52.24.106
108.179.205.203
109.89.36.91
109.159.207.42
109.252.231.164
110.10.174.179
110.72.25.189
110.74.177.198
110.150.217.9
110.170.252.164
110.227.189.6
111.47.3.27
111.68.107.37
111.198.66.172
111.200.52.250
111.223.94.221
111.225.216.6
111.230.5.244
111.230.15.197
111.230.51.112
111.230.73.133
111.230.140.177
111.230.157.219
111.231.88.23
111.231.250.228
112.64.34.171
112.171.152.12
112.175.106.53
112.217.225.61
112.248.18.161
113.54.194.79
113.70.68.58
113.119.164.172
113.141.70.199
113.204.194.84
114.29.236.236
114.38.137.129
114.67.22.130
114.67.227.241
114.91.183.145
114.112.65.187
114.255.153.237
115.47.127.252
115.68.226.124
115.111.121.205
115.159.108.189
115.159.185.71
115.159.216.187
115.159.237.209
115.222.244.16
115.248.198.107
115.254.63.52
116.68.127.9
116.93.119.13
116.196.83.181
116.236.211.238
117.135.131.123
118.24.31.228
118.24.33.65
118.24.36.219
118.24.54.178
118.24.91.241
118.25.10.242
118.25.18.90
118.25.45.24
118.25.46.72
118.25.128.19
118.25.193.250
118.71.224.186
118.89.27.122
118.89.193.201
118.89.234.15
118.89.237.64
118.89.240.78
118.98.127.138
118.107.233.29
118.126.112.72
118.172.229.184
119.27.160.98
119.27.170.189
119.27.177.245
119.29.9.32
119.29.80.17
119.29.133.15
119.29.227.222
119.41.207.189
119.90.39.158
119.254.209.115
120.52.120.166
120.88.46.226
120.131.9.177
120.131.13.186
120.132.30.116
121.8.154.178
121.33.248.234
121.130.88.44
121.160.181.195
121.204.145.50
122.2.223.242
122.96.128.211
122.114.182.72
122.154.134.38
122.224.64.37
122.228.253.96
123.31.43.144
123.125.196.210
123.138.73.62
123.206.26.118
123.206.45.16
123.206.45.166
123.206.91.120
123.207.54.152
123.207.137.176
123.234.30.156
124.43.17.169
124.114.12.21
124.127.138.1
124.158.5.112
124.193.207.90
125.46.49.120
125.132.135.136
125.134.251.45
128.199.91.82
128.199.91.87
128.199.130.218
128.199.162.14
128.199.178.188
128.199.186.30
128.199.221.163
129.211.104.184
132.232.2.184
132.232.46.186
132.232.54.102
132.232.60.84
133.130.127.188
134.175.13.213
134.175.38.205
134.175.62.14
134.175.69.74
137.74.26.179
137.155.41.153
138.68.31.105
138.68.95.148
138.68.106.62
138.68.226.234
138.197.5.191
138.197.153.30
139.59.15.43
139.59.25.252
139.59.78.70
139.59.141.137
139.159.231.152
139.199.6.107
139.199.118.210
139.199.164.87
139.199.176.15
139.199.221.21
140.143.28.139
140.143.45.238
140.143.154.13
140.143.247.229
141.85.224.117
142.93.27.60
142.93.53.109
142.93.108.200
142.93.160.229
142.93.174.47
142.93.250.94
142.165.136.77
144.217.79.233
144.217.81.46
144.217.160.166
144.217.161.78
144.217.165.224
145.239.82.62
146.148.105.126
146.185.148.7
146.185.148.67
146.185.243.128
148.70.11.98
148.70.63.10
148.101.215.168
149.56.140.219
149.56.166.241
149.56.193.184
149.202.54.124
150.95.66.109
150.129.69.113
150.140.174.55
151.80.61.93
151.80.144.255
151.80.233.151
151.84.105.118
152.168.137.2
152.249.246.65
154.8.220.32
154.70.200.122
154.115.216.88
156.17.134.5
156.236.72.23
157.230.22.95
157.230.24.38
158.69.221.102
159.65.5.209
159.65.13.152
159.65.85.83
159.65.88.171
159.65.94.135
159.65.103.36
159.65.135.55
159.65.154.93
159.65.179.4
159.65.239.104
159.65.242.16
159.89.54.241
159.89.104.243
159.89.173.56
159.203.185.59
159.203.198.34
160.19.212.232
161.53.81.21
162.223.90.63
162.243.111.85
162.243.142.143
162.243.158.198
164.132.47.139
164.132.56.243
164.132.57.16
164.132.197.108
164.132.220.158
164.132.227.37
165.227.17.252
165.227.46.222
165.227.59.177
165.255.135.127
167.88.178.88
167.99.43.65
167.99.143.90
167.99.180.229
167.99.210.90
167.99.234.170
167.114.0.23
167.114.192.162
168.197.240.11
168.255.251.126
169.38.96.100
169.239.13.41
170.210.68.163
172.124.19.250
172.247.156.114
173.23.187.5
174.90.202.1
175.25.50.3
175.117.145.239
175.148.18.142
176.31.162.82
176.31.252.148
176.31.253.105
176.237.137.230
177.38.45.185
177.43.249.186
177.52.53.152
177.144.136.133
177.200.88.251
178.33.45.156
178.33.233.54
178.62.37.130
178.113.77.17
178.128.53.101
178.128.57.64
178.128.107.61
178.128.108.22
178.128.150.158
178.128.162.10
178.128.221.237
178.159.127.47
179.105.230.253
180.97.153.163
180.166.192.66
180.250.55.130
180.250.111.17
180.250.205.114
181.29.14.32
181.51.250.126
181.53.255.208
181.65.187.157
181.123.9.252
182.61.31.103
182.61.59.237
182.127.91.157
183.6.176.182
183.63.87.235
183.111.169.106
183.131.3.109
183.214.141.6
184.2.107.70
185.10.215.227
185.49.84.46
185.66.213.64
185.87.121.19
185.144.156.59
185.183.111.4
185.189.115.37
185.227.110.251
185.244.25.112
185.254.120.6
186.24.43.28
186.120.93.42
186.193.234.174
186.230.34.233
186.233.94.106
186.249.209.246
187.0.160.130
187.20.106.184
187.125.111.138
187.185.70.10
187.191.114.79
188.10.66.38
188.131.146.22
188.131.179.44
188.154.177.168
188.165.242.200
188.166.77.220
188.166.81.123
188.166.176.154
188.166.228.28
188.166.233.64
188.166.243.150
188.255.42.234
189.125.2.234
189.161.147.67
190.16.52.22
190.30.44.25
190.93.208.176
190.144.161.11
190.145.241.122
190.147.183.191
190.153.178.46
190.205.53.91
190.240.32.61
191.8.80.178
191.17.119.107
191.177.203.149
191.185.1.41
191.187.66.236
192.99.245.135
192.144.130.87
192.210.220.3
192.241.175.52
192.248.43.132
193.24.222.66
193.70.79.213
193.70.91.115
193.112.10.59
193.112.19.70
193.112.52.105
193.112.74.20
193.112.86.98
193.112.173.216
193.112.244.110
193.201.224.12
194.61.24.155
194.115.212.82
194.181.140.218
194.182.76.190
194.224.19.254
195.22.141.33
195.98.73.196
196.189.255.32
196.189.255.88
196.218.109.186
197.5.144.78
197.50.95.190
197.58.160.167
197.248.2.55
198.199.117.143
198.245.63.135
200.11.219.206
200.13.158.12
200.35.110.58
200.95.175.103
200.116.105.213
200.150.171.76
200.188.133.91
201.43.17.163
201.69.255.187
201.174.41.89
201.239.64.233
202.29.30.206
202.51.74.50
202.73.44.251
202.100.168.16
202.106.10.66
202.120.1.37
202.164.151.25
203.76.214.191
203.92.45.11
203.99.130.124
203.113.66.151
203.161.189.107
203.173.94.65
204.48.22.64
206.81.24.64
206.189.127.6
206.189.149.126
206.189.222.38
206.189.239.103
207.188.89.242
209.97.163.46
209.97.169.181
210.5.120.237
210.21.226.2
210.73.83.253
210.73.195.244
210.75.24.234
210.183.236.30
210.186.50.51
211.21.129.4
211.23.139.122
211.24.126.238
212.28.242.178
212.47.241.233
212.64.11.64
212.64.11.188
212.89.171.146
212.114.63.223
212.145.227.246
212.156.115.58
212.185.198.136
213.32.91.37
213.120.107.47
213.187.74.121
213.244.18.14
216.244.76.114
216.250.114.76
217.8.49.195
217.32.246.90
217.76.32.56
217.182.69.48
217.182.79.139
217.182.95.16
217.182.204.107
218.5.112.6
218.10.228.90
218.17.245.44
218.18.137.205
218.89.69.12
218.92.1.146
218.95.182.231
218.241.236.108
219.91.140.43
219.135.157.133
219.153.15.122
220.120.109.166
220.123.184.123
220.133.180.245
221.131.28.146
221.210.237.5
222.92.37.85
222.122.50.237
222.128.13.94
222.174.55.2
222.197.219.6
222.252.30.117

288
bi_default_1_7d.ipset Normal file
View File

@ -0,0 +1,288 @@
#
# bi_default_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/1?age=7d
# Source File Date: Wed Jan 23 06:04:52 UTC 2019
#
# Category : attacks
# Version : 778
#
# This File Date : Wed Jan 23 06:04:52 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 258 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.234.79.66
2.32.114.226
14.63.221.108
27.72.24.93
27.155.99.161
36.66.69.33
36.67.59.193
36.67.135.42
36.80.48.9
36.84.80.31
36.89.56.175
36.250.234.65
37.187.0.20
37.187.118.14
37.187.147.84
39.116.161.222
41.67.236.40
41.159.146.138
41.210.128.37
45.55.185.240
45.249.48.21
46.18.3.47
46.97.239.16
49.206.242.22
50.248.154.57
51.254.47.198
51.254.113.117
51.254.220.20
51.255.35.58
51.255.91.75
54.36.151.64
54.37.75.178
54.37.158.40
54.37.232.137
54.38.183.181
58.210.6.53
58.242.83.11
58.242.83.16
58.242.83.17
58.247.111.198
59.120.243.8
60.12.215.85
60.29.70.132
60.247.77.252
61.12.38.162
61.50.130.252
61.76.169.138
61.219.45.81
71.56.218.201
72.38.90.230
73.141.47.152
75.127.147.2
76.74.177.229
77.93.255.68
77.108.207.172
78.231.186.151
79.134.4.138
80.26.116.5
80.95.188.129
81.26.66.110
81.136.189.195
81.174.8.105
81.174.227.27
82.67.91.66
82.85.143.181
82.152.171.189
82.200.226.226
83.144.92.94
84.255.152.10
88.84.200.139
89.215.238.26
91.121.136.47
91.121.142.225
91.134.140.32
92.46.223.98
92.222.84.34
94.23.0.13
101.28.247.133
103.9.22.94
103.44.28.43
103.94.121.242
103.108.228.48
103.249.205.78
104.234.223.14
104.236.198.255
104.238.92.100
106.51.72.240
109.68.126.139
109.195.94.140
110.10.129.226
110.10.174.179
111.230.247.243
112.171.152.12
113.203.237.86
113.204.66.138
114.241.199.75
115.68.181.222
115.88.201.58
115.249.205.29
116.196.113.195
117.66.243.77
117.156.234.3
117.159.144.67
118.21.134.67
118.25.102.61
118.45.190.133
118.172.229.184
118.179.136.26
118.182.118.248
119.4.250.72
119.29.9.32
119.29.80.17
119.29.197.54
119.29.227.222
119.204.246.89
119.235.21.178
120.52.120.166
120.77.173.32
120.195.143.172
121.8.154.178
121.12.151.250
121.14.43.169
121.244.189.25
122.2.223.242
122.146.86.11
122.154.134.38
123.59.188.7
123.127.107.70
123.207.231.63
124.43.17.169
124.128.89.187
124.158.5.112
124.194.44.219
125.134.251.45
129.122.16.156
129.205.208.20
129.205.208.21
129.205.208.22
129.205.208.23
131.72.141.34
132.148.19.93
137.74.199.177
138.197.44.25
139.59.78.70
139.59.249.255
139.159.231.152
139.199.100.81
139.199.113.140
139.199.119.97
143.255.152.237
149.56.15.98
149.202.214.11
154.119.7.3
159.65.12.204
161.53.81.21
164.132.47.139
164.132.56.243
164.132.110.223
164.132.205.21
164.163.99.10
165.84.191.236
165.227.25.195
167.98.62.6
175.117.145.239
175.184.233.107
176.31.100.19
176.31.252.148
178.32.202.92
178.62.201.159
179.63.252.22
179.228.242.120
180.76.162.111
180.250.115.98
180.250.205.114
180.250.248.39
181.40.76.162
181.53.255.208
181.65.187.157
182.18.162.136
182.61.61.185
183.6.176.182
183.64.62.173
183.107.101.213
185.207.232.232
185.241.4.160
186.215.130.242
186.230.34.233
187.52.206.180
187.95.117.150
187.190.236.88
188.121.26.102
188.165.211.201
188.166.1.95
188.166.216.84
188.166.228.28
188.166.243.150
188.170.109.114
188.187.52.223
189.125.2.234
189.254.33.157
190.55.238.31
190.82.73.92
190.85.63.50
190.128.137.10
190.144.14.170
190.153.178.46
190.202.114.106
191.8.80.178
191.255.248.91
193.70.36.161
193.70.85.206
193.112.3.110
193.112.10.59
193.112.69.117
193.112.191.228
193.201.224.216
194.228.3.191
195.239.204.94
197.51.120.169
197.156.72.154
197.243.32.204
199.184.126.3
200.29.100.224
200.178.253.213
200.207.216.138
201.16.188.205
201.20.36.4
201.76.162.152
201.144.84.82
202.51.110.214
202.73.44.251
202.88.237.110
202.126.46.39
202.131.152.2
202.137.154.173
202.138.233.92
203.109.110.180
210.73.195.244
210.183.236.30
210.212.215.165
211.22.222.252
211.144.122.42
211.159.156.188
212.145.227.246
212.156.115.58
213.44.63.133
213.120.170.33
217.32.246.90
217.182.204.107
218.5.112.6
218.17.221.58
219.65.65.195
219.93.67.113
219.135.194.73
220.189.202.114
222.128.13.94
222.240.232.170
222.252.30.117

560
bi_default_2_30d.ipset Normal file
View File

@ -0,0 +1,560 @@
#
# bi_default_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/2?age=30d
# Source File Date: Wed Jan 23 09:55:10 UTC 2019
#
# Category : attacks
# Version : 200
#
# This File Date : Wed Jan 23 09:55:11 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 530 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.215.236.27
1.234.79.66
2.32.114.226
2.237.133.169
5.88.161.197
5.135.166.135
5.188.10.76
14.18.235.254
14.29.148.96
14.35.249.205
14.63.221.108
14.102.14.138
27.72.24.93
27.155.99.161
31.13.204.98
31.172.80.18
36.66.69.33
36.66.203.251
36.67.59.193
36.67.135.42
36.80.48.9
36.84.80.31
36.89.56.175
36.250.234.65
37.187.0.20
37.187.50.48
37.187.118.14
37.187.147.84
39.116.161.222
41.39.115.16
41.67.236.40
41.72.105.171
41.159.146.138
41.210.128.37
41.223.142.211
42.61.24.202
45.55.67.128
45.55.185.240
45.122.221.42
45.249.48.21
46.18.3.47
46.97.239.16
46.101.26.63
46.148.192.41
46.171.25.26
46.249.78.142
47.180.162.186
49.163.34.42
49.206.192.39
49.206.242.22
49.248.167.102
50.248.154.57
51.254.37.192
51.254.47.198
51.254.113.117
51.254.124.9
51.254.208.16
51.254.220.20
51.255.35.58
51.255.91.75
51.255.166.189
54.36.151.64
54.37.67.193
54.37.75.178
54.37.158.40
54.37.232.137
54.38.183.181
58.9.73.68
58.42.226.103
58.142.30.94
58.210.6.53
58.210.42.4
58.210.96.156
58.242.83.7
58.242.83.8
58.242.83.11
58.242.83.14
58.242.83.16
58.242.83.17
58.242.83.34
58.242.83.39
58.247.111.198
59.30.101.105
59.120.243.8
60.12.215.85
60.29.70.132
60.247.77.252
61.12.38.162
61.14.208.253
61.50.130.252
61.72.255.26
61.76.169.138
61.91.126.149
61.163.179.12
61.177.172.60
61.219.45.81
62.133.141.165
64.34.202.161
66.31.211.242
69.90.223.232
71.56.218.201
72.38.90.230
73.141.47.152
73.239.74.86
75.127.147.2
76.74.177.229
77.93.255.68
77.108.207.172
78.36.200.208
78.83.84.60
78.188.101.144
78.196.118.157
78.231.186.151
79.134.4.138
79.135.230.116
79.137.64.132
80.21.147.85
80.26.116.5
80.82.51.103
80.95.188.129
80.229.253.212
81.26.66.110
81.130.146.18
81.133.216.92
81.136.189.195
81.142.80.97
81.149.211.134
81.174.8.105
81.174.227.27
82.64.3.51
82.67.91.66
82.85.143.181
82.152.171.189
82.200.65.218
82.200.226.226
82.208.134.35
83.16.14.107
83.144.92.94
84.255.152.10
85.192.78.10
88.84.200.139
88.147.143.242
89.36.222.85
89.215.238.26
89.248.115.120
91.112.90.6
91.121.7.107
91.121.85.30
91.121.136.47
91.121.142.225
91.121.203.177
91.134.140.32
91.205.173.66
91.219.66.43
91.232.48.29
92.46.223.98
92.115.252.87
92.222.84.34
93.39.196.245
93.42.75.89
94.23.0.13
95.85.30.24
95.167.39.12
96.9.129.155
96.57.82.166
96.72.197.200
96.224.240.84
101.28.247.133
103.9.22.94
103.9.88.249
103.36.84.100
103.40.235.188
103.82.98.22
103.94.121.242
103.108.228.48
103.231.78.221
103.241.183.235
103.249.205.78
103.251.221.22
104.40.220.5
104.131.57.64
104.234.223.14
104.236.198.255
104.238.92.100
106.51.72.240
106.51.226.154
109.68.126.139
109.73.46.142
109.195.94.140
109.202.18.235
110.10.129.226
110.10.174.179
110.175.57.53
111.230.140.177
111.230.247.243
111.231.85.138
112.85.42.106
112.85.42.201
112.171.152.12
113.160.244.144
113.203.237.86
113.204.66.138
114.4.192.253
114.4.208.62
114.108.177.165
114.200.4.207
114.241.199.75
115.68.181.222
115.88.201.58
115.159.25.60
115.236.33.226
115.249.205.29
116.7.245.184
116.90.81.14
116.125.224.129
116.196.113.195
117.34.70.83
117.41.185.108
117.66.243.77
117.71.53.105
117.156.234.3
117.159.144.67
117.218.51.185
117.239.48.242
118.21.134.67
118.25.2.114
118.25.102.61
118.45.190.133
118.69.172.143
118.97.111.210
118.163.24.179
118.172.229.184
118.179.136.26
118.182.118.248
119.4.250.72
119.28.66.152
119.29.9.32
119.29.58.239
119.29.80.17
119.29.197.54
119.29.227.222
119.204.141.150
119.204.246.89
119.235.21.178
120.36.3.103
120.52.120.166
120.77.173.32
120.92.15.82
120.195.20.232
120.195.143.172
121.8.154.178
121.12.151.250
121.14.43.169
121.134.204.54
121.162.29.165
121.201.66.39
121.244.189.25
122.2.223.242
122.14.193.247
122.146.86.11
122.152.221.72
122.154.134.38
122.160.152.107
122.160.152.109
122.175.55.196
122.194.229.3
123.59.188.7
123.124.156.253
123.127.107.70
123.157.138.165
123.206.76.184
123.207.79.36
123.207.91.238
123.207.231.63
124.6.139.242
124.43.17.169
124.67.81.2
124.128.89.187
124.158.5.112
124.193.236.138
124.194.44.219
125.70.227.38
125.134.251.45
125.184.154.143
125.212.207.205
125.212.233.50
128.199.95.223
129.122.16.156
129.205.208.20
129.205.208.21
129.205.208.22
129.205.208.23
131.72.141.34
131.108.164.245
132.148.19.93
132.148.152.53
137.74.112.125
137.74.176.208
137.74.199.177
138.197.44.25
139.59.78.70
139.59.249.255
139.159.231.152
139.199.100.81
139.199.113.140
139.199.119.97
140.143.230.156
142.4.204.122
142.54.101.146
143.255.152.237
145.239.76.62
147.135.134.53
149.56.15.98
149.202.214.11
150.107.148.155
151.80.155.98
154.118.141.90
154.119.7.3
157.100.133.21
159.65.12.204
161.53.81.21
164.132.47.139
164.132.56.243
164.132.99.59
164.132.110.223
164.132.205.21
164.132.225.151
164.163.99.10
165.84.191.236
165.227.25.195
167.98.62.6
169.255.127.67
175.117.145.239
175.184.233.107
175.205.114.52
176.31.100.19
176.31.126.176
176.31.252.148
176.106.217.41
177.39.222.152
177.104.242.83
177.206.128.131
178.32.202.92
178.62.201.159
178.239.116.136
179.63.252.22
179.228.242.120
180.76.162.111
180.250.115.98
180.250.205.114
180.250.248.39
181.15.216.20
181.28.191.54
181.40.76.162
181.48.14.50
181.48.68.54
181.53.251.181
181.53.255.208
181.65.187.157
182.18.162.136
182.61.61.185
183.6.176.182
183.57.72.252
183.64.62.173
183.82.106.77
183.101.8.161
183.107.101.201
183.107.101.213
183.107.101.238
183.107.101.240
183.107.101.252
183.234.63.10
185.207.232.232
185.241.4.160
185.244.25.198
186.31.69.123
186.67.23.122
186.96.120.250
186.120.187.234
186.147.163.171
186.215.130.242
186.230.34.233
186.249.209.22
186.250.48.17
187.52.206.180
187.64.128.7
187.65.1.50
187.95.117.150
187.120.47.234
187.190.236.88
188.121.26.102
188.165.211.201
188.165.224.141
188.166.1.95
188.166.216.84
188.166.228.28
188.166.243.150
188.170.109.114
188.187.3.121
188.187.52.118
188.187.52.223
188.187.109.155
188.187.119.30
188.187.120.128
188.187.120.158
189.6.45.130
189.125.2.234
189.254.33.157
190.0.9.212
190.0.10.138
190.1.201.152
190.14.247.90
190.55.238.31
190.82.73.92
190.85.6.90
190.85.63.50
190.85.83.230
190.96.54.68
190.98.228.54
190.128.137.10
190.128.230.14
190.144.14.170
190.153.178.46
190.187.67.67
190.202.114.106
190.248.139.242
191.8.80.178
191.255.248.91
192.144.156.187
193.70.0.42
193.70.36.161
193.70.85.206
193.112.3.110
193.112.10.59
193.112.69.117
193.112.191.228
193.164.108.28
193.201.224.216
193.213.204.133
193.254.37.104
194.50.144.206
194.182.67.69
194.228.3.191
195.239.204.94
197.51.120.169
197.156.72.154
197.243.32.204
198.50.179.83
199.184.126.3
200.11.150.238
200.29.100.224
200.73.6.198
200.74.11.14
200.178.253.213
200.207.216.138
201.16.188.205
201.20.36.4
201.76.162.152
201.144.84.82
201.236.225.231
201.245.1.107
201.245.191.102
202.28.33.166
202.51.110.214
202.73.44.251
202.88.237.110
202.100.182.250
202.120.62.138
202.126.46.39
202.129.16.124
202.129.29.135
202.131.152.2
202.137.154.173
202.137.154.235
202.138.233.92
202.149.193.118
202.166.206.166
203.66.168.81
203.109.110.180
203.223.143.114
208.97.140.112
210.73.195.244
210.183.236.30
210.212.215.165
211.22.222.252
211.103.222.149
211.144.122.42
211.159.156.188
211.252.84.20
212.44.65.22
212.145.227.246
212.156.115.58
213.41.128.85
213.44.63.133
213.120.170.33
213.120.170.34
213.242.113.178
217.32.246.90
217.92.99.172
217.182.68.146
217.182.204.107
218.4.196.178
218.5.36.120
218.5.112.6
218.17.221.58
218.75.102.110
218.75.132.59
218.94.156.130
218.206.116.220
218.236.101.141
219.65.65.195
219.93.67.113
219.135.194.73
219.138.145.102
219.153.15.122
219.239.47.66
220.189.202.114
220.191.194.22
220.195.2.152
221.181.227.43
221.228.197.146
222.99.52.246
222.128.13.94
222.175.146.50
222.184.72.66
222.186.191.117
222.187.225.194
222.240.232.170
222.252.30.117
223.84.128.24

32
bi_dns_0_1d.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bi_dns_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dns with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dns/0?age=1d
# Source File Date: Wed Jan 23 06:32:33 UTC 2019
#
# Category : attacks
# Version : 2778
#
# This File Date : Wed Jan 23 06:32:33 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 2 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dns_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.192.90.183
129.204.58.88

42
bi_dovecot-pop3imap_0_1d.ipset Normal file
View File

@ -0,0 +1,42 @@
#
# bi_dovecot-pop3imap_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot-pop3imap with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot-pop3imap/0?age=1d
# Source File Date: Wed Jan 23 09:55:13 UTC 2019
#
# Category : attacks
# Version : 7413
#
# This File Date : Wed Jan 23 09:55:13 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 12 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
37.49.227.156
64.137.222.7
80.62.117.244
87.49.45.66
105.27.154.122
105.159.143.71
168.144.108.131
168.144.108.150
187.19.194.170
195.201.27.239
213.81.178.4
213.231.1.150

1003
bi_dovecot-pop3imap_2_30d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

45
bi_dovecot_0_1d.ipset Normal file
View File

@ -0,0 +1,45 @@
#
# bi_dovecot_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/0?age=1d
# Source File Date: Wed Jan 23 10:34:32 UTC 2019
#
# Category : attacks
# Version : 8819
#
# This File Date : Wed Jan 23 10:34:32 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 15 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
27.60.168.42
27.60.181.238
37.49.227.49
42.61.16.118
96.127.158.234
106.209.226.234
109.166.128.5
111.65.47.230
111.91.99.103
121.7.166.233
125.64.94.197
144.122.30.238
185.216.140.23
185.218.234.44
217.114.218.22

32
bi_dovecot_1_7d.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bi_dovecot_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/1?age=7d
# Source File Date: Mon Jan 21 14:24:39 UTC 2019
#
# Category : attacks
# Version : 671
#
# This File Date : Mon Jan 21 14:24:39 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 2 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
111.91.91.134
139.162.109.245

457
bi_dovecot_2_30d.ipset Normal file
View File

@ -0,0 +1,457 @@
#
# bi_dovecot_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/2?age=30d
# Source File Date: Wed Jan 23 09:55:12 UTC 2019
#
# Category : attacks
# Version : 202
#
# This File Date : Wed Jan 23 09:55:12 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 427 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.255.70.114
1.255.70.123
14.177.235.133
27.42.165.226
31.13.227.4
36.7.110.188
36.33.0.160
36.33.35.217
36.67.61.165
37.49.224.116
37.49.224.175
37.49.224.181
37.49.225.206
41.210.223.10
58.17.221.4
58.19.204.129
58.20.36.88
58.20.187.21
58.52.131.108
58.58.135.158
58.59.103.230
58.62.55.130
58.210.119.226
58.213.46.110
58.214.24.53
58.214.25.190
58.214.239.53
58.215.13.154
58.216.156.58
58.216.170.50
58.216.238.76
58.216.239.202
58.220.234.18
58.222.105.114
58.242.164.10
58.244.173.130
58.246.5.122
59.44.47.106
59.45.222.24
59.46.102.202
59.49.176.208
59.51.166.26
59.52.8.211
60.2.15.52
60.2.50.114
60.6.214.48
60.6.227.95
60.11.113.164
60.13.253.189
60.29.163.114
60.30.5.5
60.30.66.199
60.30.224.189
60.161.139.49
60.166.48.158
60.166.60.26
60.171.155.26
60.171.157.209
60.172.64.229
60.172.69.66
60.172.230.184
60.173.79.120
60.174.37.226
60.174.117.67
60.174.118.80
60.174.130.19
60.174.164.45
60.174.192.240
60.175.71.194
60.194.6.9
60.212.42.56
60.216.106.162
60.216.116.178
60.247.93.238
61.28.113.58
61.37.150.6
61.53.66.4
61.132.87.136
61.132.233.195
61.133.218.19
61.134.36.100
61.134.44.28
61.134.52.164
61.136.81.154
61.136.94.166
61.143.130.162
61.145.228.110
61.148.196.114
61.150.76.90
61.150.76.201
61.153.54.38
61.158.140.152
61.158.186.84
61.158.188.21
61.160.25.118
61.160.95.126
61.161.209.134
61.177.60.140
61.178.160.83
61.182.82.34
61.184.35.3
61.184.176.231
61.185.137.161
61.185.139.72
61.185.242.195
61.186.219.33
61.232.0.130
62.99.80.128
66.85.178.210
66.109.30.139
66.240.236.119
71.6.146.186
71.6.158.166
71.6.165.200
82.114.82.90
82.208.65.46
88.150.189.102
89.248.172.140
91.143.38.162
101.231.140.218
109.81.181.238
109.170.160.109
110.17.188.30
111.8.150.31
111.26.198.30
111.38.140.12
111.40.73.83
111.75.162.114
111.85.215.66
111.206.163.56
112.23.7.76
112.23.7.88
112.24.103.242
112.25.220.99
112.26.80.46
112.26.122.164
112.26.146.13
112.27.129.154
112.27.130.127
112.91.59.106
112.101.220.75
112.113.241.17
112.113.241.207
113.140.48.156
113.204.147.26
113.240.237.10
114.104.158.172
115.1.56.141
115.84.112.138
115.238.247.228
116.1.1.165
116.1.179.95
116.9.204.16
116.112.207.235
116.113.96.22
116.228.90.9
116.249.127.11
117.21.221.58
117.159.84.142
118.112.183.204
118.121.233.54
118.144.83.130
118.163.58.117
118.163.135.17
118.163.135.18
119.1.98.121
119.6.89.127
119.48.16.182
119.53.91.170
119.53.149.66
120.42.52.82
120.192.201.22
120.194.212.234
120.202.36.46
120.203.25.58
120.209.31.231
120.209.71.73
120.209.164.118
120.236.73.231
120.236.135.204
121.199.58.190
122.139.5.237
122.195.155.194
122.224.36.28
122.227.20.90
122.228.165.38
123.7.54.235
123.138.78.210
123.160.236.125
123.234.215.242
124.65.64.174
124.66.133.106
124.112.45.222
124.128.73.58
124.164.235.209
124.165.232.138
124.193.199.202
125.65.244.38
125.70.227.38
125.75.206.244
125.77.127.97
125.212.217.214
125.212.217.215
125.227.146.182
125.227.179.59
140.206.65.34
155.12.54.14
157.122.183.218
168.103.20.54
171.221.255.5
177.19.163.109
177.19.165.26
177.19.181.169
177.19.185.235
177.19.187.79
177.43.247.139
177.43.247.237
177.99.211.149
177.99.217.233
177.135.101.5
177.135.101.101
177.135.103.25
177.135.103.107
177.159.99.31
177.159.103.9
178.116.142.91
178.234.35.42
179.184.23.195
179.184.115.3
180.250.39.2
182.71.16.42
182.71.239.18
182.74.119.86
182.137.14.72
182.190.3.182
183.64.166.163
183.65.17.118
183.134.3.83
183.167.225.165
183.167.238.124
183.220.53.39
183.224.81.214
183.233.169.211
185.59.75.47
186.215.130.242
186.215.143.149
186.215.195.249
186.215.197.15
186.215.197.183
186.215.199.65
186.215.199.69
186.229.28.106
186.232.136.240
187.58.151.15
187.115.123.74
189.59.5.91
189.59.69.3
189.114.67.141
189.114.67.195
189.114.67.213
189.204.6.157
189.204.52.237
190.13.106.108
190.202.44.194
190.210.182.93
195.5.145.142
198.1.105.131
198.20.70.114
198.20.99.130
200.175.104.101
201.47.245.162
201.140.110.78
201.163.36.134
201.184.241.243
202.93.35.19
202.103.61.102
202.109.164.31
202.110.187.146
202.137.141.81
202.198.69.108
203.125.152.9
203.242.126.4
206.219.17.55
208.100.26.235
208.100.26.237
211.20.181.113
211.91.180.242
211.141.209.131
211.147.65.218
211.161.90.99
212.142.159.192
216.145.154.243
217.26.1.82
218.3.64.241
218.4.177.21
218.4.214.115
218.13.56.222
218.22.100.42
218.22.129.38
218.22.148.105
218.22.180.146
218.22.186.115
218.22.187.66
218.22.198.212
218.22.206.178
218.22.235.138
218.22.253.37
218.23.26.50
218.24.236.4
218.25.31.150
218.26.163.125
218.26.178.146
218.28.58.186
218.28.171.213
218.28.234.53
218.29.52.2
218.29.234.18
218.56.102.14
218.57.142.194
218.57.237.243
218.58.227.67
218.64.57.12
218.64.165.194
218.65.220.48
218.75.148.181
218.76.140.155
218.76.252.245
218.87.254.235
218.90.162.234
218.92.14.18
218.93.232.166
218.94.144.101
218.107.46.228
218.200.61.170
218.201.14.134
218.201.83.148
218.206.210.194
218.241.156.10
219.138.243.196
219.138.244.91
219.142.25.106
219.143.72.21
219.148.39.134
219.154.133.161
219.232.115.95
219.237.78.2
220.164.2.76
220.164.2.77
220.164.2.87
220.164.2.88
220.164.2.91
220.164.2.100
220.164.2.111
220.164.2.114
220.164.2.119
220.164.2.121
220.164.2.131
220.164.162.146
220.164.193.238
220.169.102.6
220.173.107.124
220.174.209.154
220.177.50.195
220.178.2.114
220.178.18.42
220.178.177.15
220.179.87.232
220.179.250.175
220.180.104.130
220.180.110.144
220.180.172.195
220.189.205.2
220.225.7.90
221.3.236.94
221.4.197.154
221.4.205.30
221.7.133.28
221.10.230.228
221.12.137.6
221.130.130.238
221.176.112.45
221.176.134.36
221.176.176.126
221.178.192.194
221.199.43.146
221.212.18.146
221.224.2.202
221.224.114.229
221.226.50.162
221.226.65.10
221.226.176.254
221.228.242.13
221.237.208.10
222.42.148.60
222.76.48.121
222.82.225.186
222.84.60.22
222.91.248.106
222.92.204.50
222.101.93.2
222.120.247.207
222.137.252.18
222.161.47.82
222.161.229.55
222.169.186.242
222.170.131.114
222.171.61.97
222.173.242.10
222.185.255.227
222.188.97.62
222.189.186.67
222.191.233.238
222.214.238.73
222.218.17.20
222.218.17.94
222.218.17.187
222.218.248.42
222.222.71.101
222.222.219.154
222.223.56.116
222.223.217.34
222.229.112.168
222.240.159.130
222.242.230.123
222.247.40.242
223.100.152.42
223.241.100.16

33
bi_drupal_0_1d.ipset Normal file
View File

@ -0,0 +1,33 @@
#
# bi_drupal_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# drupal with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/drupal/0?age=1d
# Source File Date: Wed Jan 23 06:32:35 UTC 2019
#
# Category : attacks
# Version : 1898
#
# This File Date : Wed Jan 23 06:32:35 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 3 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_drupal_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
13.73.178.106
185.159.157.19
206.78.76.50

37
bi_exim_0_1d.ipset Normal file
View File

@ -0,0 +1,37 @@
#
# bi_exim_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# exim with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/exim/0?age=1d
# Source File Date: Wed Jan 23 10:34:33 UTC 2019
#
# Category : attacks
# Version : 4175
#
# This File Date : Wed Jan 23 10:34:34 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 7 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_exim_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
60.250.71.25
185.211.245.197
185.211.245.198
185.218.234.44
188.78.101.111
190.60.219.72
197.248.153.162

30
bi_exim_1_7d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_exim_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# exim with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/exim/1?age=7d
# Source File Date: Thu Dec 6 19:24:47 UTC 2018
#
# Category : attacks
# Version : 130
#
# This File Date : Fri Dec 7 01:36:50 UTC 2018
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_exim_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

237
bi_ftp_0_1d.ipset Normal file
View File

@ -0,0 +1,237 @@
#
# bi_ftp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/0?age=1d
# Source File Date: Wed Jan 23 11:04:58 UTC 2019
#
# Category : attacks
# Version : 9831
#
# This File Date : Wed Jan 23 11:04:59 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 207 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.189.252.95
13.209.181.207
14.192.17.97
23.101.169.29
23.102.162.48
23.228.86.250
23.254.244.251
27.254.81.50
35.229.252.50
35.238.246.25
37.61.238.8
37.157.253.3
37.187.244.138
40.76.32.139
41.185.8.118
42.48.78.234
42.88.117.95
42.91.177.98
42.249.164.14
45.32.15.204
46.101.30.200
46.105.243.49
46.172.4.66
49.70.12.81
49.70.53.79
49.70.62.131
49.89.204.74
49.89.248.15
49.89.252.67
49.89.253.132
49.89.254.173
49.89.254.193
51.254.47.48
54.36.165.4
58.219.170.91
59.175.239.178
60.13.219.254
61.142.21.39
61.150.60.50
61.166.200.106
62.138.24.15
62.219.78.154
64.150.163.165
66.147.238.208
67.222.135.239
68.66.216.13
68.66.216.39
69.10.169.135
69.162.107.34
70.35.196.25
78.194.159.82
81.177.165.80
82.117.240.50
82.150.140.130
85.128.142.19
85.128.142.24
87.27.31.41
87.224.230.16
88.99.102.116
89.163.146.184
89.225.192.86
91.49.165.51
91.134.248.211
94.130.54.135
94.138.221.106
95.216.33.53
98.143.145.144
101.0.105.50
103.43.45.117
103.74.123.51
103.112.244.112
103.208.220.136
103.229.72.55
103.241.6.201
103.252.220.27
104.250.105.59
106.8.200.17
106.37.231.254
106.110.4.101
106.111.32.199
107.161.177.42
107.190.132.210
109.73.175.2
109.86.161.222
109.234.160.49
109.234.164.44
111.27.12.130
111.61.66.53
111.121.78.238
111.166.183.103
111.176.247.125
113.108.127.12
113.221.24.162
113.221.27.43
113.234.159.10
114.46.219.161
114.239.53.128
114.239.53.234
114.239.105.4
114.239.107.149
114.239.107.167
114.239.109.64
114.239.197.72
114.239.197.225
115.197.72.226
115.239.162.14
116.52.22.62
117.95.229.120
117.95.231.56
117.188.12.106
118.250.112.50
119.108.133.178
119.112.92.62
119.112.132.115
119.131.143.144
119.131.153.153
119.165.12.243
120.50.9.42
121.224.94.32
121.226.183.112
123.30.191.186
123.112.125.237
123.126.115.149
124.202.219.98
125.40.115.10
128.199.69.213
130.185.84.150
137.117.180.203
138.68.46.71
138.128.164.130
139.59.22.255
139.99.8.7
142.4.9.112
142.4.11.105
145.239.103.219
150.95.109.139
150.109.57.51
153.120.69.170
154.16.114.127
159.203.129.52
162.144.76.207
162.214.10.25
162.241.153.184
162.241.157.186
163.182.174.197
167.114.100.72
167.114.117.14
168.235.80.127
169.50.40.211
173.212.235.113
173.212.253.125
173.247.255.13
175.11.208.226
175.11.211.170
175.13.247.150
175.162.64.26
176.28.102.104
176.31.105.192
176.53.65.145
178.33.193.50
178.255.152.226
182.93.85.123
183.187.72.195
183.214.162.241
185.2.4.144
185.13.5.48
185.93.69.146
185.173.21.69
185.207.39.66
188.165.242.96
188.166.1.143
192.99.20.181
192.145.239.207
192.163.208.70
193.189.74.77
193.189.75.101
198.8.90.120
198.23.207.89
198.38.90.137
198.46.81.4
198.54.125.27
199.188.200.139
202.155.223.21
204.15.248.77
207.45.177.234
207.180.212.241
209.124.66.26
209.124.69.186
210.35.128.228
212.48.85.60
212.179.8.194
213.163.77.211
213.184.122.19
213.251.182.115
216.10.243.224
216.10.250.216
217.182.196.7
218.64.54.43
218.93.154.105
220.165.106.178
221.3.189.18
221.202.168.254
221.235.91.203
222.86.165.248
222.131.234.156
222.174.9.21
223.199.157.201

564
bi_ftp_1_7d.ipset Normal file
View File

@ -0,0 +1,564 @@
#
# bi_ftp_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/1?age=7d
# Source File Date: Wed Jan 23 10:52:37 UTC 2019
#
# Category : attacks
# Version : 712
#
# This File Date : Wed Jan 23 10:52:37 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 534 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.164.53.189
1.171.55.235
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.94.38
31.18.168.112
31.163.118.157
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
47.96.159.166
49.206.242.22
50.63.67.12
50.63.189.186
50.66.34.226
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.213.44.170
58.218.56.82
59.7.96.57
59.63.206.200
59.147.36.54
60.13.219.254
60.54.255.13
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
61.6.83.153
61.33.152.215
61.142.21.39
61.153.56.30
61.158.163.140
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
69.64.33.138
69.175.76.44
70.91.203.141
72.191.112.118
74.208.164.103
74.208.229.7
77.28.222.163
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.48.239.173
79.120.86.30
80.14.15.77
80.16.23.37
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.133.222.214
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.114.147.92
89.121.218.230
90.50.217.121
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.158.108.47
94.182.227.36
95.0.1.68
95.130.9.44
95.220.32.63
98.125.111.5
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.15.140.149
103.29.16.18
103.48.116.47
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.52.151.59
110.169.96.118
110.170.194.66
111.11.181.53
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.108.127.12
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.231.101.60
115.239.162.14
115.248.207.78
116.36.37.203
116.125.224.129
116.247.107.90
117.103.204.41
117.156.126.3
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.163.131.42
118.169.12.68
118.193.178.185
118.250.114.123
119.23.110.173
119.29.252.149
119.46.166.132
119.90.52.36
119.100.8.171
119.131.152.24
119.192.13.115
119.193.140.193
120.24.183.44
120.55.186.125
120.72.89.162
120.204.67.101
121.8.153.122
121.9.9.50
121.14.7.244
121.18.68.94
121.26.194.238
121.26.215.250
121.28.255.249
121.29.112.99
121.40.68.92
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.53.98.227
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.202.219.98
125.75.207.25
125.180.217.196
125.208.9.204
125.215.181.117
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.248.210.174
158.255.238.220
159.65.205.28
159.226.43.36
160.16.240.108
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
169.0.235.228
171.107.111.97
171.107.206.178
171.244.27.184
172.114.92.219
173.248.194.22
175.11.209.68
175.11.211.170
175.114.192.117
176.9.83.200
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.67.204.250
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.230.146.26
184.106.153.92
185.10.99.4
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.234.217.55
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.107.28.67
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.145.239.207
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.231.179
195.211.176.181
196.50.231.70
197.155.191.188
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.50.127.5
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.103
213.251.182.105
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
218.0.166.74
218.39.174.83
218.60.67.67
218.60.67.70
218.64.54.43
218.94.15.86
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
218.241.251.150
219.147.95.246
219.246.33.161
220.122.88.137
220.133.7.28
220.172.197.245
220.178.25.66
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.203.81.181
221.208.242.242
221.209.235.2
221.212.74.130
221.216.95.25
221.229.166.77
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.237.78.73
222.237.250.158
223.68.134.29
223.111.180.80
223.245.215.115

643
bi_ftp_2_30d.ipset Normal file
View File

@ -0,0 +1,643 @@
#
# bi_ftp_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/2?age=30d
# Source File Date: Mon Jan 21 21:29:28 UTC 2019
#
# Category : attacks
# Version : 187
#
# This File Date : Mon Jan 21 21:29:28 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 613 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.28.124.58
1.171.55.235
1.180.70.178
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
13.250.9.115
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.81.177
27.254.94.38
31.18.168.112
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
37.1.203.124
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
47.89.27.62
47.90.48.48
47.91.145.254
49.206.242.22
50.62.160.157
50.62.161.20
50.62.177.147
50.63.67.12
50.63.189.186
50.63.194.47
50.66.34.226
50.116.109.149
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.66.63.16
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.213.44.170
58.218.56.82
58.221.121.90
58.247.249.189
59.7.96.57
59.147.36.54
60.13.219.254
60.13.249.204
60.31.177.194
60.54.255.13
60.161.128.173
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
61.6.83.153
61.33.152.215
61.142.21.39
61.153.56.30
61.158.163.140
61.160.193.85
61.172.115.195
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
67.205.18.89
69.64.33.138
69.89.31.107
69.175.76.44
70.91.203.141
71.6.167.142
72.167.190.6
72.191.112.118
74.208.164.103
74.208.229.7
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.9.31.148
79.48.239.173
79.120.86.30
79.137.65.236
80.14.15.77
80.16.23.37
80.82.77.139
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.93.240.60
81.133.222.214
81.177.135.131
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.111.176.222
89.114.147.92
89.121.218.230
90.50.217.121
91.121.76.70
91.121.106.53
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.51.148.141
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.158.114.68
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.158.108.47
94.182.227.36
95.0.1.68
95.128.45.185
95.130.9.44
95.220.32.63
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.7.1.11
103.15.140.149
103.28.118.18
103.29.16.18
103.48.116.47
103.60.14.249
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.240.126.23
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.52.151.59
110.169.96.118
110.170.194.66
111.11.181.53
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.108.127.12
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.159.151.24
115.231.101.60
115.248.207.78
116.36.37.203
116.116.109.213
116.125.224.129
116.247.107.90
117.103.204.41
117.139.208.10
117.146.43.210
117.156.126.3
117.158.179.177
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.144.139.217
118.163.131.42
118.169.12.68
118.193.178.185
118.250.114.123
118.250.115.0
119.23.110.173
119.29.252.149
119.44.217.242
119.46.166.132
119.90.52.36
119.131.152.24
119.192.13.115
119.193.140.193
120.24.183.44
120.72.89.162
120.204.67.101
120.204.224.238
121.8.153.122
121.9.9.50
121.12.172.184
121.14.7.244
121.18.68.94
121.26.194.238
121.26.215.250
121.28.255.249
121.29.112.99
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.202.219.98
124.207.216.2
125.75.207.25
125.93.83.115
125.180.217.196
125.208.9.204
125.215.181.117
125.227.14.43
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
136.243.24.136
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
141.105.64.239
142.4.210.41
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
149.56.170.34
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.69.184.49
158.248.210.174
159.65.205.28
159.203.181.178
159.226.43.36
162.144.38.233
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
171.107.111.97
171.107.206.178
171.244.27.184
172.96.160.154
172.114.92.219
173.201.196.202
173.248.194.22
175.11.209.68
175.11.211.170
175.114.192.117
176.9.83.200
176.31.191.186
176.56.62.178
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.50.151.58
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.215.74.190
183.230.146.26
184.106.153.92
184.168.27.101
184.168.200.203
185.10.99.4
185.77.248.3
185.136.112.11
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.195.76.50
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.234.217.55
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.17.106.183
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.145.239.207
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.168.191
195.154.182.63
195.154.231.179
195.211.176.181
195.242.98.193
196.50.231.70
197.155.191.188
197.231.221.211
198.154.246.201
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.150.151.112
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
207.210.192.80
207.226.141.36
208.86.153.196
208.100.26.231
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.100.56.230
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.34.136.19
212.50.127.5
212.98.171.75
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.102
213.251.182.103
213.251.182.105
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
217.182.192.29
218.0.166.74
218.7.71.210
218.39.174.83
218.60.67.67
218.60.67.70
218.64.54.43
218.90.143.254
218.94.15.86
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
218.241.251.150
219.139.72.81
219.147.95.246
219.246.33.161
220.122.88.137
220.132.35.162
220.133.7.28
220.178.25.66
220.216.111.35
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.203.81.181
221.208.242.242
221.209.235.2
221.212.74.130
221.229.166.77
222.32.87.89
222.35.27.30
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.223.130.89
222.237.78.73
222.237.250.158
222.241.167.238
223.68.134.29
223.111.180.80
223.167.85.18
223.245.215.115

478
bi_http_0_1d.ipset Normal file
View File

@ -0,0 +1,478 @@
#
# bi_http_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# http with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/http/0?age=1d
# Source File Date: Wed Jan 23 11:04:59 UTC 2019
#
# Category : attacks
# Version : 10318
#
# This File Date : Wed Jan 23 11:04:59 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 448 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_http_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.179.199.146
1.202.66.214
2.229.86.33
3.88.15.97
5.101.142.70
5.170.0.42
5.188.62.5
5.188.210.12
5.202.101.208
13.73.178.106
13.94.32.219
14.63.171.75
14.161.43.54
14.161.48.38
14.162.63.146
14.162.86.89
14.169.248.187
14.177.154.15
14.184.36.255
14.186.28.255
14.186.32.93
14.186.188.38
14.186.240.207
14.187.9.93
14.187.46.145
14.187.154.99
14.190.120.4
14.231.218.243
14.232.2.124
23.94.156.162
23.228.96.82
23.238.16.4
27.17.244.244
27.72.131.168
27.115.124.5
27.147.216.140
31.28.163.44
31.184.238.190
34.207.98.73
35.196.120.13
35.196.195.73
35.196.212.41
36.90.150.214
37.57.34.135
37.182.206.22
37.187.133.37
37.215.89.140
39.106.146.60
40.77.167.191
42.7.26.95
43.252.231.204
43.255.152.4
45.64.113.206
45.116.76.177
45.116.78.193
45.119.82.132
46.8.209.97
46.8.209.98
46.118.155.222
46.119.121.84
46.119.126.222
46.201.245.220
46.235.158.196
47.52.89.40
47.93.35.42
47.95.194.133
47.98.175.190
47.98.176.76
47.104.104.123
47.190.19.75
50.62.176.10
50.62.176.37
50.62.177.139
51.38.69.87
51.68.115.5
51.75.247.213
52.169.15.184
52.206.196.64
54.37.77.145
54.39.188.215
54.39.190.102
58.59.203.242
58.87.110.52
60.12.18.6
62.165.50.254
62.173.148.11
62.212.82.105
64.32.122.20
66.63.178.186
66.240.236.119
66.249.66.194
66.249.66.197
66.249.69.175
67.222.135.191
67.227.236.114
68.183.77.86
70.42.131.170
71.6.135.131
71.6.146.186
71.204.87.52
72.199.15.211
73.160.179.251
77.81.165.49
78.46.128.204
78.63.60.171
79.36.55.88
80.82.77.139
80.211.144.106
81.88.49.16
81.146.20.11
81.169.158.6
82.127.188.193
82.224.224.13
83.9.156.92
83.128.192.110
85.106.31.91
85.193.229.6
86.45.47.106
87.102.64.73
87.236.20.141
88.15.144.66
88.74.136.34
89.248.172.90
91.121.12.106
91.212.25.71
91.221.109.101
91.225.109.78
93.72.84.153
94.102.49.125
94.102.49.193
94.103.95.181
94.191.8.36
94.191.19.41
94.191.90.133
94.242.59.245
95.52.6.243
95.213.177.123
95.213.177.125
95.213.177.126
96.35.101.63
98.21.247.174
98.192.43.134
103.21.142.12
103.27.239.3
103.56.112.223
103.80.28.7
103.96.75.160
103.215.81.107
103.224.250.73
103.229.124.89
103.229.125.168
103.243.25.104
103.255.47.204
104.131.145.217
104.238.93.163
104.248.119.185
105.73.80.162
106.12.89.252
106.13.53.58
106.114.71.226
107.77.249.5
107.178.194.218
107.179.96.11
108.174.147.136
108.178.16.154
109.248.9.47
110.54.247.107
111.230.48.142
111.230.197.230
112.187.151.245
113.66.35.129
113.111.81.197
113.111.82.194
113.161.56.31
113.162.91.71
113.162.182.100
113.162.189.125
113.162.191.118
113.172.27.3
113.172.196.159
113.172.208.85
113.172.219.252
113.172.235.188
113.173.97.229
113.173.105.249
113.173.118.116
113.173.183.192
113.173.250.69
113.186.142.119
113.190.234.150
114.116.151.137
114.118.85.110
114.215.99.132
114.217.151.48
115.28.43.234
115.28.154.44
115.28.229.143
115.29.76.145
115.84.92.148
115.84.92.198
115.84.99.63
116.104.120.10
116.104.193.72
116.111.51.25
116.255.214.25
117.0.53.180
117.34.105.202
117.50.50.55
118.24.58.16
118.24.63.246
118.24.122.13
119.27.186.31
119.28.13.105
119.29.4.85
119.29.5.68
119.29.82.97
119.145.148.219
119.158.48.130
120.27.31.148
120.27.37.74
120.27.100.100
120.27.114.224
120.76.121.20
120.76.126.197
120.77.171.168
121.42.50.93
121.42.52.27
121.42.54.54
121.42.143.123
121.42.205.30
122.10.118.173
122.112.225.142
122.114.70.240
123.20.5.190
123.20.8.32
123.20.26.56
123.20.32.200
123.20.113.33
123.20.126.24
123.20.133.31
123.20.164.116
123.20.243.86
123.21.83.191
123.21.106.10
123.21.115.209
123.21.196.56
123.21.212.143
123.24.98.72
123.31.30.209
123.207.5.43
123.207.45.15
123.207.94.126
123.207.236.127
123.249.50.75
124.81.123.71
124.156.176.170
125.64.94.206
125.254.65.94
129.204.32.247
129.204.77.253
132.232.32.150
132.232.131.248
132.232.144.15
132.232.170.181
132.232.187.21
132.232.224.155
134.175.5.227
134.175.40.34
134.175.137.22
134.249.141.24
139.99.40.106
139.99.99.124
139.129.40.112
139.199.227.86
140.227.200.215
141.8.142.15
141.101.96.117
141.101.96.193
142.11.219.92
143.255.154.77
143.255.155.89
143.255.155.168
143.255.155.169
144.48.242.231
144.217.162.14
147.135.79.124
148.70.29.88
148.70.56.36
148.70.77.54
148.72.232.39
148.72.232.109
148.72.232.129
149.202.59.252
150.109.66.75
152.254.222.142
157.55.39.15
157.230.49.175
158.69.19.38
159.226.20.83
162.213.253.61
163.44.194.54
163.172.107.29
166.62.120.154
169.0.163.197
171.67.70.43
171.67.70.48
171.67.70.61
171.224.241.117
171.245.124.238
172.68.238.48
172.68.238.60
172.68.238.144
172.68.239.25
172.68.239.115
172.223.76.61
173.208.149.154
176.28.118.42
177.75.143.211
177.249.188.203
178.32.120.230
178.36.100.87
178.128.163.25
178.132.220.241
179.111.33.249
180.153.236.181
180.180.243.223
181.57.36.136
181.67.41.24
181.126.84.96
182.50.132.82
182.50.135.57
183.82.118.147
185.29.160.110
185.67.45.160
185.86.12.178
185.86.93.3
185.86.93.5
185.86.93.6
185.86.93.13
185.86.93.16
185.86.93.22
185.86.93.30
185.86.93.32
185.86.93.35
185.86.93.36
185.86.93.45
185.86.93.57
185.86.93.60
185.86.93.64
185.86.164.99
185.86.164.106
185.86.164.107
185.86.164.109
185.86.167.4
185.149.69.105
185.153.198.217
185.156.177.164
185.159.157.19
185.176.42.72
185.209.0.8
185.211.245.158
185.234.217.119
185.234.217.123
185.234.217.127
185.234.217.128
185.234.217.130
185.234.217.132
185.234.217.135
185.234.217.137
185.234.217.150
185.234.217.151
185.234.217.152
185.234.217.153
185.234.217.203
185.234.217.204
185.234.217.205
185.234.217.206
185.234.217.207
185.234.217.208
185.234.217.209
185.234.217.210
185.244.43.60
185.244.43.64
185.244.43.69
185.244.43.175
185.244.43.176
185.244.43.178
185.244.43.179
185.244.43.180
185.244.43.181
185.244.43.182
185.244.214.117
186.182.233.113
189.129.168.228
189.177.244.161
189.206.78.44
190.130.26.48
192.154.224.61
192.169.189.50
193.106.30.98
193.164.131.223
193.201.224.211
193.201.224.225
193.201.224.246
194.110.171.200
194.113.106.11
194.113.106.124
194.113.106.125
194.113.106.126
194.186.247.226
195.206.105.217
196.52.43.51
197.45.161.241
197.50.72.191
197.99.121.54
197.156.72.155
198.27.69.191
198.54.114.55
198.71.226.54
198.71.230.20
198.108.66.176
198.108.66.240
202.29.30.204
202.137.141.46
202.137.155.137
206.78.76.50
209.17.97.18
210.14.113.247
210.16.189.4
210.213.192.118
211.162.74.217
212.81.36.58
212.81.36.232
212.81.37.152
212.81.37.188
212.92.107.85
212.233.39.17
212.237.0.113
213.59.146.28
213.181.192.10
216.244.66.247
217.69.143.67
218.93.13.188
219.83.160.137
220.85.181.120
220.128.237.100
221.148.183.133
222.252.6.216

375
bi_http_1_7d.ipset Normal file
View File

@ -0,0 +1,375 @@
#
# bi_http_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# http with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/http/1?age=7d
# Source File Date: Wed Jan 23 09:16:34 UTC 2019
#
# Category : attacks
# Version : 862
#
# This File Date : Wed Jan 23 09:16:34 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 345 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_http_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.9.155.37
5.135.138.188
5.188.62.117
5.188.211.26
5.188.211.35
23.237.4.26
34.207.98.73
39.108.187.244
40.77.167.30
40.77.167.32
40.77.167.104
40.77.167.115
46.4.116.197
46.119.121.84
46.148.17.90
47.93.35.42
47.98.175.190
47.98.176.76
47.106.103.192
51.255.65.46
54.36.148.70
54.36.148.85
54.36.148.91
54.36.148.113
54.36.148.127
54.36.148.139
54.36.148.167
54.36.148.168
54.36.148.172
54.36.148.178
54.36.148.197
54.36.148.198
54.36.148.206
54.36.148.232
54.36.148.235
54.36.148.237
54.36.148.243
54.36.148.244
54.36.148.249
54.36.148.253
54.36.149.3
54.36.149.6
54.36.149.7
54.36.149.8
54.36.149.12
54.36.149.13
54.36.149.18
54.36.149.21
54.36.149.26
54.36.149.28
54.36.149.35
54.36.149.39
54.36.149.43
54.36.149.44
54.36.149.46
54.36.149.51
54.36.149.56
54.36.149.61
54.36.149.64
54.36.149.70
54.36.149.78
54.36.149.80
54.36.149.81
54.36.149.85
54.36.149.87
54.36.149.90
54.36.149.91
54.36.149.93
54.36.149.104
58.62.55.130
58.214.25.190
60.172.64.229
60.172.69.66
60.191.20.210
61.163.229.226
64.246.161.30
64.246.161.42
64.246.165.10
64.246.165.180
64.246.165.190
64.246.165.210
64.246.187.42
66.240.192.138
66.240.219.146
66.240.236.119
66.249.69.11
66.249.69.131
66.249.69.135
66.249.69.139
66.249.69.150
66.249.69.155
66.249.69.158
66.249.75.23
66.249.75.24
66.249.75.130
66.249.75.132
66.249.75.195
66.249.76.67
66.249.79.22
66.249.79.70
66.249.79.83
66.249.79.104
66.249.79.246
68.171.211.178
71.6.135.131
71.6.146.185
71.6.167.142
71.6.202.198
77.75.78.168
80.82.77.139
80.127.116.96
86.109.170.96
89.42.217.11
89.108.105.13
89.234.157.254
89.248.172.16
89.248.172.90
91.121.12.106
91.209.51.22
91.221.109.101
94.102.49.125
94.102.49.190
94.102.49.193
94.190.53.209
97.74.228.245
103.21.142.12
104.128.144.131
109.226.23.26
111.230.48.64
111.230.51.65
111.230.52.42
111.231.236.170
114.104.158.172
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.28.62
115.28.43.234
115.28.71.161
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.159.99.54
118.24.63.246
118.89.17.89
118.89.31.212
118.89.139.150
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.76.121.20
120.76.126.197
120.76.132.64
120.76.146.29
120.79.46.121
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
123.207.5.43
123.207.29.152
123.207.45.15
123.207.94.126
123.207.236.127
123.249.50.75
125.64.94.206
125.212.217.214
134.249.141.24
139.129.14.230
139.129.40.112
139.129.60.64
139.129.130.253
144.76.6.230
157.55.39.5
157.55.39.9
157.55.39.23
157.55.39.24
157.55.39.32
157.55.39.34
157.55.39.35
157.55.39.43
157.55.39.48
157.55.39.68
157.55.39.80
157.55.39.112
157.55.39.130
157.55.39.131
157.55.39.133
157.55.39.137
157.55.39.149
157.55.39.150
157.55.39.151
157.55.39.156
157.55.39.194
157.55.39.223
157.55.39.224
157.55.39.225
157.55.39.227
157.55.39.237
164.132.51.91
173.234.153.122
177.135.101.5
178.73.215.171
180.76.15.7
180.76.15.9
180.76.15.137
180.76.15.154
180.153.236.181
182.50.132.82
182.254.129.82
185.81.157.113
185.81.157.172
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.85.239.195
185.86.13.213
185.86.93.2
185.86.93.3
185.86.93.5
185.86.93.6
185.86.93.11
185.86.93.12
185.86.93.13
185.86.93.15
185.86.93.16
185.86.93.20
185.86.93.22
185.86.93.23
185.86.93.24
185.86.93.30
185.86.93.35
185.86.93.36
185.86.93.45
185.86.93.50
185.86.93.54
185.86.93.56
185.86.93.58
185.86.93.60
185.86.93.64
185.86.93.65
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.104
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.100.87.245
185.100.87.246
185.100.87.249
185.119.81.11
185.119.81.50
185.220.101.44
185.234.217.130
185.234.217.132
185.234.217.135
185.234.217.201
185.234.217.203
185.234.217.204
185.234.217.207
185.234.217.210
186.215.198.137
186.215.199.65
190.210.183.93
192.151.152.98
193.112.48.249
193.201.224.17
193.201.224.210
193.201.224.211
193.201.224.225
196.52.43.51
196.52.43.96
198.20.99.130
198.204.243.138
207.46.13.2
207.46.13.3
207.46.13.10
207.46.13.12
207.46.13.66
207.46.13.71
207.46.13.82
207.46.13.98
207.46.13.113
207.46.13.114
207.46.13.117
207.46.13.120
207.46.13.121
207.46.13.123
207.46.13.155
207.46.13.161
208.100.26.231
208.100.26.232
210.12.219.1
210.16.189.4
210.209.87.134
213.23.12.149
216.145.11.94
216.145.14.142
216.244.66.202
216.244.66.203
216.244.66.232
216.244.66.239
216.244.66.249
216.244.66.250
219.138.66.104
220.162.158.2
222.73.129.15
223.105.4.248
223.105.4.249
223.105.4.250
223.112.190.70

1080
bi_http_2_30d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

31
bi_imap_0_1d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_imap_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# imap with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/imap/0?age=1d
# Source File Date: Wed Jan 23 10:34:35 UTC 2019
#
# Category : attacks
# Version : 2942
#
# This File Date : Wed Jan 23 10:34:35 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_imap_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
185.135.109.250

1989
bi_mail_0_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

1751
bi_mail_1_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

3141
bi_mail_2_30d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

32
bi_named_0_1d.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bi_named_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# named with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/named/0?age=1d
# Source File Date: Wed Jan 23 06:32:38 UTC 2019
#
# Category : attacks
# Version : 2778
#
# This File Date : Wed Jan 23 06:32:38 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 2 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_named_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.192.90.183
129.204.58.88

30
bi_owncloud_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_owncloud_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# owncloud with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/owncloud/0?age=1d
# Source File Date: Mon Nov 5 08:01:27 UTC 2018
#
# Category : attacks
# Version : 30
#
# This File Date : Mon Nov 5 08:32:46 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_owncloud_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

44
bi_plesk-postfix_0_1d.ipset Normal file
View File

@ -0,0 +1,44 @@
#
# bi_plesk-postfix_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# plesk-postfix with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/plesk-postfix/0?age=1d
# Source File Date: Wed Jan 23 10:34:37 UTC 2019
#
# Category : attacks
# Version : 3670
#
# This File Date : Wed Jan 23 10:34:37 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 14 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_plesk-postfix_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
37.49.225.186
60.250.71.25
79.58.56.130
81.93.86.149
85.48.229.2
185.211.245.198
185.218.234.44
185.234.217.188
185.234.217.222
185.234.218.239
185.234.219.53
185.234.219.69
203.245.9.191
212.225.226.49

185
bi_postfix-sasl_0_1d.ipset Normal file
View File

@ -0,0 +1,185 @@
#
# bi_postfix-sasl_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix-sasl with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix-sasl/0?age=1d
# Source File Date: Wed Jan 23 11:05:03 UTC 2019
#
# Category : attacks
# Version : 10204
#
# This File Date : Wed Jan 23 11:05:03 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 155 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix-sasl_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.59.137.90
14.187.59.246
27.255.79.224
35.235.88.47
37.49.224.158
37.49.225.23
37.49.225.68
37.49.227.11
41.160.119.66
41.180.4.198
45.125.66.73
45.125.66.80
45.125.66.83
45.125.66.84
45.125.66.85
45.125.66.106
45.125.66.126
45.125.66.143
45.125.66.157
45.125.66.190
45.125.66.193
45.125.66.251
45.125.66.252
49.67.53.249
49.84.223.31
49.84.223.252
51.254.58.226
52.144.67.210
58.137.91.217
58.209.63.14
60.250.71.25
61.228.150.18
66.70.141.144
72.18.200.11
74.208.217.149
76.224.88.197
78.18.65.185
78.250.115.89
80.82.70.189
80.252.241.107
81.133.240.126
81.137.254.87
82.127.128.117
85.48.229.2
87.140.101.121
89.96.151.178
103.114.104.175
103.114.105.47
103.114.106.21
103.194.169.4
103.207.38.152
103.207.38.156
103.207.39.104
103.253.42.43
104.200.144.191
104.248.169.94
109.169.5.197
113.173.44.35
114.218.138.116
114.218.138.206
114.230.90.224
115.230.60.14
115.235.141.169
118.200.151.91
121.224.40.16
125.123.26.21
133.208.151.107
144.64.87.175
145.253.245.130
151.80.162.216
154.73.182.16
154.73.182.24
161.132.201.90
162.247.99.113
177.37.166.119
177.103.201.177
180.117.225.24
180.117.225.116
180.150.253.38
180.250.115.238
181.210.130.82
183.3.176.6
185.35.64.63
185.36.81.20
185.36.81.21
185.36.81.87
185.36.81.143
185.36.81.154
185.184.24.118
185.211.245.170
185.211.245.197
185.211.245.198
185.216.140.23
185.218.234.44
185.228.80.60
185.234.216.213
185.234.216.235
185.234.217.185
185.234.217.186
185.234.217.187
185.234.217.188
185.234.217.221
185.234.217.222
185.234.217.223
185.234.218.35
185.234.218.36
185.234.218.37
185.234.219.68
186.0.90.52
186.67.78.38
186.201.186.107
187.44.106.11
187.94.100.150
188.166.38.216
189.50.15.58
189.84.211.117
189.112.185.186
189.126.22.62
189.208.163.224
190.3.210.73
190.4.45.78
190.60.219.72
190.64.146.226
190.102.153.206
190.109.222.50
190.128.186.98
190.145.52.118
190.213.10.158
190.247.33.105
191.96.249.182
191.96.249.188
191.255.248.223
192.3.138.59
192.163.226.125
194.53.142.55
194.53.142.88
194.53.142.89
198.251.72.199
200.29.108.214
200.57.73.170
200.60.62.82
200.69.243.121
200.122.128.218
200.196.251.102
201.20.96.82
201.236.155.139
202.22.144.210
203.196.142.226
211.72.92.231
213.154.29.27
221.227.106.44
222.93.241.81
222.112.134.151
222.241.64.173
223.255.139.18

1207
bi_postfix-sasl_1_7d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

958
bi_postfix-sasl_2_30d.ipset Normal file
View File

@ -0,0 +1,958 @@
#
# bi_postfix-sasl_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix-sasl with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix-sasl/2?age=30d
# Source File Date: Wed Jan 23 09:55:21 UTC 2019
#
# Category : attacks
# Version : 194
#
# This File Date : Wed Jan 23 09:55:21 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 928 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix-sasl_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.42.219.63
2.155.188.142
5.11.46.206
5.19.138.32
5.101.0.34
5.101.40.66
5.153.139.226
5.157.49.101
5.196.175.185
5.202.74.4
5.202.77.20
13.65.212.60
13.71.156.59
13.85.29.183
14.161.45.78
14.169.14.56
14.169.22.9
23.97.147.249
23.254.132.158
23.254.165.103
24.232.45.46
27.118.30.52
27.131.48.6
31.168.198.79
31.186.167.106
31.214.243.20
31.221.109.115
37.38.127.99
37.46.76.156
37.48.72.233
37.48.92.78
37.49.224.73
37.49.224.88
37.49.224.96
37.49.224.102
37.49.224.103
37.49.224.110
37.49.224.116
37.49.224.122
37.49.224.124
37.49.224.125
37.49.224.127
37.49.224.134
37.49.224.142
37.49.224.144
37.49.224.145
37.49.224.146
37.49.224.148
37.49.224.149
37.49.224.150
37.49.224.155
37.49.224.159
37.49.224.162
37.49.224.166
37.49.224.170
37.49.224.172
37.49.224.174
37.49.224.179
37.49.224.180
37.49.224.186
37.49.224.199
37.49.224.200
37.49.224.201
37.49.224.215
37.49.224.229
37.49.224.235
37.49.224.245
37.49.225.9
37.49.225.10
37.49.225.21
37.49.225.47
37.49.225.80
37.49.225.82
37.49.225.88
37.49.225.90
37.49.225.159
37.49.225.166
37.49.225.184
37.49.225.186
37.49.225.195
37.49.225.199
37.49.225.207
37.49.225.250
37.49.227.11
37.49.227.92
37.49.227.94
37.49.227.101
37.49.227.115
37.49.227.130
37.49.227.136
37.49.227.152
37.49.227.155
37.49.227.157
37.49.227.159
37.49.227.171
37.49.227.185
37.49.227.190
37.49.227.204
37.49.227.212
37.49.227.221
37.49.227.227
37.49.227.254
37.49.230.14
37.49.230.138
37.49.230.148
37.49.230.179
37.59.52.34
37.75.143.224
37.128.225.21
37.130.115.221
39.109.112.58
40.124.41.11
41.0.39.228
41.77.72.234
41.86.98.36
41.139.175.245
41.188.151.161
41.188.172.102
41.189.67.78
41.208.217.73
41.221.192.242
41.222.141.89
41.228.17.239
43.245.204.117
45.58.124.246
45.64.178.251
45.119.8.12
45.123.24.10
45.126.211.200
46.29.248.90
46.49.139.2
46.49.139.6
46.80.25.45
46.85.99.57
46.85.100.127
46.85.108.110
46.85.108.183
46.85.111.56
46.105.179.127
46.148.27.56
46.148.27.59
46.148.27.63
46.148.27.95
46.185.138.26
46.225.129.170
46.225.129.243
46.236.27.24
46.244.161.198
46.244.196.76
46.244.197.101
46.244.201.24
46.244.214.118
47.40.120.17
47.206.105.100
49.65.160.155
49.76.125.148
49.76.204.236
50.192.28.157
51.15.152.98
51.38.39.31
51.38.101.160
51.38.188.244
51.52.120.19
51.144.121.104
51.218.216.243
51.254.49.230
52.151.11.80
52.191.196.49
54.39.78.188
58.219.29.26
58.220.197.198
58.221.44.243
58.221.46.12
58.221.46.72
58.221.49.91
58.221.55.194
58.221.55.242
58.221.58.248
58.221.71.10
58.242.100.10
59.120.188.248
60.31.214.44
60.184.119.147
60.190.223.221
60.217.58.177
61.160.90.214
62.81.86.6
62.206.119.116
62.210.181.138
62.220.123.220
64.110.238.35
64.137.220.223
66.70.173.25
66.70.204.141
66.70.246.109
66.70.253.4
68.168.223.247
70.90.59.237
70.150.124.66
71.10.113.13
71.43.192.210
71.46.241.18
72.68.69.32
74.122.192.115
74.143.230.206
74.208.128.234
74.208.175.154
74.208.214.48
74.218.246.226
75.144.252.251
75.145.110.227
77.81.165.144
77.240.90.238
78.25.64.170
78.89.186.118
78.107.85.148
78.129.252.20
78.131.87.207
79.61.85.97
79.62.230.220
79.77.43.225
79.135.164.130
79.147.41.31
79.156.33.46
79.159.135.107
79.173.83.7
80.11.144.53
80.13.191.206
80.34.97.56
80.82.67.118
80.82.68.13
80.82.70.239
80.82.77.13
80.82.77.17
80.82.77.40
80.89.128.150
80.139.226.168
80.139.229.116
80.139.238.34
80.139.239.150
80.147.168.27
80.211.144.224
80.211.178.40
80.252.65.176
81.2.252.215
81.23.6.101
81.67.110.95
81.133.172.203
81.174.163.117
82.33.127.202
82.48.165.17
82.78.94.132
82.202.163.206
82.202.163.221
82.202.163.223
82.202.167.197
82.202.167.213
82.209.231.170
82.223.53.162
83.32.143.170
83.43.39.110
83.171.146.151
83.215.177.188
84.15.191.252
84.15.191.253
84.45.18.215
84.95.237.68
84.241.54.127
84.241.56.109
85.57.208.58
85.88.19.159
85.187.183.180
86.43.89.238
87.26.121.231
87.109.202.4
87.138.192.79
87.139.213.6
87.169.112.72
87.169.115.171
87.169.124.233
87.169.125.240
87.226.179.121
87.243.7.183
87.252.224.6
88.26.202.21
88.99.145.142
88.99.228.173
88.99.253.197
88.255.117.2
89.34.97.115
89.40.123.60
89.40.123.62
89.40.123.74
89.40.123.83
89.43.194.86
89.248.160.156
89.248.167.159
89.248.168.55
89.248.169.103
89.248.171.89
89.248.171.134
89.248.174.3
89.249.67.37
89.252.188.82
89.253.223.49
90.63.242.90
90.84.44.220
90.84.243.216
91.18.19.92
91.18.24.73
91.18.25.105
91.18.28.94
91.121.0.5
91.121.2.18
91.121.65.163
91.121.72.26
91.121.85.131
91.121.88.223
91.121.109.83
91.121.109.211
91.121.210.37
91.121.210.82
91.121.220.125
91.138.206.3
91.142.222.23
91.200.12.195
91.200.14.75
91.209.70.221
91.212.89.226
91.234.99.210
91.234.99.215
91.234.99.217
92.63.110.164
92.63.193.124
93.88.76.73
93.107.249.182
93.115.156.16
93.174.93.46
93.174.93.251
93.175.29.178
94.23.77.107
94.23.196.177
94.23.252.94
94.48.27.187
94.97.124.211
94.102.51.67
94.102.55.26
94.102.56.235
94.177.230.169
94.177.241.124
94.177.244.201
95.60.155.188
95.86.27.235
95.110.227.5
95.110.229.22
95.111.109.119
95.168.96.77
95.188.85.32
95.211.209.158
95.211.211.232
95.216.23.126
95.218.155.2
95.240.187.138
97.80.15.138
101.1.27.158
101.96.122.43
103.1.209.63
103.3.175.139
103.23.135.56
103.28.37.37
103.35.64.58
103.46.192.232
103.89.88.79
103.89.89.27
103.89.89.50
103.89.89.116
103.89.89.229
103.89.90.83
103.89.91.31
103.99.2.5
103.99.2.7
103.99.2.134
103.99.2.158
103.99.3.5
103.100.211.66
103.102.147.80
103.103.2.107
103.108.220.67
103.109.75.2
103.114.104.175
103.194.170.15
103.207.36.63
103.207.36.244
103.207.37.40
103.207.37.84
103.207.37.173
103.207.38.151
103.207.38.152
103.207.38.153
103.207.38.154
103.207.38.155
103.207.38.156
103.207.38.157
103.207.38.163
103.207.39.104
103.207.39.140
103.215.211.106
103.230.85.157
103.255.6.117
104.168.132.140
104.168.138.82
104.168.140.152
104.168.140.209
104.168.152.83
104.193.9.10
104.245.97.53
104.245.103.169
107.144.93.226
109.224.212.230
110.143.75.7
111.30.31.176
111.93.56.215
112.169.85.202
113.117.104.84
113.121.242.242
113.161.37.238
113.161.81.31
113.161.81.98
113.161.227.134
113.171.23.47
113.172.158.213
113.176.64.112
113.190.129.123
113.196.105.155
113.200.102.90
113.240.223.157
114.92.86.206
114.103.65.97
114.223.134.221
115.84.91.141
115.84.99.80
115.144.72.8
115.144.72.17
115.159.198.130
115.231.212.82
117.4.181.129
117.68.195.181
117.102.194.171
118.68.169.82
118.69.170.173
118.107.130.162
118.185.38.37
118.200.151.91
118.201.203.86
119.205.232.227
120.198.126.162
121.122.48.1
121.129.20.140
121.235.194.12
121.237.142.126
122.116.29.1
122.147.191.200
123.16.13.136
123.24.205.255
123.56.211.204
123.103.15.226
123.103.254.253
123.150.47.194
123.195.250.35
124.13.44.145
124.29.246.106
124.135.249.125
124.202.246.214
125.21.1.155
125.21.179.210
125.35.210.208
125.76.222.226
125.115.134.128
125.215.243.129
129.158.103.217
129.208.179.138
138.197.72.166
139.196.27.35
142.0.37.170
142.0.44.88
142.11.193.231
142.44.131.18
142.44.151.114
142.44.156.241
142.44.181.238
142.44.181.251
142.44.207.48
142.44.207.49
143.255.153.142
143.255.153.148
144.217.38.193
144.217.178.164
144.217.213.131
145.102.1.250
145.128.197.156
145.239.131.38
145.249.104.20
145.249.104.37
145.249.104.70
145.249.104.245
145.249.105.24
145.249.105.67
145.249.105.154
145.249.105.210
145.249.106.12
145.249.106.69
145.249.106.78
145.249.107.19
145.249.107.105
145.249.107.134
145.249.107.135
145.249.107.169
149.56.66.210
149.56.73.72
149.56.82.194
149.56.166.230
149.56.177.100
149.56.254.112
149.56.254.120
151.80.84.11
151.237.185.105
154.48.234.10
154.66.197.34
154.70.200.213
154.70.200.217
154.70.200.219
154.73.182.16
155.94.169.123
158.140.140.146
158.255.0.36
159.0.221.62
159.0.231.107
159.65.175.241
159.65.202.223
159.69.31.51
159.89.4.2
159.89.100.11
159.89.181.102
160.19.51.136
161.132.201.90
162.243.11.202
162.248.74.241
163.47.147.230
163.118.239.230
164.39.218.210
167.99.3.252
167.99.73.205
167.114.22.102
167.114.24.233
167.114.161.24
167.114.176.165
167.114.181.154
167.249.210.69
168.167.91.81
168.187.107.74
170.79.33.162
173.163.32.201
173.242.120.168
173.242.120.217
173.242.127.214
175.100.101.96
175.139.184.225
176.31.253.157
176.35.174.123
176.53.44.203
176.61.143.57
176.95.137.96
176.107.131.172
176.108.177.42
176.121.9.21
176.124.144.185
177.4.73.183
177.43.91.222
177.103.201.177
177.126.170.47
177.135.106.242
178.15.0.169
178.33.82.20
178.33.82.21
178.35.191.250
178.49.148.100
178.124.188.173
178.124.207.132
178.141.251.45
178.216.48.45
178.216.52.27
178.216.52.110
178.216.52.118
178.216.52.168
179.228.162.193
180.87.34.76
180.114.150.60
180.178.172.210
180.232.1.15
181.28.47.151
181.31.213.51
181.39.91.50
181.39.164.114
181.40.122.122
181.49.39.70
181.49.122.162
181.60.254.53
181.115.71.28
181.121.0.254
181.167.70.20
181.167.202.102
181.214.87.223
181.214.206.20
181.214.206.30
181.214.206.44
181.214.206.45
181.214.206.100
181.214.206.101
181.214.206.116
181.214.206.118
181.214.206.119
181.214.206.133
181.214.206.148
181.214.206.170
181.214.206.189
181.214.206.195
181.215.195.25
181.215.195.28
181.215.195.33
181.215.195.230
181.215.195.231
181.215.195.243
182.42.244.51
182.72.153.162
182.75.117.254
182.176.115.31
182.176.158.114
183.61.244.100
183.111.224.65
184.67.236.18
184.71.152.86
185.8.0.250
185.36.81.43
185.36.81.44
185.36.81.46
185.58.17.122
185.67.178.114
185.81.157.38
185.81.157.118
185.94.194.4
185.98.87.212
185.101.94.123
185.110.132.162
185.118.167.220
185.121.184.21
185.145.131.135
185.165.31.136
185.165.31.150
185.169.229.244
185.183.21.205
185.189.112.187
185.206.224.149
185.221.172.140
185.221.200.23
185.222.56.148
185.228.80.7
185.228.80.15
185.228.80.32
185.228.80.43
185.228.80.50
185.228.80.58
185.228.80.59
185.232.65.140
185.234.216.75
185.234.216.77
185.234.216.114
185.234.216.121
185.234.216.134
185.234.216.139
185.234.216.141
185.234.216.146
185.234.216.148
185.234.216.157
185.234.216.170
185.234.216.174
185.234.216.186
185.234.216.187
185.234.216.188
185.234.216.189
185.234.216.190
185.234.216.191
185.234.216.192
185.234.216.195
185.234.216.204
185.234.216.217
185.234.216.225
185.234.216.235
185.234.217.39
185.234.217.41
185.234.217.60
185.234.217.61
185.234.217.62
185.234.217.64
185.234.217.231
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
185.234.218.132
185.234.218.156
185.234.218.157
185.234.218.177
185.234.218.220
185.238.45.210
185.239.226.223
185.245.99.6
186.31.81.98
186.47.19.146
186.96.110.70
186.101.125.43
186.101.223.230
186.148.172.16
186.202.179.15
186.230.29.98
186.248.167.118
187.52.153.24
187.55.179.130
187.64.214.204
187.102.182.123
187.167.193.217
187.176.191.6
187.180.4.78
187.253.200.115
188.39.105.186
188.126.223.106
188.165.124.31
188.165.219.27
188.165.221.36
188.165.221.69
188.165.237.186
188.166.51.197
188.166.86.31
188.166.164.162
188.195.110.239
188.247.136.124
189.210.181.3
189.212.113.83
189.212.124.191
189.212.125.71
190.5.247.2
190.25.46.42
190.26.115.140
190.58.253.75
190.58.253.76
190.58.253.89
190.63.137.83
190.64.146.226
190.85.18.114
190.85.21.244
190.107.182.46
190.111.24.194
190.128.186.98
190.128.227.82
190.145.14.166
190.145.82.98
190.158.227.102
190.171.233.75
190.210.230.143
190.213.10.158
190.220.147.114
190.223.59.18
190.248.136.226
190.248.150.194
191.96.249.13
191.96.249.33
191.96.249.66
191.96.249.116
191.96.249.122
191.96.249.125
191.96.249.126
191.96.249.128
191.96.249.129
191.96.249.130
191.96.249.135
191.96.249.137
191.96.249.152
191.96.249.171
191.96.249.185
191.96.249.198
191.96.249.203
191.96.249.237
192.40.242.139
192.69.90.220
192.95.14.128
192.95.42.91
192.99.7.175
192.99.8.171
192.99.25.136
192.163.226.125
193.70.103.232
193.104.83.134
193.107.245.238
193.160.226.190
193.165.55.126
193.169.252.20
193.169.252.21
193.173.209.145
193.227.51.79
195.22.125.26
195.22.125.27
195.22.125.28
195.22.126.39
195.24.65.25
195.68.126.157
195.86.58.149
195.95.151.251
195.143.228.107
195.201.135.203
196.25.105.154
196.27.85.223
196.27.108.166
196.28.236.73
196.192.99.9
196.192.99.109
196.192.99.110
196.196.81.109
196.196.85.3
196.196.190.10
196.202.170.22
196.203.109.154
196.203.109.159
197.50.35.112
197.50.59.218
197.148.236.52
197.184.45.138
197.219.154.162
197.242.66.181
197.249.5.116
197.253.124.164
198.23.59.118
198.38.85.62
198.50.180.177
198.53.60.171
199.168.137.195
199.168.141.61
199.180.117.78
200.6.178.132
200.57.73.170
200.60.36.35
200.60.73.67
200.60.109.43
200.95.179.28
200.105.154.194
200.111.232.74
200.150.79.84
200.179.121.1
200.187.95.232
201.20.96.82
201.33.193.166
201.162.182.30
201.162.182.66
201.183.238.160
201.183.239.5
201.187.101.222
201.235.166.197
202.77.50.129
202.91.70.30
202.126.38.220
202.137.155.156
202.137.155.185
202.158.64.238
202.163.116.106
202.221.41.43
203.19.70.166
203.78.141.162
203.78.142.95
203.81.77.253
203.196.142.226
203.215.33.212
206.189.7.224
206.189.25.85
206.189.114.59
207.252.77.133
209.85.217.170
209.85.217.171
209.85.217.173
209.85.217.174
209.85.217.177
209.85.217.180
209.85.217.182
209.121.137.116
209.133.98.231
209.222.111.174
210.245.34.242
212.34.242.82
212.48.75.147
212.235.19.201
213.14.69.53
213.74.135.58
213.135.172.220
213.136.105.50
213.136.168.209
213.137.8.214
213.163.44.99
213.238.168.21
213.238.168.112
213.255.195.146
216.108.232.48
217.27.72.124
217.61.20.64
217.61.20.170
217.64.111.234
217.69.9.166
217.108.216.252
217.217.179.17
218.22.100.42
218.93.11.178
218.93.124.122
218.103.21.130
218.103.119.185
218.255.245.126
219.76.239.210
219.235.4.66
220.135.212.159
221.4.128.114
222.74.25.221
222.122.31.132
222.127.71.60

1220
bi_postfix_0_1d.ipset Normal file
View File

File diff suppressed because it is too large Load Diff

350
bi_postfix_1_7d.ipset Normal file
View File

@ -0,0 +1,350 @@
#
# bi_postfix_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix/1?age=7d
# Source File Date: Wed Jan 23 05:48:50 UTC 2019
#
# Category : attacks
# Version : 888
#
# This File Date : Wed Jan 23 05:48:50 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 320 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.157.49.101
14.102.19.116
14.102.76.10
14.177.215.193
23.95.42.140
31.199.192.20
36.37.180.59
36.66.253.181
37.49.224.103
37.49.224.116
37.49.224.118
37.49.224.121
37.49.224.140
37.49.224.142
37.49.224.143
37.49.224.156
37.49.224.166
37.49.224.173
37.49.224.174
37.49.224.186
37.49.224.200
37.49.224.201
37.49.225.47
37.49.225.57
37.49.225.158
37.49.225.163
37.49.225.215
37.49.227.115
37.49.227.150
37.49.227.190
37.49.227.195
42.115.91.82
42.115.136.250
42.159.205.211
43.245.235.34
43.248.73.2
45.4.64.0
45.121.41.5
46.99.164.130
46.225.243.146
46.226.80.165
49.150.53.188
50.62.161.84
58.71.23.130
58.187.171.54
61.100.12.220
61.152.239.71
62.141.39.227
64.150.191.208
66.240.192.138
69.89.25.95
71.6.146.185
71.6.158.166
72.34.54.130
78.38.116.131
78.83.242.229
80.82.67.118
80.82.77.33
80.82.77.139
80.82.78.170
80.245.177.2
82.114.79.86
82.165.159.9
82.221.105.6
82.222.50.130
84.53.243.121
84.241.32.238
85.15.43.21
85.109.70.157
85.206.163.4
87.121.77.67
89.34.202.247
89.248.168.219
89.248.172.175
89.248.172.234
91.121.88.223
91.187.115.44
92.61.39.151
92.247.169.43
94.45.134.190
94.124.94.235
95.110.158.131
95.111.17.138
95.211.211.232
95.213.164.2
96.92.96.13
103.8.195.34
103.20.249.53
103.36.8.185
103.37.83.154
103.47.153.102
103.48.68.162
103.48.181.189
103.54.148.50
103.65.212.62
103.69.20.54
103.70.204.194
103.71.40.30
103.74.71.86
103.94.132.18
103.204.220.18
103.240.250.194
103.242.125.243
103.247.100.19
103.251.83.14
103.255.5.117
104.237.202.51
104.237.202.66
104.237.202.69
106.186.23.79
109.92.128.58
109.93.103.209
109.97.223.142
109.166.128.5
109.238.208.242
110.232.250.134
113.160.142.189
113.161.86.41
113.174.115.169
113.176.13.164
113.190.42.11
114.237.154.30
114.237.154.33
114.237.154.39
114.237.154.79
114.237.154.81
114.237.154.105
114.237.154.110
114.237.154.129
114.237.154.151
114.237.154.153
114.237.154.157
114.237.154.165
114.237.154.171
114.237.154.174
114.237.154.184
114.237.154.195
114.237.154.211
114.237.154.224
114.237.154.239
114.237.154.240
114.237.154.250
114.237.155.35
114.237.155.49
114.237.155.55
114.237.155.63
114.237.155.77
114.237.155.97
114.237.155.124
114.237.155.125
114.237.155.127
114.237.155.153
114.237.155.155
114.237.155.162
114.237.155.179
114.237.155.188
114.237.155.227
114.237.155.231
114.237.155.235
114.237.155.253
114.237.155.254
115.79.102.25
115.84.115.66
115.127.82.34
115.231.212.82
115.248.35.146
116.6.46.30
116.12.48.104
117.4.136.11
117.6.99.48
117.58.243.244
117.92.164.77
117.92.164.97
117.92.164.102
117.92.164.114
117.92.164.138
117.92.164.176
117.92.164.219
117.92.164.228
117.92.164.253
117.92.165.35
117.92.165.79
117.92.165.151
117.92.165.154
117.92.165.206
117.92.165.214
117.92.165.226
117.92.165.242
117.92.202.26
117.92.202.28
117.92.202.110
117.92.202.143
117.92.202.232
117.92.203.66
117.92.203.153
117.92.203.201
119.148.38.57
122.169.110.68
123.16.246.223
123.133.148.43
123.231.237.130
124.158.111.11
125.63.126.39
129.205.210.90
131.161.169.252
138.0.20.26
145.249.104.245
145.249.105.210
146.196.123.57
153.149.233.31
154.70.159.14
162.245.73.150
163.121.250.2
164.132.84.3
167.89.100.13
167.89.100.132
167.114.181.154
169.255.6.26
170.238.119.77
171.244.92.2
173.255.213.214
177.5.149.7
177.7.178.103
177.11.51.111
177.52.72.1
177.67.96.34
177.73.172.14
177.124.77.130
177.124.77.243
177.126.81.63
177.136.40.102
180.178.104.50
180.211.170.78
181.48.43.6
181.49.48.178
181.215.195.11
181.225.65.242
182.71.45.122
182.72.118.214
183.87.140.42
185.3.229.125
185.10.57.109
185.41.28.15
185.228.80.15
185.234.218.36
185.234.218.37
185.234.218.38
186.1.194.74
187.19.127.178
187.87.198.32
187.102.71.1
187.108.201.200
187.108.201.206
188.40.72.17
188.59.99.245
188.166.183.168
189.45.2.250
189.125.28.190
189.211.184.244
189.211.189.44
190.0.53.211
190.90.19.162
190.121.142.2
190.128.186.98
190.151.60.194
190.216.236.74
193.188.254.67
194.247.206.17
195.33.240.222
195.117.22.99
197.255.0.98
198.20.99.130
198.50.141.40
199.180.118.204
200.2.136.38
200.6.251.100
200.24.16.163
200.24.80.8
200.29.170.210
200.57.73.170
200.105.239.230
200.111.232.74
201.33.192.46
201.63.46.5
201.148.126.170
201.148.180.250
201.217.143.170
201.240.147.131
202.40.190.54
202.57.0.110
202.138.233.162
203.24.188.38
203.82.197.229
203.153.46.230
203.160.61.156
203.192.204.8
203.202.243.199
203.202.249.154
203.210.84.141
210.129.109.88
210.131.159.55
211.16.213.156
211.157.101.71
212.83.136.159
212.83.138.211
212.156.86.78
212.156.86.130
212.175.16.66
213.6.116.222
213.32.160.125
213.32.254.89
213.55.76.173
213.58.202.70
213.149.51.146
217.27.72.124
217.118.95.88
217.216.67.5
222.108.29.3
222.120.247.207
223.27.114.2

687
bi_postfix_2_30d.ipset Normal file
View File

@ -0,0 +1,687 @@
#
# bi_postfix_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix/2?age=30d
# Source File Date: Wed Jan 23 09:55:19 UTC 2019
#
# Category : attacks
# Version : 228
#
# This File Date : Wed Jan 23 09:55:20 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 657 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.133.129.254
5.157.49.101
5.178.194.5
14.38.156.48
14.139.82.134
14.141.85.230
14.142.45.138
14.161.35.9
14.161.44.79
23.129.64.105
23.151.0.29
27.0.182.52
27.78.21.133
27.78.21.233
27.78.23.89
27.131.32.91
31.154.81.56
31.179.60.157
31.199.192.20
36.37.180.59
36.66.253.181
37.49.224.103
37.49.224.107
37.49.224.116
37.49.224.118
37.49.224.121
37.49.224.122
37.49.224.125
37.49.224.133
37.49.224.140
37.49.224.142
37.49.224.143
37.49.224.146
37.49.224.156
37.49.224.166
37.49.224.173
37.49.224.174
37.49.224.186
37.49.224.200
37.49.224.201
37.49.225.24
37.49.225.45
37.49.225.47
37.49.225.57
37.49.225.80
37.49.225.90
37.49.225.98
37.49.225.158
37.49.225.163
37.49.225.186
37.49.227.115
37.49.227.126
37.49.227.150
37.49.227.171
37.49.227.190
37.49.227.195
37.142.207.177
41.58.144.62
41.72.96.58
41.73.234.195
41.78.76.190
41.85.161.184
41.159.144.91
41.202.160.198
41.202.174.33
41.203.251.6
41.221.52.202
41.221.253.74
41.225.238.167
42.115.91.82
42.159.205.211
43.248.73.2
43.250.80.138
45.64.139.30
45.64.139.38
45.116.232.117
45.123.43.114
46.55.188.64
46.171.132.81
46.226.80.165
46.233.9.159
46.238.29.205
49.248.145.26
54.37.185.234
54.204.34.130
54.209.82.105
58.58.135.158
58.182.105.209
58.224.89.94
59.5.222.60
60.8.207.34
61.90.133.249
61.91.232.130
62.0.73.123
62.141.45.134
62.149.108.179
62.150.58.38
62.220.208.28
66.220.144.146
66.220.155.143
66.240.192.138
66.240.219.146
66.240.236.119
69.89.25.95
69.171.232.144
70.90.59.237
71.6.146.130
71.6.146.185
71.6.146.186
71.6.158.166
71.6.167.142
71.166.170.210
72.34.54.130
72.252.215.82
72.252.252.26
73.86.125.182
74.192.226.101
76.72.254.222
77.28.96.92
77.85.206.12
77.89.226.254
77.105.0.21
77.238.79.21
77.241.2.3
78.93.119.5
78.93.123.106
78.110.14.117
78.131.87.207
79.2.68.87
79.7.180.33
79.60.223.54
80.16.52.145
80.50.132.18
80.82.67.118
80.82.77.33
80.82.77.139
80.82.78.170
80.245.177.2
81.136.219.1
81.192.100.87
82.114.79.86
82.147.116.201
82.165.159.9
82.213.13.170
82.213.15.102
82.221.105.6
83.66.76.179
83.96.88.50
83.169.208.218
84.51.26.226
84.53.192.243
84.205.235.6
84.205.235.11
85.9.23.78
85.15.43.21
85.15.44.240
85.33.50.29
85.48.100.174
85.109.70.157
85.114.120.42
85.187.115.84
85.194.87.126
85.244.244.96
86.51.15.41
87.121.155.169
87.126.55.27
87.243.140.48
88.84.222.208
88.204.214.122
88.250.168.73
88.255.159.114
88.255.225.39
89.34.202.247
89.100.134.136
89.165.120.73
89.216.22.136
89.248.167.131
89.248.168.219
89.248.172.16
89.248.172.175
91.93.39.162
91.121.88.223
91.187.109.106
91.187.115.44
91.240.82.236
92.84.163.222
93.87.4.113
93.87.67.98
93.91.196.66
93.170.122.30
93.174.95.106
94.23.196.177
94.45.134.190
94.63.2.144
94.177.170.43
94.187.138.225
95.0.137.236
95.86.19.205
95.111.17.138
95.165.164.170
95.168.96.77
95.211.211.232
95.213.164.2
95.225.138.189
96.92.96.13
102.165.184.34
103.8.195.34
103.13.88.90
103.18.0.18
103.20.249.53
103.21.44.26
103.21.77.106
103.70.204.194
103.71.168.41
103.76.188.2
103.86.187.82
103.87.24.26
103.89.88.69
103.89.90.83
103.94.132.18
103.102.136.30
103.193.18.194
103.205.134.146
103.205.134.182
103.210.120.10
103.217.111.222
103.219.40.170
103.229.82.138
103.231.162.26
103.231.162.50
103.245.225.17
103.247.100.19
103.251.83.14
103.254.120.210
103.255.5.117
103.255.6.117
104.237.202.69
105.66.10.9
105.66.10.10
105.67.10.10
105.71.10.10
105.73.24.254
105.112.80.106
109.93.103.209
109.103.160.250
109.121.162.15
109.166.128.5
109.166.128.7
109.166.136.5
109.233.18.189
109.238.208.242
110.50.34.19
110.164.77.42
110.173.189.129
110.185.170.198
112.172.51.14
112.173.75.154
112.215.154.39
112.215.154.86
113.160.112.63
113.160.154.39
113.160.166.8
113.160.178.148
113.160.208.99
113.160.251.43
113.161.1.92
113.161.6.153
113.161.6.188
113.161.8.44
113.161.18.17
113.161.71.192
113.161.84.101
113.161.220.10
113.171.23.47
113.174.246.56
113.190.42.11
113.190.42.25
114.120.195.135
114.120.195.147
114.120.195.150
114.120.195.157
114.134.189.173
114.141.55.206
114.143.20.98
114.199.109.130
114.224.29.102
114.237.154.186
114.237.155.207
115.56.225.2
115.74.213.15
115.78.164.75
115.78.238.85
115.84.91.163
115.96.254.27
115.114.125.146
115.127.82.34
115.231.212.82
115.249.172.121
116.0.6.82
116.12.48.104
116.74.100.3
116.118.35.79
116.212.152.103
117.3.70.237
117.4.136.11
117.54.102.66
117.92.164.242
118.69.72.232
118.70.13.240
118.131.222.2
118.222.156.84
119.11.241.90
119.18.158.22
119.18.159.146
120.28.148.17
120.33.205.162
121.52.41.10
121.120.100.50
121.149.221.186
122.52.121.45
122.53.50.163
122.53.79.16
122.154.123.2
122.155.131.54
122.166.203.199
122.166.222.149
122.170.108.135
122.176.19.74
122.176.47.48
122.179.133.88
122.180.253.6
123.24.205.98
123.49.52.26
123.49.52.30
123.138.18.10
123.231.235.74
123.252.195.230
124.158.111.11
125.63.126.39
129.205.210.90
131.161.81.253
138.0.20.26
138.0.194.244
138.97.236.2
139.5.237.163
139.162.99.243
139.255.66.35
143.0.160.228
144.217.213.131
145.249.104.245
145.249.105.210
145.255.180.22
146.196.123.57
147.75.116.98
148.216.7.80
148.231.248.42
148.240.167.26
149.56.254.112
151.84.95.105
151.237.185.101
153.149.233.31
154.73.182.16
154.121.5.254
154.121.7.0
154.121.7.3
154.121.7.21
154.121.7.24
154.121.7.34
154.121.7.49
154.121.7.54
154.121.251.161
160.20.23.131
162.245.73.150
163.47.143.219
163.53.206.164
163.121.250.2
164.52.24.168
167.89.100.132
167.89.100.226
167.114.181.154
167.249.181.125
168.167.86.251
168.187.86.194
168.187.166.97
169.255.6.26
170.238.119.77
171.244.92.2
171.250.238.56
175.139.151.61
175.144.214.17
176.78.148.22
177.5.149.7
177.7.178.103
177.39.211.91
177.67.5.150
177.73.172.14
177.94.222.38
177.124.77.243
177.126.81.63
177.136.40.102
177.234.0.174
178.151.241.122
179.27.48.94
179.127.175.210
179.228.162.193
180.211.159.54
180.211.170.78
180.211.183.30
180.211.193.222
180.211.243.126
180.214.246.10
181.27.202.222
181.28.92.189
181.49.48.178
181.56.9.161
181.114.20.242
181.115.140.42
181.143.202.140
181.174.94.98
181.176.241.129
181.177.140.43
181.189.136.77
181.210.63.105
181.215.195.11
181.225.65.242
181.236.225.13
182.71.45.122
182.72.66.58
182.74.0.102
182.74.160.211
182.75.29.134
182.75.88.86
182.187.142.2
183.64.247.122
183.171.212.142
183.177.98.238
183.249.243.68
184.71.152.86
185.10.57.109
185.19.80.26
185.45.73.217
185.111.249.149
185.159.220.230
185.228.80.15
185.228.80.51
185.234.216.183
185.234.216.192
185.234.216.204
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
186.5.162.72
186.69.7.223
186.103.208.236
186.120.217.95
186.148.165.25
186.150.97.98
186.156.40.212
186.170.27.98
186.176.134.115
186.179.100.100
186.182.46.76
186.209.30.197
186.216.201.146
187.49.206.134
187.52.133.108
187.55.179.130
187.72.160.39
187.87.198.32
187.94.99.194
187.130.64.220
187.188.83.201
187.216.189.46
188.15.4.42
188.59.99.245
188.165.219.27
188.165.221.36
188.165.235.21
188.166.183.168
188.248.88.31
189.47.169.135
189.52.165.134
189.211.189.44
190.0.53.211
190.5.76.158
190.12.76.23
190.14.170.196
190.41.181.1
190.81.124.139
190.86.208.22
190.92.45.26
190.96.114.158
190.106.223.72
190.109.216.65
190.111.24.194
190.117.234.133
190.120.197.58
190.128.7.143
190.128.186.98
190.151.60.194
190.166.90.3
190.171.233.75
190.180.47.244
190.182.69.14
190.186.59.22
190.210.4.9
190.213.10.158
190.216.236.74
190.232.11.187
190.242.69.61
191.36.224.253
191.96.249.66
191.98.154.34
191.102.120.85
193.188.254.67
194.247.206.17
195.117.22.99
195.171.18.66
195.175.15.6
195.175.18.146
196.1.235.222
196.11.90.202
196.13.223.200
196.202.162.162
196.203.110.33
196.216.53.134
197.45.135.135
197.156.75.53
197.156.75.54
197.156.104.113
197.159.133.118
197.211.51.10
197.221.232.230
197.221.251.28
197.221.251.31
197.232.18.29
197.249.197.63
197.254.80.18
197.255.0.98
198.20.99.130
198.50.141.40
199.180.118.204
200.2.136.38
200.6.251.100
200.7.243.178
200.24.16.163
200.35.40.133
200.42.174.250
200.49.37.154
200.57.73.170
200.57.115.133
200.59.6.250
200.68.86.57
200.74.132.134
200.87.169.234
200.92.215.84
200.105.239.230
200.111.232.74
200.114.216.150
200.158.80.111
200.161.195.119
200.187.95.232
200.201.191.91
201.20.96.82
201.28.15.90
201.33.192.46
201.48.179.85
201.63.46.5
201.132.155.62
201.140.122.13
201.144.20.130
201.148.31.113
201.148.126.170
201.150.43.134
201.163.162.204
201.172.86.7
201.217.143.170
202.21.178.155
202.57.0.110
202.57.43.10
202.62.82.186
202.77.50.129
202.79.21.43
202.83.42.253
202.131.241.166
202.137.141.81
202.138.242.6
202.146.244.178
202.164.53.250
202.164.213.105
202.171.20.42
202.175.185.138
203.19.70.166
203.24.188.38
203.110.81.69
203.153.46.230
203.160.62.248
203.177.94.147
203.202.242.119
203.202.243.199
203.210.84.141
203.247.149.153
205.201.132.14
208.131.177.154
210.57.215.142
210.89.85.114
211.157.101.71
211.212.230.234
212.12.178.42
212.15.24.2
212.83.138.211
212.156.86.78
212.156.126.2
212.156.127.98
212.156.246.74
212.174.75.38
212.174.101.132
212.175.16.66
212.175.35.192
212.175.129.153
212.179.244.170
212.233.182.141
212.233.216.133
213.8.204.67
213.55.72.171
213.55.73.204
213.55.76.173
213.55.79.193
213.55.79.195
213.55.93.245
213.55.95.145
213.57.78.235
213.58.202.70
213.74.19.66
213.132.246.230
213.149.174.110
213.175.172.51
213.213.227.144
213.233.64.129
213.233.64.157
213.233.64.181
216.6.204.70
216.98.212.1
217.25.209.2
217.27.72.124
217.77.221.209
217.79.182.196
217.216.67.5
218.149.110.32
219.76.95.119
219.76.225.132
220.164.2.111
221.161.37.214
222.108.29.3
222.120.247.207
222.252.223.2

114
bi_proftpd_0_1d.ipset Normal file
View File

@ -0,0 +1,114 @@
#
# bi_proftpd_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/0?age=1d
# Source File Date: Wed Jan 23 11:05:04 UTC 2019
#
# Category : attacks
# Version : 9186
#
# This File Date : Wed Jan 23 11:05:04 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 84 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.189.252.95
23.228.86.250
23.254.244.251
42.48.78.234
42.88.117.95
42.91.177.98
42.249.164.14
45.32.15.204
46.172.4.66
49.70.12.81
49.70.62.131
49.89.248.15
49.89.253.132
49.89.254.173
49.89.254.193
51.254.47.48
58.219.170.91
60.13.219.254
61.142.21.39
61.150.60.50
61.166.200.106
87.27.31.41
87.224.230.16
91.49.165.51
103.74.123.51
106.8.200.17
106.37.231.254
106.110.4.101
106.111.32.199
107.190.132.210
109.86.161.222
111.27.12.130
111.61.66.53
111.121.78.238
111.166.183.103
111.176.247.125
113.108.127.12
113.221.24.162
113.234.159.10
114.46.219.161
114.239.53.128
114.239.53.234
114.239.105.4
114.239.107.149
114.239.107.167
114.239.109.64
114.239.197.72
114.239.197.225
115.197.72.226
115.239.162.14
116.52.22.62
117.95.229.120
117.188.12.106
119.108.133.178
119.112.92.62
119.112.132.115
120.50.9.42
121.224.94.32
123.112.125.237
123.126.115.149
124.202.219.98
139.59.22.255
159.203.129.52
169.50.40.211
173.212.253.125
175.11.208.226
175.11.211.170
175.162.64.26
182.93.85.123
183.187.72.195
183.214.162.241
185.13.5.48
185.93.69.146
207.180.212.241
213.184.122.19
218.64.54.43
218.93.154.105
221.3.189.18
221.202.168.254
221.235.91.203
222.86.165.248
222.131.234.156
222.174.9.21
223.199.157.201

559
bi_proftpd_1_7d.ipset Normal file
View File

@ -0,0 +1,559 @@
#
# bi_proftpd_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/1?age=7d
# Source File Date: Wed Jan 23 10:52:39 UTC 2019
#
# Category : attacks
# Version : 642
#
# This File Date : Wed Jan 23 10:52:39 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 529 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.164.53.189
1.171.55.235
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.94.38
31.18.168.112
31.163.118.157
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
47.96.159.166
49.206.242.22
50.63.67.12
50.63.189.186
50.66.34.226
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.218.56.82
59.7.96.57
59.63.206.200
59.147.36.54
60.13.219.254
60.54.255.13
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
61.6.83.153
61.33.152.215
61.142.21.39
61.153.56.30
61.158.163.140
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
69.64.33.138
69.175.76.44
70.91.203.141
72.191.112.118
74.208.164.103
74.208.229.7
77.28.222.163
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.48.239.173
79.120.86.30
80.14.15.77
80.16.23.37
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.133.222.214
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.114.147.92
89.121.218.230
90.50.217.121
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.182.227.36
95.0.1.68
95.130.9.44
95.220.32.63
98.125.111.5
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.15.140.149
103.29.16.18
103.48.116.47
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.52.151.59
110.169.96.118
110.170.194.66
111.11.181.53
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.108.127.12
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.231.101.60
115.239.162.14
115.248.207.78
116.36.37.203
116.125.224.129
116.247.107.90
117.103.204.41
117.156.126.3
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.163.131.42
118.169.12.68
118.193.178.185
118.250.114.123
119.23.110.173
119.29.252.149
119.46.166.132
119.90.52.36
119.100.8.171
119.192.13.115
119.193.140.193
120.24.183.44
120.55.186.125
120.72.89.162
120.204.67.101
121.8.153.122
121.9.9.50
121.14.7.244
121.18.68.94
121.26.194.238
121.26.215.250
121.28.255.249
121.29.112.99
121.40.68.92
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.202.219.98
125.75.207.25
125.180.217.196
125.208.9.204
125.215.181.117
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.248.210.174
158.255.238.220
159.65.205.28
159.226.43.36
160.16.240.108
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
169.0.235.228
171.107.111.97
171.107.206.178
171.244.27.184
172.114.92.219
173.248.194.22
175.11.211.170
175.114.192.117
176.9.83.200
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.67.204.250
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.230.146.26
184.106.153.92
185.10.99.4
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.234.217.55
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.107.28.67
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.145.239.207
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.231.179
195.211.176.181
196.50.231.70
197.155.191.188
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.50.127.5
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.103
213.251.182.105
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
218.0.166.74
218.39.174.83
218.60.67.67
218.60.67.70
218.64.54.43
218.94.15.86
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
218.241.251.150
219.147.95.246
219.246.33.161
220.122.88.137
220.133.7.28
220.172.197.245
220.178.25.66
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.203.81.181
221.208.242.242
221.209.235.2
221.212.74.130
221.216.95.25
221.229.166.77
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.237.78.73
222.237.250.158
223.68.134.29
223.111.180.80
223.245.215.115

574
bi_proftpd_2_30d.ipset Normal file
View File

@ -0,0 +1,574 @@
#
# bi_proftpd_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/2?age=30d
# Source File Date: Tue Jan 22 09:40:22 UTC 2019
#
# Category : attacks
# Version : 189
#
# This File Date : Tue Jan 22 09:40:22 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 544 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.28.124.58
1.171.55.235
1.180.70.178
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.94.38
31.18.168.112
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
49.206.242.22
50.63.67.12
50.63.189.186
50.66.34.226
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.213.44.170
58.218.56.82
58.221.121.90
58.247.249.189
59.7.96.57
59.147.36.54
60.13.219.254
60.13.249.204
60.31.177.194
60.54.255.13
60.161.128.173
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
61.6.83.153
61.33.152.215
61.142.21.39
61.153.56.30
61.158.163.140
61.172.115.195
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
69.64.33.138
69.175.76.44
70.91.203.141
72.191.112.118
74.208.164.103
74.208.229.7
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.48.239.173
79.120.86.30
80.14.15.77
80.16.23.37
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.133.222.214
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.114.147.92
89.121.218.230
90.50.217.121
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.182.227.36
95.0.1.68
95.130.9.44
95.220.32.63
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.15.140.149
103.29.16.18
103.48.116.47
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.52.151.59
110.169.96.118
110.170.194.66
111.11.181.53
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.108.127.12
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.159.151.24
115.231.101.60
115.248.207.78
116.36.37.203
116.116.109.213
116.125.224.129
116.247.107.90
117.103.204.41
117.139.208.10
117.146.43.210
117.156.126.3
117.158.179.177
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.144.139.217
118.163.131.42
118.169.12.68
118.193.178.185
118.250.114.123
118.250.115.0
119.23.110.173
119.29.252.149
119.44.217.242
119.46.166.132
119.90.52.36
119.192.13.115
119.193.140.193
120.24.183.44
120.72.89.162
120.204.67.101
120.204.224.238
121.8.153.122
121.9.9.50
121.14.7.244
121.18.68.94
121.26.194.238
121.26.215.250
121.28.255.249
121.29.112.99
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.202.219.98
124.207.216.2
125.75.207.25
125.93.83.115
125.180.217.196
125.208.9.204
125.215.181.117
125.227.14.43
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.248.210.174
159.65.205.28
159.226.43.36
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
171.107.111.97
171.107.206.178
171.244.27.184
172.114.92.219
173.248.194.22
175.11.211.170
175.114.192.117
176.9.83.200
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.215.74.190
183.230.146.26
184.106.153.92
185.10.99.4
185.77.248.3
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.234.217.55
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.145.239.207
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.231.179
195.211.176.181
196.50.231.70
197.155.191.188
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.100.56.230
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.50.127.5
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.103
213.251.182.105
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
218.0.166.74
218.7.71.210
218.39.174.83
218.60.67.67
218.60.67.70
218.64.54.43
218.90.143.254
218.94.15.86
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
218.241.251.150
219.139.72.81
219.147.95.246
219.246.33.161
220.122.88.137
220.132.35.162
220.133.7.28
220.178.25.66
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.203.81.181
221.208.242.242
221.209.235.2
221.212.74.130
221.229.166.77
222.32.87.89
222.35.27.30
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.223.130.89
222.237.78.73
222.237.250.158
222.241.167.238
223.68.134.29
223.111.180.80
223.245.215.115

128
bi_pureftpd_0_1d.ipset Normal file
View File

@ -0,0 +1,128 @@
#
# bi_pureftpd_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/0?age=1d
# Source File Date: Wed Jan 23 11:05:04 UTC 2019
#
# Category : attacks
# Version : 6212
#
# This File Date : Wed Jan 23 11:05:04 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 98 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
13.209.181.207
23.101.169.29
23.102.162.48
27.254.81.50
35.229.252.50
35.238.246.25
37.61.238.8
37.157.253.3
37.187.244.138
40.76.32.139
41.185.8.118
46.101.30.200
46.105.243.49
46.172.4.66
49.70.53.79
49.89.252.67
54.36.165.4
59.175.239.178
62.219.78.154
64.150.163.165
66.147.238.208
67.222.135.239
68.66.216.13
68.66.216.39
69.10.169.135
69.162.107.34
70.35.196.25
78.194.159.82
82.117.240.50
85.128.142.19
85.128.142.24
88.99.102.116
89.163.146.184
91.134.248.211
94.130.54.135
94.138.221.106
95.216.33.53
98.143.145.144
101.0.105.50
103.74.123.51
103.112.244.112
103.208.220.136
103.229.72.55
103.241.6.201
103.252.220.27
104.250.105.59
107.161.177.42
107.190.132.210
109.73.175.2
109.234.160.49
109.234.164.44
113.221.27.43
118.250.112.50
119.131.143.144
123.30.191.186
123.126.115.149
128.199.69.213
138.128.164.130
139.59.22.255
142.4.9.112
150.95.109.139
153.120.69.170
154.16.114.127
159.203.129.52
162.144.76.207
162.214.10.25
162.241.153.184
162.241.157.186
163.182.174.197
167.114.100.72
168.235.80.127
173.212.235.113
173.247.255.13
175.11.208.226
175.13.247.150
176.28.102.104
176.53.65.145
178.255.152.226
185.13.5.48
185.173.21.69
188.165.242.96
188.166.1.143
192.99.20.181
192.145.239.207
193.189.74.77
193.189.75.101
198.8.90.120
198.54.125.27
199.188.200.139
204.15.248.77
209.124.66.26
209.124.69.186
212.48.85.60
212.179.8.194
213.163.77.211
216.10.243.224
216.10.250.216
217.182.196.7

40
bi_pureftpd_1_7d.ipset Normal file
View File

@ -0,0 +1,40 @@
#
# bi_pureftpd_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/1?age=7d
# Source File Date: Wed Jan 23 10:52:39 UTC 2019
#
# Category : attacks
# Version : 405
#
# This File Date : Wed Jan 23 10:52:39 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 10 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
51.254.47.48
58.213.44.170
94.158.108.47
119.131.152.24
121.69.3.38
175.11.209.68
185.234.217.55
192.145.239.207
213.251.182.105
213.251.182.114

44
bi_pureftpd_2_30d.ipset Normal file
View File

@ -0,0 +1,44 @@
#
# bi_pureftpd_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/2?age=30d
# Source File Date: Tue Jan 22 17:32:18 UTC 2019
#
# Category : attacks
# Version : 148
#
# This File Date : Tue Jan 22 17:32:18 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 14 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.180.70.178
51.254.47.48
58.213.44.170
61.160.193.85
79.9.31.148
94.158.108.47
119.131.152.24
121.69.3.38
175.11.209.68
175.11.211.170
185.234.217.55
197.231.221.211
213.251.182.105
213.251.182.114

46
bi_qmail-smtp_0_1d.ipset Normal file
View File

@ -0,0 +1,46 @@
#
# bi_qmail-smtp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# qmail-smtp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/qmail-smtp/0?age=1d
# Source File Date: Wed Jan 23 09:55:23 UTC 2019
#
# Category : attacks
# Version : 6844
#
# This File Date : Wed Jan 23 09:55:23 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 16 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_qmail-smtp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
27.147.219.234
31.7.64.50
31.173.87.93
39.41.29.182
39.41.102.12
85.185.4.82
85.237.241.56
88.86.212.11
109.248.190.25
185.64.208.77
185.93.248.82
185.244.22.227
188.35.29.36
188.37.10.122
218.155.104.202
220.129.100.119

30
bi_rdp_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_rdp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# rdp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/rdp/0?age=1d
# Source File Date: Sun Jan 13 16:40:36 UTC 2019
#
# Category : attacks
# Version : 155
#
# This File Date : Sun Jan 13 17:17:42 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_rdp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

179
bi_sasl_0_1d.ipset Normal file
View File

@ -0,0 +1,179 @@
#
# bi_sasl_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sasl with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sasl/0?age=1d
# Source File Date: Wed Jan 23 11:05:06 UTC 2019
#
# Category : attacks
# Version : 10288
#
# This File Date : Wed Jan 23 11:05:06 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 149 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sasl_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
3.16.78.172
12.163.252.18
14.186.169.38
14.186.214.168
36.7.102.62
36.7.102.64
36.7.102.160
36.7.103.234
37.49.225.23
37.49.225.186
37.59.8.29
40.76.12.200
40.76.30.245
41.77.26.210
45.114.68.142
46.63.16.188
49.69.42.123
49.69.219.65
49.83.170.181
50.63.13.135
51.75.247.230
51.254.58.226
52.47.148.133
60.168.176.158
60.168.176.202
60.168.177.130
60.168.178.154
60.168.179.7
60.168.179.131
60.168.179.191
60.168.181.210
60.168.181.240
60.168.182.190
60.168.183.8
60.168.183.112
60.168.183.181
60.250.71.25
61.41.9.213
61.147.58.181
61.147.61.175
61.228.150.18
66.70.141.144
72.18.200.11
74.203.202.5
78.142.19.104
80.82.65.9
80.87.113.147
81.93.86.149
85.48.229.2
86.105.51.84
91.234.62.4
94.23.196.177
103.27.187.222
103.89.90.32
103.89.90.169
103.99.1.158
103.99.2.5
103.207.37.40
103.207.38.156
103.207.39.104
104.200.144.191
104.248.169.94
106.226.224.218
111.223.75.178
115.151.185.50
117.68.172.80
117.68.172.141
117.68.172.189
117.68.172.233
117.68.173.24
117.68.173.47
117.68.173.63
117.68.173.82
117.68.173.130
117.68.173.200
117.68.173.214
117.68.173.248
117.68.173.249
117.68.173.250
117.68.174.129
117.68.174.151
117.68.174.203
117.68.175.18
117.68.175.198
119.28.19.225
121.233.206.56
123.206.53.134
140.224.60.196
142.0.70.189
149.56.88.43
150.129.151.62
151.80.162.216
151.80.238.201
151.255.80.81
156.38.74.97
165.227.169.41
167.99.87.173
177.43.166.246
178.128.98.50
178.138.96.31
180.117.225.43
180.117.226.202
180.126.240.13
180.126.242.250
185.170.40.18
185.211.245.170
185.211.245.198
185.216.140.23
185.218.234.44
185.222.209.45
185.234.216.232
185.234.216.235
185.234.217.185
185.234.217.186
185.234.217.187
185.234.217.220
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.176
185.234.218.239
185.234.219.69
185.234.219.75
187.4.105.57
188.137.75.100
188.166.38.216
189.79.40.126
189.84.211.117
190.102.153.206
190.152.149.122
191.96.249.182
191.96.249.188
192.3.138.59
192.162.100.89
192.163.226.125
192.169.250.203
193.251.23.159
195.68.126.157
195.122.25.180
196.210.245.223
196.213.222.250
198.50.179.108
198.50.231.186
200.57.73.170
212.74.202.0
212.225.226.49
212.237.21.114
221.225.35.163
221.227.106.44

97
bi_sasl_1_7d.ipset Normal file
View File

@ -0,0 +1,97 @@
#
# bi_sasl_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sasl with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sasl/1?age=7d
# Source File Date: Wed Jan 23 11:05:07 UTC 2019
#
# Category : attacks
# Version : 751
#
# This File Date : Wed Jan 23 11:05:07 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 67 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sasl_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
14.161.17.132
14.161.45.78
36.7.102.64
36.7.102.133
36.7.103.214
37.49.224.116
37.49.224.160
37.49.224.166
37.49.224.186
37.49.225.23
37.49.225.186
37.49.227.11
37.49.227.136
37.49.227.155
37.49.227.169
37.49.227.190
37.49.227.204
37.59.8.29
46.148.27.38
60.168.176.158
60.168.178.119
60.168.180.172
60.168.182.254
60.251.146.194
70.90.59.237
74.208.40.178
80.82.67.13
80.82.67.118
92.154.98.47
94.23.196.177
103.99.2.5
103.207.37.40
103.207.38.153
103.207.38.156
103.207.39.104
115.84.91.65
117.68.172.98
117.68.173.146
117.68.174.98
117.68.174.116
117.68.174.148
117.68.174.229
117.68.174.251
117.68.174.255
117.68.175.207
117.68.175.209
144.217.213.131
145.249.104.245
145.249.105.210
167.114.181.154
182.73.244.30
182.76.42.110
185.228.80.31
185.234.216.235
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
190.128.186.98
191.96.249.182
192.163.226.125
192.169.140.100
195.68.126.157
197.148.236.52
201.20.96.82
212.225.226.49
218.93.124.122

158
bi_sasl_2_30d.ipset Normal file
View File

@ -0,0 +1,158 @@
#
# bi_sasl_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sasl with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sasl/2?age=30d
# Source File Date: Tue Jan 22 22:20:26 UTC 2019
#
# Category : attacks
# Version : 202
#
# This File Date : Tue Jan 22 22:20:26 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 128 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sasl_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
14.161.17.132
14.161.45.78
23.129.64.101
37.49.224.102
37.49.224.116
37.49.224.118
37.49.224.122
37.49.224.127
37.49.224.144
37.49.224.159
37.49.224.160
37.49.224.166
37.49.224.186
37.49.224.245
37.49.225.23
37.49.225.47
37.49.225.79
37.49.225.186
37.49.227.11
37.49.227.136
37.49.227.155
37.49.227.169
37.49.227.171
37.49.227.190
37.49.227.204
46.148.27.38
49.76.10.172
49.76.125.148
58.20.187.21
58.30.77.194
58.216.224.59
59.28.185.59
61.132.87.131
70.90.59.237
74.143.230.206
78.131.87.207
80.82.67.13
80.82.67.118
84.42.22.242
94.23.196.177
95.168.96.77
103.1.93.217
103.89.90.83
103.99.2.5
103.99.2.7
103.114.104.175
103.207.37.40
103.207.38.152
103.207.38.153
103.207.38.156
103.207.38.157
103.207.39.104
113.161.57.213
113.171.23.47
115.84.91.65
115.84.92.28
115.84.92.76
115.84.99.249
115.231.212.82
120.237.238.202
123.25.30.87
124.29.246.106
130.185.73.42
143.255.152.232
144.217.213.131
145.249.104.245
145.249.105.210
149.56.254.112
154.66.197.34
154.73.182.16
158.255.0.36
167.114.181.154
179.228.162.193
180.250.67.244
182.71.129.34
182.72.136.226
182.73.244.30
182.74.31.226
182.75.112.18
182.75.246.18
182.76.42.110
183.234.43.179
184.71.152.86
185.36.81.43
185.228.80.32
185.228.80.43
185.228.80.51
185.234.216.186
185.234.216.204
185.234.216.235
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
187.55.179.130
188.165.219.27
188.165.221.36
190.111.24.194
190.128.186.98
190.171.233.75
190.213.10.158
191.96.249.122
191.96.249.212
192.99.7.175
192.99.8.171
192.163.226.125
192.169.140.100
193.107.245.238
194.187.249.141
195.68.126.157
196.28.236.73
197.50.72.188
197.148.236.52
197.249.5.116
200.187.95.232
201.20.96.82
202.77.50.129
202.137.134.227
202.137.154.172
203.19.70.166
212.225.226.49
217.27.72.124
217.77.215.52
218.84.168.2
218.90.141.94
218.93.124.122
220.164.2.76
220.169.102.6

46
bi_sip_0_1d.ipset Normal file
View File

@ -0,0 +1,46 @@
#
# bi_sip_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sip with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sip/0?age=1d
# Source File Date: Wed Jan 23 11:05:07 UTC 2019
#
# Category : attacks
# Version : 2686
#
# This File Date : Wed Jan 23 11:05:07 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 16 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sip_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
37.49.231.211
62.210.11.82
81.83.7.136
81.83.19.213
84.199.38.196
185.31.161.228
185.40.4.170
185.53.88.34
185.53.88.40
185.93.2.106
195.130.156.202
195.154.77.58
212.83.141.195
212.83.169.80
212.83.174.198
212.129.18.48

Some files were not shown because too many files have changed in this diff Show More