Sun Apr 21 10:26:16 UTC 2019 update

This commit is contained in:
Costa Tsaousis 2019-04-21 06:30:15 +01:00
commit e822e3d346
1464 changed files with 7209372 additions and 0 deletions

106
.gitignore vendored Normal file
View File

@ -0,0 +1,106 @@
bogons.netset
.cache
.cache.old
dragon_http.netset
dragon_*.ipset
dragon_*.netset
dragon_sshpauth.netset
dragon_vncprobe.netset
dronebl_anonymizers.netset
dronebl_auto_botnets.netset
dronebl_autorooting_worms.netset
dronebl_compromised.netset
dronebl_ddos_drones.netset
dronebl_dns_mx_on_irc.netset
dronebl_*.ipset
dronebl_irc_drones.netset
dronebl_*.netset
dronebl_unknown.netset
dronebl_worms_bots.netset
errors/
fullbogons.netset
history/
ib_*.ipset
iblocklist_ads.netset
iblocklist_ads.*set
iblocklist_badpeers.ipset
iblocklist_badpeers.*set
iblocklist_bogons.netset
iblocklist_bogons.*set
iblocklist_dshield.netset
iblocklist_dshield.*set
iblocklist_edu.netset
iblocklist_edu.*set
iblocklist_exclusions.netset
iblocklist_exclusions.*set
iblocklist_fornonlancomputers.netset
iblocklist_fornonlancomputers.*set
iblocklist_forumspam.netset
iblocklist_forumspam.*set
iblocklist_hijacked.netset
iblocklist_hijacked.*set
iblocklist_iana_multicast.netset
iblocklist_iana_multicast.*set
iblocklist_iana_private.netset
iblocklist_iana_private.*set
iblocklist_iana_reserved.netset
iblocklist_iana_reserved.*set
iblocklist_level1.netset
iblocklist_level1.*set
iblocklist_level2.netset
iblocklist_level2.*set
iblocklist_level3.netset
iblocklist_level3.*set
iblocklist_org_microsoft.netset
iblocklist_org_microsoft.*set
iblocklist_proxies.ipset
iblocklist_proxies.*set
iblocklist_rangetest.netset
iblocklist_rangetest.*set
iblocklist_spider.netset
iblocklist_spider.*set
iblocklist_spyware.netset
iblocklist_spyware.*set
iblocklist_webexploit.ipset
iblocklist_webexploit.*set
ib_*.netset
iprange*
ipv4_range_to_cidr.awk
*.lastchecked
*.setinfo
sorbs_anonymizers.netset
sorbs_dul.netset
sorbs_escalations.netset
sorbs_*.ipset
sorbs_*.netset
sorbs_new_spam.netset
sorbs_noserver.netset
sorbs_recent_spam.netset
sorbs_smtp.netset
sorbs_web.netset
sorbs_zombie.netset
*.source
*.tmp
update-ipsets*
.warn_if_last_downloaded_before_this
blueliv*.ipset
blueliv*.netset
blueliv_crimeserver_online.ipset
blueliv_crimeserver_recent.ipset
blueliv_crimeserver_last.ipset
blueliv_crimeserver_last_1d.ipset
blueliv_crimeserver_last_2d.ipset
blueliv_crimeserver_last_7d.ipset
blueliv_crimeserver_last_30d.ipset
iblocklist_badpeers.netset
dataplane_sipquery.ipset
dataplane_sshpwauth.ipset
dataplane_sshclient.ipset
dataplane_sipregistration.ipset
dataplane_sipinvitation.ipset
dataplane_vncrfb.ipset
dataplane_dnsrd.ipset
dataplane_dnsrdany.ipset
dataplane_dnsversion.ipset
shunlist.ipset
ip2proxy_px1lite.netset

228
README-EDIT.md Normal file
View File

@ -0,0 +1,228 @@
> Due to the amount of data and the frequency of the updates on this repo,
> github has requested to limit the number of updates.
> The site [https://iplists.firehol.org](https://iplists.firehol.org) has direct links
> to all the files in this repo. **This repo is now updated once per day.**
---
### Contents
- [About this repo](#about-this-repo)
- [Using these ipsets](#using-these-ipsets)
- [Which ones to use?](#which-ones-to-use)
- [Why are open proxy lists included](#why-are-open-proxy-lists-included)
- [Using them in FireHOL](#using-them-in-firehol)
* [Adding the ipsets in your firehol.conf](#adding-the-ipsets-in-your-fireholconf)
* [Updating the ipsets while the firewall is running](#updating-the-ipsets-while-the-firewall-is-running)
- [Dynamic List of ipsets included](#list-of-ipsets-included)
- [Comparison of ipsets](#comparison-of-ipsets)
---
# About this repo
This repository includes a list of ipsets dynamically updated with
[FireHOL](https://github.com/firehol/firehol)'s `update-ipsets.sh`
[documented in this wiki](https://github.com/firehol/blocklist-ipsets/wiki).
This repo is self maintained. It it updated automatically from the script via a cron job.
This repo has a site: [http://iplists.firehol.org](http://iplists.firehol.org).
## Why do we need blocklists?
As time passes and the internet matures in our life, cybercrime is becoming increasingly sophisticated.
Although there are many tools (detection of malware, viruses, intrusion detection and prevention systems,
etc) to help us isolate the bad guys, there are now a lot more than just such attacks.
What is more interesting is that the fraudsters or attackers in many cases are not going to do a direct
damage to you or your systems. They will use you and your systems to gain something else, possibly not
related or indirectly related to your business. Nowadays the attacks cannot be identified easily. They are
distributed and come to our systems from a vast amount of IPs around the world.
To get an idea, check for example the [XRumer](http://en.wikipedia.org/wiki/XRumer) software. This thing
mimics human behavior to post ads, it creates email accounts, responds to emails it receives, bypasses
captchas, it goes gently to stay unnoticed, etc.
To increase our effectiveness we need to complement our security solutions with our shared knowledge, our
shared experience in this fight.
Hopefully, there are many teams out there that do their best to identify the attacks and pinpoint the
attackers. These teams release blocklists. Blocklists of IPs (for use in firewalls), domains & URLs
(for use in proxies), etc.
What we are interested here is IPs.
Using IP blocklists at the internet side of your firewall is a key component of internet security. These
lists share key knowledge between us, allowing us to learn from each other and effectively isolate
fraudsters and attackers from our services.
I decided to upload these lists to a github repo because:
1. They are freely available on the internet. The intention of their creators is to help internet security.
Keep in mind though that a few of these lists may have special licences attached. Before using them, please check their source site for any information regarding proper use.
2. Github provides (via `git pull`) a unified way of updating all the lists together.
Pulling this repo regularly on your machines, you will update all the IP lists at once.
3. Github also provides a unified version control. Using it we can have a history of what each list has
done, which IPs or subnets were added and which were removed.
## DNSBLs
Check also another tool included in FireHOL v3+, called `dnsbl-ipset.sh`.
This tool is capable of creating an ipset based on your traffic by looking up information on DNSBLs and
scoring it according to your preferences.
More information [here](https://github.com/firehol/firehol/wiki/dnsbl-ipset.sh).
---
# Using these ipsets
Please be very careful what you choose to use and how you use it. If you blacklist traffic using these
lists you may end up blocking your users, your customers, even yourself (!) from accessing your services.
1. Go to to the site of each list and read how each list is maintained. You are going to trust these guys for doing their job right.
2. Most sites have either a donation system or commercial lists of higher quality. Try to support them.
3. I have included the TOR network in these lists (`bm_tor`, `dm_tor`, `et_tor`). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
4. Apply any blacklist at the internet side of your firewall. Be very careful. The `bogons` and `fullbogons` lists contain private, unrouteable IPs that should not be routed on the internet. If you apply such a blocklist on your DMZ or LAN side, you will be blocked out of your firewall.
5. Always have a whitelist too, containing the IP addresses or subnets you trust. Try to build the rules in such a way that if an IP is in the whitelist, it should not be blocked by these blocklists.
## Which ones to use
### Level 1 - Basic
These are the ones I trust. **Level 1** provides basic security against the most well-known attackers, with the minimum of false positives.
1. **Abuse.ch** lists `feodo`, `palevo`, `sslbl`, `zeus`, `zeus_badips`
These folks are doing a great job tracking crime ware. Their blocklists are very focused.
Keep in mind `zeus` may include some false positives. You can use `zeus_badips` instead.
2. **DShield.org** list `dshield`
It contains the top 20 attacking class C (/24) subnets, over the last three days.
3. **Spamhaus.org** lists `spamhaus_drop`, `spamhaus_edrop`
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers).
According to Spamhaus.org:
> When implemented at a network or ISP's 'core routers', DROP and EDROP will help protect the network's users from spamming, scanning, harvesting, DNS-hijacking and DDoS attacks originating on rogue netblocks.
>
> Spamhaus strongly encourages the use of DROP and EDROP by tier-1s and backbones.
Spamhaus is very responsive to adapt these lists when a network owner updates them that the issue has been solved (I had one such incident with one of my users).
4. **Team-Cymru.org** list `bogons` or `fullbogons`
These are lists of IPs that should not be routed on the internet. No one should be using them.
Be very careful to apply either of the two on the internet side of your network.
### Level 2 - Essentials
**Level 2** provide protection against current brute force attacks. This level may have a small percentage of false positives, mainly due to dynamic IPs being re-used by other users.
1. **OpenBL.org** lists `openbl*`
The team of OpenBL tracks brute force attacks on their hosts. They have a very short list for hosts, under their own control, collecting this information, to eliminate false positives.
They suggest to use the default blacklist which has a retention policy of 90 days (`openbl`), but they also provide lists with different retention policies (from 1 day to 1 year).
Their goal is to report abuse to the responsible provider so that the infection is disabled.
2. **Blocklist.de** lists `blocklist_de*`
Is a network of users reporting abuse mainly using `fail2ban`. They eliminate false positives using other lists available. Since they collect information from their users, their lists may be subject to poisoning, or false positives.
I asked them about poisoning. [Here](https://forum.blocklist.de/viewtopic.php?f=4&t=244&sid=847d00d26b0735add3518ff515242cad) you can find their answer. In short, they track it down so that they have an ignorable rate of false positives.
Also, they only include individual IPs (no subnets) which have attacked their users the last 48 hours and their list contains 20.000 to 40.000 IPs (which is small enough considering the size of the internet).
Like `openbl`, their goal is to report abuse back, so that the infection is disabled.
They also provide their blocklist per type of attack (mail, web, etc).
Of course, there are more lists included. You can check them and decide if they fit for your needs.
## Why are open proxy lists included
Of course, I haven't included them for you to use the open proxies. The port the proxy is listening, or the type of proxy, are not included (although most of them use the standard proxy ports and do serve web requests).
If you check the comparisons for the open proxy lists (`ri_connect_proxies`, `ri_web_proxies`, `xroxy`, `proxz`, `proxyrss`, etc)
you will find that they overlap to a great degree with other blocklists, like `blocklist_de`, `stopforumspam`, etc.
> This means the attackers also use open proxies to execute attacks.
So, if you are under attack, blocking the open proxies may help isolate a large part of the attack.
I don't suggest to permanently block IPs using the proxy lists. Their purpose of existence is questionable.
Their quality though may be acceptable, since lot of these sites advertise that they test open proxies before including them in their lists, so that there are no false positives, at least at the time they tested them.
---
## Using them in FireHOL
`update-ipsets.sh` itself does not alter your firewall. It can be used to update ipsets both on disk and in the kernel for any firewall solution you use.
The information below, shows you how to configure FireHOL to use the provides ipsets.
### Adding the ipsets in your firehol.conf
I use something like this:
```sh
# our wan interface
wan="dsl0"
# our whitelist
ipset4 create whitelist hash:net
ipset4 add whitelist A.B.C.D/E # A.B.C.D/E is whitelisted
# subnets - netsets
for x in fullbogons dshield spamhaus_drop spamhaus_edrop
do
ipset4 create ${x} hash:net
ipset4 addfile ${x} ipsets/${x}.netset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
# individual IPs - ipsets
for x in feodo palevo sslbl zeus openbl blocklist_de
do
ipset4 create ${x} hash:ip
ipset4 addfile ${x} ipsets/${x}.ipset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
... rest of firehol.conf ...
```
If you are concerned about iptables performance, change the `blacklist4` keyword `full` to `input`.
This will block only inbound NEW connections, i.e. only the first packet for every NEW inbound connection will be checked.
All other traffic passes through unchecked.
> Before adding these rules to your `firehol.conf` you should run `update-ipsets.sh` to enable them.
### Updating the ipsets while the firewall is running
Just use the `update-ipsets.sh` script from the firehol distribution.
This script will update each ipset and call firehol to update the ipset while the firewall is running.
> You can add `update-ipsets.sh` to cron, to run every 10 mins. `update-ipsets.sh` is smart enough to download
> a list only when it needs to.
---
# List of ipsets included

737
README.md Normal file
View File

@ -0,0 +1,737 @@
> Due to the amount of data and the frequency of the updates on this repo,
> github has requested to limit the number of updates.
> The site [https://iplists.firehol.org](https://iplists.firehol.org) has direct links
> to all the files in this repo. **This repo is now updated once per day.**
---
### Contents
- [About this repo](#about-this-repo)
- [Using these ipsets](#using-these-ipsets)
- [Which ones to use?](#which-ones-to-use)
- [Why are open proxy lists included](#why-are-open-proxy-lists-included)
- [Using them in FireHOL](#using-them-in-firehol)
* [Adding the ipsets in your firehol.conf](#adding-the-ipsets-in-your-fireholconf)
* [Updating the ipsets while the firewall is running](#updating-the-ipsets-while-the-firewall-is-running)
- [Dynamic List of ipsets included](#list-of-ipsets-included)
- [Comparison of ipsets](#comparison-of-ipsets)
---
# About this repo
This repository includes a list of ipsets dynamically updated with
[FireHOL](https://github.com/firehol/firehol)'s `update-ipsets.sh`
[documented in this wiki](https://github.com/firehol/blocklist-ipsets/wiki).
This repo is self maintained. It it updated automatically from the script via a cron job.
This repo has a site: [http://iplists.firehol.org](http://iplists.firehol.org).
## Why do we need blocklists?
As time passes and the internet matures in our life, cybercrime is becoming increasingly sophisticated.
Although there are many tools (detection of malware, viruses, intrusion detection and prevention systems,
etc) to help us isolate the bad guys, there are now a lot more than just such attacks.
What is more interesting is that the fraudsters or attackers in many cases are not going to do a direct
damage to you or your systems. They will use you and your systems to gain something else, possibly not
related or indirectly related to your business. Nowadays the attacks cannot be identified easily. They are
distributed and come to our systems from a vast amount of IPs around the world.
To get an idea, check for example the [XRumer](http://en.wikipedia.org/wiki/XRumer) software. This thing
mimics human behavior to post ads, it creates email accounts, responds to emails it receives, bypasses
captchas, it goes gently to stay unnoticed, etc.
To increase our effectiveness we need to complement our security solutions with our shared knowledge, our
shared experience in this fight.
Hopefully, there are many teams out there that do their best to identify the attacks and pinpoint the
attackers. These teams release blocklists. Blocklists of IPs (for use in firewalls), domains & URLs
(for use in proxies), etc.
What we are interested here is IPs.
Using IP blocklists at the internet side of your firewall is a key component of internet security. These
lists share key knowledge between us, allowing us to learn from each other and effectively isolate
fraudsters and attackers from our services.
I decided to upload these lists to a github repo because:
1. They are freely available on the internet. The intention of their creators is to help internet security.
Keep in mind though that a few of these lists may have special licences attached. Before using them, please check their source site for any information regarding proper use.
2. Github provides (via `git pull`) a unified way of updating all the lists together.
Pulling this repo regularly on your machines, you will update all the IP lists at once.
3. Github also provides a unified version control. Using it we can have a history of what each list has
done, which IPs or subnets were added and which were removed.
## DNSBLs
Check also another tool included in FireHOL v3+, called `dnsbl-ipset.sh`.
This tool is capable of creating an ipset based on your traffic by looking up information on DNSBLs and
scoring it according to your preferences.
More information [here](https://github.com/firehol/firehol/wiki/dnsbl-ipset.sh).
---
# Using these ipsets
Please be very careful what you choose to use and how you use it. If you blacklist traffic using these
lists you may end up blocking your users, your customers, even yourself (!) from accessing your services.
1. Go to to the site of each list and read how each list is maintained. You are going to trust these guys for doing their job right.
2. Most sites have either a donation system or commercial lists of higher quality. Try to support them.
3. I have included the TOR network in these lists (`bm_tor`, `dm_tor`, `et_tor`). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
4. Apply any blacklist at the internet side of your firewall. Be very careful. The `bogons` and `fullbogons` lists contain private, unrouteable IPs that should not be routed on the internet. If you apply such a blocklist on your DMZ or LAN side, you will be blocked out of your firewall.
5. Always have a whitelist too, containing the IP addresses or subnets you trust. Try to build the rules in such a way that if an IP is in the whitelist, it should not be blocked by these blocklists.
## Which ones to use
### Level 1 - Basic
These are the ones I trust. **Level 1** provides basic security against the most well-known attackers, with the minimum of false positives.
1. **Abuse.ch** lists `feodo`, `palevo`, `sslbl`, `zeus`, `zeus_badips`
These folks are doing a great job tracking crime ware. Their blocklists are very focused.
Keep in mind `zeus` may include some false positives. You can use `zeus_badips` instead.
2. **DShield.org** list `dshield`
It contains the top 20 attacking class C (/24) subnets, over the last three days.
3. **Spamhaus.org** lists `spamhaus_drop`, `spamhaus_edrop`
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers).
According to Spamhaus.org:
> When implemented at a network or ISP's 'core routers', DROP and EDROP will help protect the network's users from spamming, scanning, harvesting, DNS-hijacking and DDoS attacks originating on rogue netblocks.
>
> Spamhaus strongly encourages the use of DROP and EDROP by tier-1s and backbones.
Spamhaus is very responsive to adapt these lists when a network owner updates them that the issue has been solved (I had one such incident with one of my users).
4. **Team-Cymru.org** list `bogons` or `fullbogons`
These are lists of IPs that should not be routed on the internet. No one should be using them.
Be very careful to apply either of the two on the internet side of your network.
### Level 2 - Essentials
**Level 2** provide protection against current brute force attacks. This level may have a small percentage of false positives, mainly due to dynamic IPs being re-used by other users.
1. **OpenBL.org** lists `openbl*`
The team of OpenBL tracks brute force attacks on their hosts. They have a very short list for hosts, under their own control, collecting this information, to eliminate false positives.
They suggest to use the default blacklist which has a retention policy of 90 days (`openbl`), but they also provide lists with different retention policies (from 1 day to 1 year).
Their goal is to report abuse to the responsible provider so that the infection is disabled.
2. **Blocklist.de** lists `blocklist_de*`
Is a network of users reporting abuse mainly using `fail2ban`. They eliminate false positives using other lists available. Since they collect information from their users, their lists may be subject to poisoning, or false positives.
I asked them about poisoning. [Here](https://forum.blocklist.de/viewtopic.php?f=4&t=244&sid=847d00d26b0735add3518ff515242cad) you can find their answer. In short, they track it down so that they have an ignorable rate of false positives.
Also, they only include individual IPs (no subnets) which have attacked their users the last 48 hours and their list contains 20.000 to 40.000 IPs (which is small enough considering the size of the internet).
Like `openbl`, their goal is to report abuse back, so that the infection is disabled.
They also provide their blocklist per type of attack (mail, web, etc).
Of course, there are more lists included. You can check them and decide if they fit for your needs.
## Why are open proxy lists included
Of course, I haven't included them for you to use the open proxies. The port the proxy is listening, or the type of proxy, are not included (although most of them use the standard proxy ports and do serve web requests).
If you check the comparisons for the open proxy lists (`ri_connect_proxies`, `ri_web_proxies`, `xroxy`, `proxz`, `proxyrss`, etc)
you will find that they overlap to a great degree with other blocklists, like `blocklist_de`, `stopforumspam`, etc.
> This means the attackers also use open proxies to execute attacks.
So, if you are under attack, blocking the open proxies may help isolate a large part of the attack.
I don't suggest to permanently block IPs using the proxy lists. Their purpose of existence is questionable.
Their quality though may be acceptable, since lot of these sites advertise that they test open proxies before including them in their lists, so that there are no false positives, at least at the time they tested them.
---
## Using them in FireHOL
`update-ipsets.sh` itself does not alter your firewall. It can be used to update ipsets both on disk and in the kernel for any firewall solution you use.
The information below, shows you how to configure FireHOL to use the provides ipsets.
### Adding the ipsets in your firehol.conf
I use something like this:
```sh
# our wan interface
wan="dsl0"
# our whitelist
ipset4 create whitelist hash:net
ipset4 add whitelist A.B.C.D/E # A.B.C.D/E is whitelisted
# subnets - netsets
for x in fullbogons dshield spamhaus_drop spamhaus_edrop
do
ipset4 create ${x} hash:net
ipset4 addfile ${x} ipsets/${x}.netset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
# individual IPs - ipsets
for x in feodo palevo sslbl zeus openbl blocklist_de
do
ipset4 create ${x} hash:ip
ipset4 addfile ${x} ipsets/${x}.ipset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
... rest of firehol.conf ...
```
If you are concerned about iptables performance, change the `blacklist4` keyword `full` to `input`.
This will block only inbound NEW connections, i.e. only the first packet for every NEW inbound connection will be checked.
All other traffic passes through unchecked.
> Before adding these rules to your `firehol.conf` you should run `update-ipsets.sh` to enable them.
### Updating the ipsets while the firewall is running
Just use the `update-ipsets.sh` script from the firehol distribution.
This script will update each ipset and call firehol to update the ipset while the firewall is running.
> You can add `update-ipsets.sh` to cron, to run every 10 mins. `update-ipsets.sh` is smart enough to download
> a list only when it needs to.
---
# List of ipsets included
The following list was automatically generated on Sun Apr 21 10:26:16 UTC 2019.
The update frequency is the maximum allowed by internal configuration. A list will never be downloaded sooner than the update frequency stated. A list may also not be downloaded, after this frequency expired, if it has not been modified on the server (as reported by HTTP `IF_MODIFIED_SINCE` method).
name|info|type|entries|update|
:--:|:--:|:--:|:-----:|:----:|
[alienvault_reputation](http://iplists.firehol.org/?ipset=alienvault_reputation)|[AlienVault.com](https://www.alienvault.com/) IP reputation database|ipv4 hash:ip|53870 unique IPs|updated every 6 hours from [this link](https://reputation.alienvault.com/reputation.generic)
[asprox_c2](http://iplists.firehol.org/?ipset=asprox_c2)|[h3x.eu](http://atrack.h3x.eu/) ASPROX Tracker - Asprox C&C Sites|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](http://atrack.h3x.eu/c2)
[bambenek_banjori](http://iplists.firehol.org/?ipset=bambenek_banjori)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of banjori C&Cs with 90 minute lookback|ipv4 hash:ip|112 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt)
[bambenek_bebloh](http://iplists.firehol.org/?ipset=bambenek_bebloh)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of bebloh C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt)
[bambenek_c2](http://iplists.firehol.org/?ipset=bambenek_c2)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) master feed of known, active and non-sinkholed C&Cs IP addresses|ipv4 hash:ip|469 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt)
[bambenek_cl](http://iplists.firehol.org/?ipset=bambenek_cl)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cl C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cl-iplist.txt)
[bambenek_cryptowall](http://iplists.firehol.org/?ipset=bambenek_cryptowall)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cryptowall C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cryptowall-iplist.txt)
[bambenek_dircrypt](http://iplists.firehol.org/?ipset=bambenek_dircrypt)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dircrypt C&Cs with 90 minute lookback|ipv4 hash:ip|11 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt)
[bambenek_dyre](http://iplists.firehol.org/?ipset=bambenek_dyre)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dyre C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt)
[bambenek_geodo](http://iplists.firehol.org/?ipset=bambenek_geodo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of geodo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt)
[bambenek_hesperbot](http://iplists.firehol.org/?ipset=bambenek_hesperbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of hesperbot C&Cs with 90 minute lookback|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt)
[bambenek_matsnu](http://iplists.firehol.org/?ipset=bambenek_matsnu)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of matsnu C&Cs with 90 minute lookback|ipv4 hash:ip|3 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt)
[bambenek_necurs](http://iplists.firehol.org/?ipset=bambenek_necurs)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of necurs C&Cs with 90 minute lookback|ipv4 hash:ip|49 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt)
[bambenek_p2pgoz](http://iplists.firehol.org/?ipset=bambenek_p2pgoz)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of p2pgoz C&Cs with 90 minute lookback|ipv4 hash:ip|2 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt)
[bambenek_pushdo](http://iplists.firehol.org/?ipset=bambenek_pushdo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pushdo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt)
[bambenek_pykspa](http://iplists.firehol.org/?ipset=bambenek_pykspa)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pykspa C&Cs with 90 minute lookback|ipv4 hash:ip|9 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt)
[bambenek_qakbot](http://iplists.firehol.org/?ipset=bambenek_qakbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of qakbot C&Cs with 90 minute lookback|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt)
[bambenek_ramnit](http://iplists.firehol.org/?ipset=bambenek_ramnit)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ramnit C&Cs with 90 minute lookback|ipv4 hash:ip|83 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt)
[bambenek_ranbyus](http://iplists.firehol.org/?ipset=bambenek_ranbyus)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ranbyus C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt)
[bambenek_simda](http://iplists.firehol.org/?ipset=bambenek_simda)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of simda C&Cs with 90 minute lookback|ipv4 hash:ip|135 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/simda-iplist.txt)
[bambenek_suppobox](http://iplists.firehol.org/?ipset=bambenek_suppobox)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of suppobox C&Cs with 90 minute lookback|ipv4 hash:ip|56 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt)
[bambenek_symmi](http://iplists.firehol.org/?ipset=bambenek_symmi)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of symmi C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt)
[bambenek_tinba](http://iplists.firehol.org/?ipset=bambenek_tinba)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of tinba C&Cs with 90 minute lookback|ipv4 hash:ip|6 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt)
[bambenek_volatile](http://iplists.firehol.org/?ipset=bambenek_volatile)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of volatile C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt)
[bbcan177_ms1](http://iplists.firehol.org/?ipset=bbcan177_ms1)|pfBlockerNG Malicious Threats|ipv4 hash:net|2700 subnets, 5269985 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/bf29d47ea04391cb3eb0/raw)
[bbcan177_ms3](http://iplists.firehol.org/?ipset=bbcan177_ms3)|pfBlockerNG Malicious Threats|ipv4 hash:net|1146 subnets, 30151694 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/d7105c242f17f4498f81/raw)
[bds_atif](http://iplists.firehol.org/?ipset=bds_atif)|Artillery Threat Intelligence Feed and Banlist Feed|ipv4 hash:ip|8192 unique IPs|updated every 1 day from [this link](https://www.binarydefense.com/banlist.txt)
[bi_any_0_1d](http://iplists.firehol.org/?ipset=bi_any_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 0 and age less than 1d|ipv4 hash:ip|24172 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/any/0?age=1d)
[bi_any_1_7d](http://iplists.firehol.org/?ipset=bi_any_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 1 and age less than 7d|ipv4 hash:ip|15344 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/any/1?age=7d)
[bi_any_2_1d](http://iplists.firehol.org/?ipset=bi_any_2_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 1d|ipv4 hash:ip|5855 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/any/2?age=1d)
[bi_any_2_30d](http://iplists.firehol.org/?ipset=bi_any_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 30d|ipv4 hash:ip|29875 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/any/2?age=30d)
[bi_any_2_7d](http://iplists.firehol.org/?ipset=bi_any_2_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 7d|ipv4 hash:ip|13404 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/any/2?age=7d)
[bi_apache-404_0_1d](http://iplists.firehol.org/?ipset=bi_apache-404_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-404 with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-404/0?age=1d)
[bi_apache-modsec_0_1d](http://iplists.firehol.org/?ipset=bi_apache-modsec_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-modsec with score above 0 and age less than 1d|ipv4 hash:ip|18 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-modsec/0?age=1d)
[bi_apache-noscript_0_1d](http://iplists.firehol.org/?ipset=bi_apache-noscript_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-noscript with score above 0 and age less than 1d|ipv4 hash:ip|153 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-noscript/0?age=1d)
[bi_apache-noscript_2_30d](http://iplists.firehol.org/?ipset=bi_apache-noscript_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-noscript with score above 2 and age less than 30d|ipv4 hash:ip|9 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/apache-noscript/2?age=30d)
[bi_apache-phpmyadmin_0_1d](http://iplists.firehol.org/?ipset=bi_apache-phpmyadmin_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-phpmyadmin with score above 0 and age less than 1d|ipv4 hash:ip|3 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-phpmyadmin/0?age=1d)
[bi_apache-scriddies_0_1d](http://iplists.firehol.org/?ipset=bi_apache-scriddies_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache-scriddies with score above 0 and age less than 1d|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache-scriddies/0?age=1d)
[bi_apache_0_1d](http://iplists.firehol.org/?ipset=bi_apache_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 0 and age less than 1d|ipv4 hash:ip|279 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apache/0?age=1d)
[bi_apache_1_7d](http://iplists.firehol.org/?ipset=bi_apache_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 1 and age less than 7d|ipv4 hash:ip|66 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/apache/1?age=7d)
[bi_apache_2_30d](http://iplists.firehol.org/?ipset=bi_apache_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apache with score above 2 and age less than 30d|ipv4 hash:ip|167 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/apache/2?age=30d)
[bi_apacheddos_0_1d](http://iplists.firehol.org/?ipset=bi_apacheddos_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category apacheddos with score above 0 and age less than 1d|ipv4 hash:ip|5 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/apacheddos/0?age=1d)
[bi_assp_0_1d](http://iplists.firehol.org/?ipset=bi_assp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category assp with score above 0 and age less than 1d|ipv4 hash:ip|67 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/assp/0?age=1d)
[bi_asterisk_0_1d](http://iplists.firehol.org/?ipset=bi_asterisk_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category asterisk with score above 0 and age less than 1d|ipv4 hash:ip|85 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/asterisk/0?age=1d)
[bi_asterisk_2_30d](http://iplists.firehol.org/?ipset=bi_asterisk_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category asterisk with score above 2 and age less than 30d|ipv4 hash:ip|30 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/asterisk/2?age=30d)
[bi_badbots_0_1d](http://iplists.firehol.org/?ipset=bi_badbots_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category badbots with score above 0 and age less than 1d|ipv4 hash:ip|1816 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/badbots/0?age=1d)
[bi_badbots_1_7d](http://iplists.firehol.org/?ipset=bi_badbots_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category badbots with score above 1 and age less than 7d|ipv4 hash:ip|1556 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/badbots/1?age=7d)
[bi_bruteforce_0_1d](http://iplists.firehol.org/?ipset=bi_bruteforce_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category bruteforce with score above 0 and age less than 1d|ipv4 hash:ip|1847 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/bruteforce/0?age=1d)
[bi_bruteforce_1_7d](http://iplists.firehol.org/?ipset=bi_bruteforce_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category bruteforce with score above 1 and age less than 7d|ipv4 hash:ip|1557 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/bruteforce/1?age=7d)
[bi_cms_0_1d](http://iplists.firehol.org/?ipset=bi_cms_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 0 and age less than 1d|ipv4 hash:ip|884 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/cms/0?age=1d)
[bi_cms_1_7d](http://iplists.firehol.org/?ipset=bi_cms_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 1 and age less than 7d|ipv4 hash:ip|620 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/cms/1?age=7d)
[bi_cms_2_30d](http://iplists.firehol.org/?ipset=bi_cms_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category cms with score above 2 and age less than 30d|ipv4 hash:ip|863 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/cms/2?age=30d)
[bi_courierauth_0_1d](http://iplists.firehol.org/?ipset=bi_courierauth_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category courierauth with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/courierauth/0?age=1d)
[bi_courierauth_2_30d](http://iplists.firehol.org/?ipset=bi_courierauth_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category courierauth with score above 2 and age less than 30d|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/courierauth/2?age=30d)
[bi_default_0_1d](http://iplists.firehol.org/?ipset=bi_default_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 0 and age less than 1d|ipv4 hash:ip|830 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/default/0?age=1d)
[bi_default_1_7d](http://iplists.firehol.org/?ipset=bi_default_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 1 and age less than 7d|ipv4 hash:ip|261 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/default/1?age=7d)
[bi_default_2_30d](http://iplists.firehol.org/?ipset=bi_default_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category default with score above 2 and age less than 30d|ipv4 hash:ip|482 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/default/2?age=30d)
[bi_dns_0_1d](http://iplists.firehol.org/?ipset=bi_dns_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dns with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dns/0?age=1d)
[bi_dovecot-pop3imap_0_1d](http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot-pop3imap with score above 0 and age less than 1d|ipv4 hash:ip|39 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dovecot-pop3imap/0?age=1d)
[bi_dovecot-pop3imap_2_30d](http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot-pop3imap with score above 2 and age less than 30d|ipv4 hash:ip|922 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/dovecot-pop3imap/2?age=30d)
[bi_dovecot_0_1d](http://iplists.firehol.org/?ipset=bi_dovecot_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 0 and age less than 1d|ipv4 hash:ip|28 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/dovecot/0?age=1d)
[bi_dovecot_1_7d](http://iplists.firehol.org/?ipset=bi_dovecot_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 1 and age less than 7d|ipv4 hash:ip|16 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/dovecot/1?age=7d)
[bi_dovecot_2_30d](http://iplists.firehol.org/?ipset=bi_dovecot_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category dovecot with score above 2 and age less than 30d|ipv4 hash:ip|170 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/dovecot/2?age=30d)
[bi_drupal_0_1d](http://iplists.firehol.org/?ipset=bi_drupal_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category drupal with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/drupal/0?age=1d)
[bi_exim_0_1d](http://iplists.firehol.org/?ipset=bi_exim_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category exim with score above 0 and age less than 1d|ipv4 hash:ip|5 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/exim/0?age=1d)
[bi_exim_1_7d](http://iplists.firehol.org/?ipset=bi_exim_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category exim with score above 1 and age less than 7d|ipv4 hash:ip|1 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/exim/1?age=7d)
[bi_ftp_0_1d](http://iplists.firehol.org/?ipset=bi_ftp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 0 and age less than 1d|ipv4 hash:ip|71 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ftp/0?age=1d)
[bi_ftp_1_7d](http://iplists.firehol.org/?ipset=bi_ftp_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 1 and age less than 7d|ipv4 hash:ip|72 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/ftp/1?age=7d)
[bi_ftp_2_30d](http://iplists.firehol.org/?ipset=bi_ftp_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 2 and age less than 30d|ipv4 hash:ip|578 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ftp/2?age=30d)
[bi_http_0_1d](http://iplists.firehol.org/?ipset=bi_http_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 0 and age less than 1d|ipv4 hash:ip|1205 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/http/0?age=1d)
[bi_http_1_7d](http://iplists.firehol.org/?ipset=bi_http_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 1 and age less than 7d|ipv4 hash:ip|715 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/http/1?age=7d)
[bi_http_2_30d](http://iplists.firehol.org/?ipset=bi_http_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 2 and age less than 30d|ipv4 hash:ip|1045 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/http/2?age=30d)
[bi_imap_0_1d](http://iplists.firehol.org/?ipset=bi_imap_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category imap with score above 0 and age less than 1d|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/imap/0?age=1d)
[bi_mail_0_1d](http://iplists.firehol.org/?ipset=bi_mail_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 0 and age less than 1d|ipv4 hash:ip|2146 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/mail/0?age=1d)
[bi_mail_1_7d](http://iplists.firehol.org/?ipset=bi_mail_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 1 and age less than 7d|ipv4 hash:ip|1408 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/mail/1?age=7d)
[bi_mail_2_30d](http://iplists.firehol.org/?ipset=bi_mail_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 2 and age less than 30d|ipv4 hash:ip|4920 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/mail/2?age=30d)
[bi_named_0_1d](http://iplists.firehol.org/?ipset=bi_named_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category named with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/named/0?age=1d)
[bi_owncloud_0_1d](http://iplists.firehol.org/?ipset=bi_owncloud_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category owncloud with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/owncloud/0?age=1d)
[bi_plesk-postfix_0_1d](http://iplists.firehol.org/?ipset=bi_plesk-postfix_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category plesk-postfix with score above 0 and age less than 1d|ipv4 hash:ip|11 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/plesk-postfix/0?age=1d)
[bi_postfix-sasl_0_1d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 0 and age less than 1d|ipv4 hash:ip|275 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/postfix-sasl/0?age=1d)
[bi_postfix-sasl_1_7d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 1 and age less than 7d|ipv4 hash:ip|906 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/postfix-sasl/1?age=7d)
[bi_postfix-sasl_2_30d](http://iplists.firehol.org/?ipset=bi_postfix-sasl_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix-sasl with score above 2 and age less than 30d|ipv4 hash:ip|953 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/postfix-sasl/2?age=30d)
[bi_postfix_0_1d](http://iplists.firehol.org/?ipset=bi_postfix_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 0 and age less than 1d|ipv4 hash:ip|890 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/postfix/0?age=1d)
[bi_postfix_1_7d](http://iplists.firehol.org/?ipset=bi_postfix_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 1 and age less than 7d|ipv4 hash:ip|279 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/postfix/1?age=7d)
[bi_postfix_2_30d](http://iplists.firehol.org/?ipset=bi_postfix_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category postfix with score above 2 and age less than 30d|ipv4 hash:ip|691 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/postfix/2?age=30d)
[bi_proftpd_0_1d](http://iplists.firehol.org/?ipset=bi_proftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 0 and age less than 1d|ipv4 hash:ip|37 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/proftpd/0?age=1d)
[bi_proftpd_1_7d](http://iplists.firehol.org/?ipset=bi_proftpd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 1 and age less than 7d|ipv4 hash:ip|68 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/proftpd/1?age=7d)
[bi_proftpd_2_30d](http://iplists.firehol.org/?ipset=bi_proftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proftpd with score above 2 and age less than 30d|ipv4 hash:ip|513 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/proftpd/2?age=30d)
[bi_pureftpd_0_1d](http://iplists.firehol.org/?ipset=bi_pureftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 0 and age less than 1d|ipv4 hash:ip|26 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/pureftpd/0?age=1d)
[bi_pureftpd_1_7d](http://iplists.firehol.org/?ipset=bi_pureftpd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 1 and age less than 7d|ipv4 hash:ip|5 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/pureftpd/1?age=7d)
[bi_pureftpd_2_30d](http://iplists.firehol.org/?ipset=bi_pureftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category pureftpd with score above 2 and age less than 30d|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/pureftpd/2?age=30d)
[bi_qmail-smtp_0_1d](http://iplists.firehol.org/?ipset=bi_qmail-smtp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category qmail-smtp with score above 0 and age less than 1d|ipv4 hash:ip|181 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/qmail-smtp/0?age=1d)
[bi_rdp_0_1d](http://iplists.firehol.org/?ipset=bi_rdp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category rdp with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/rdp/0?age=1d)
[bi_sasl_0_1d](http://iplists.firehol.org/?ipset=bi_sasl_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 0 and age less than 1d|ipv4 hash:ip|440 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sasl/0?age=1d)
[bi_sasl_1_7d](http://iplists.firehol.org/?ipset=bi_sasl_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 1 and age less than 7d|ipv4 hash:ip|34 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sasl/1?age=7d)
[bi_sasl_2_30d](http://iplists.firehol.org/?ipset=bi_sasl_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sasl with score above 2 and age less than 30d|ipv4 hash:ip|2377 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sasl/2?age=30d)
[bi_sip_0_1d](http://iplists.firehol.org/?ipset=bi_sip_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 0 and age less than 1d|ipv4 hash:ip|7 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sip/0?age=1d)
[bi_sip_1_7d](http://iplists.firehol.org/?ipset=bi_sip_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 1 and age less than 7d|ipv4 hash:ip|2 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sip/1?age=7d)
[bi_sip_2_30d](http://iplists.firehol.org/?ipset=bi_sip_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sip with score above 2 and age less than 30d|ipv4 hash:ip|4 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sip/2?age=30d)
[bi_smtp_0_1d](http://iplists.firehol.org/?ipset=bi_smtp_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category smtp with score above 0 and age less than 1d|ipv4 hash:ip|14 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/smtp/0?age=1d)
[bi_spam_0_1d](http://iplists.firehol.org/?ipset=bi_spam_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category spam with score above 0 and age less than 1d|ipv4 hash:ip|444 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/spam/0?age=1d)
[bi_spam_1_7d](http://iplists.firehol.org/?ipset=bi_spam_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category spam with score above 1 and age less than 7d|ipv4 hash:ip|183 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/spam/1?age=7d)
[bi_sql-attack_0_1d](http://iplists.firehol.org/?ipset=bi_sql-attack_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sql-attack with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sql-attack/0?age=1d)
[bi_sql_0_1d](http://iplists.firehol.org/?ipset=bi_sql_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sql with score above 0 and age less than 1d|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sql/0?age=1d)
[bi_ssh-blocklist_0_1d](http://iplists.firehol.org/?ipset=bi_ssh-blocklist_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-blocklist with score above 0 and age less than 1d|ipv4 hash:ip|75 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh-blocklist/0?age=1d)
[bi_ssh-ddos_0_1d](http://iplists.firehol.org/?ipset=bi_ssh-ddos_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-ddos with score above 0 and age less than 1d|ipv4 hash:ip|2341 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh-ddos/0?age=1d)
[bi_ssh-ddos_2_30d](http://iplists.firehol.org/?ipset=bi_ssh-ddos_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh-ddos with score above 2 and age less than 30d|ipv4 hash:ip|684 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ssh-ddos/2?age=30d)
[bi_ssh_0_1d](http://iplists.firehol.org/?ipset=bi_ssh_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 0 and age less than 1d|ipv4 hash:ip|19773 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/ssh/0?age=1d)
[bi_ssh_1_7d](http://iplists.firehol.org/?ipset=bi_ssh_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 1 and age less than 7d|ipv4 hash:ip|12469 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/ssh/1?age=7d)
[bi_ssh_2_30d](http://iplists.firehol.org/?ipset=bi_ssh_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 2 and age less than 30d|ipv4 hash:ip|22242 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ssh/2?age=30d)
[bi_sshd_0_1d](http://iplists.firehol.org/?ipset=bi_sshd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 0 and age less than 1d|ipv4 hash:ip|15962 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/sshd/0?age=1d)
[bi_sshd_1_7d](http://iplists.firehol.org/?ipset=bi_sshd_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 1 and age less than 7d|ipv4 hash:ip|6488 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/sshd/1?age=7d)
[bi_sshd_2_30d](http://iplists.firehol.org/?ipset=bi_sshd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sshd with score above 2 and age less than 30d|ipv4 hash:ip|7973 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sshd/2?age=30d)
[bi_telnet_0_1d](http://iplists.firehol.org/?ipset=bi_telnet_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 0 and age less than 1d|ipv4 hash:ip|19 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/telnet/0?age=1d)
[bi_telnet_1_7d](http://iplists.firehol.org/?ipset=bi_telnet_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 1 and age less than 7d|ipv4 hash:ip|9 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/telnet/1?age=7d)
[bi_telnet_2_30d](http://iplists.firehol.org/?ipset=bi_telnet_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category telnet with score above 2 and age less than 30d|ipv4 hash:ip|15 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/telnet/2?age=30d)
[bi_unknown_0_1d](http://iplists.firehol.org/?ipset=bi_unknown_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 0 and age less than 1d|ipv4 hash:ip|953 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/unknown/0?age=1d)
[bi_unknown_1_7d](http://iplists.firehol.org/?ipset=bi_unknown_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 1 and age less than 7d|ipv4 hash:ip|267 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/unknown/1?age=7d)
[bi_unknown_2_30d](http://iplists.firehol.org/?ipset=bi_unknown_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category unknown with score above 2 and age less than 30d|ipv4 hash:ip|580 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/unknown/2?age=30d)
[bi_username-notfound_0_1d](http://iplists.firehol.org/?ipset=bi_username-notfound_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category username-notfound with score above 0 and age less than 1d|ipv4 hash:ip|20 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/username-notfound/0?age=1d)
[bi_voip_0_1d](http://iplists.firehol.org/?ipset=bi_voip_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 0 and age less than 1d|ipv4 hash:ip|90 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/voip/0?age=1d)
[bi_voip_1_7d](http://iplists.firehol.org/?ipset=bi_voip_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 1 and age less than 7d|ipv4 hash:ip|14 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/voip/1?age=7d)
[bi_voip_2_30d](http://iplists.firehol.org/?ipset=bi_voip_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 2 and age less than 30d|ipv4 hash:ip|33 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/voip/2?age=30d)
[bi_vsftpd_0_1d](http://iplists.firehol.org/?ipset=bi_vsftpd_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category vsftpd with score above 0 and age less than 1d|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/vsftpd/0?age=1d)
[bi_vsftpd_2_30d](http://iplists.firehol.org/?ipset=bi_vsftpd_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category vsftpd with score above 2 and age less than 30d|ipv4 hash:ip|61 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/vsftpd/2?age=30d)
[bi_wordpress_0_1d](http://iplists.firehol.org/?ipset=bi_wordpress_0_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 0 and age less than 1d|ipv4 hash:ip|838 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/wordpress/0?age=1d)
[bi_wordpress_1_7d](http://iplists.firehol.org/?ipset=bi_wordpress_1_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 1 and age less than 7d|ipv4 hash:ip|548 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/wordpress/1?age=7d)
[bi_wordpress_2_30d](http://iplists.firehol.org/?ipset=bi_wordpress_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category wordpress with score above 2 and age less than 30d|ipv4 hash:ip|768 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/wordpress/2?age=30d)
[bitcoin_blockchain_info_1d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_1d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|988 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_30d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_30d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|8196 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_7d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_7d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|2636 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_nodes](http://iplists.firehol.org/?ipset=bitcoin_nodes)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|7868 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_1d](http://iplists.firehol.org/?ipset=bitcoin_nodes_1d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|8667 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_30d](http://iplists.firehol.org/?ipset=bitcoin_nodes_30d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|21607 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_7d](http://iplists.firehol.org/?ipset=bitcoin_nodes_7d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|11652 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[blocklist_de](http://iplists.firehol.org/?ipset=blocklist_de)|[Blocklist.de](https://www.blocklist.de/) IPs that have been detected by fail2ban in the last 48 hours|ipv4 hash:ip|28472 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/all.txt)
[blocklist_de_apache](http://iplists.firehol.org/?ipset=blocklist_de_apache)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.|ipv4 hash:ip|9832 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/apache.txt)
[blocklist_de_bots](http://iplists.firehol.org/?ipset=blocklist_de_bots)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = it has posted a Spam-Comment on a open Forum or Wiki).|ipv4 hash:ip|204 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bots.txt)
[blocklist_de_bruteforce](http://iplists.firehol.org/?ipset=blocklist_de_bruteforce)|[Blocklist.de](https://www.blocklist.de/) All IPs which attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.|ipv4 hash:ip|1019 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bruteforcelogin.txt)
[blocklist_de_ftp](http://iplists.firehol.org/?ipset=blocklist_de_ftp)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.|ipv4 hash:ip|308 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ftp.txt)
[blocklist_de_imap](http://iplists.firehol.org/?ipset=blocklist_de_imap)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3, etc.|ipv4 hash:ip|3700 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/imap.txt)
[blocklist_de_mail](http://iplists.firehol.org/?ipset=blocklist_de_mail)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.|ipv4 hash:ip|17186 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/mail.txt)
[blocklist_de_sip](http://iplists.firehol.org/?ipset=blocklist_de_sip)|[Blocklist.de](https://www.blocklist.de/) All IP addresses that tried to login in a SIP, VOIP or Asterisk Server and are included in the IPs list from infiltrated.net|ipv4 hash:ip|114 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/sip.txt)
[blocklist_de_ssh](http://iplists.firehol.org/?ipset=blocklist_de_ssh)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.|ipv4 hash:ip|9088 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ssh.txt)
[blocklist_de_strongips](http://iplists.firehol.org/?ipset=blocklist_de_strongips)|[Blocklist.de](https://www.blocklist.de/) All IPs which are older then 2 month and have more then 5.000 attacks.|ipv4 hash:ip|282 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/strongips.txt)
[blocklist_net_ua](http://iplists.firehol.org/?ipset=blocklist_net_ua)|[blocklist.net.ua](https://blocklist.net.ua) The BlockList project was created to become protection against negative influence of the harmful and potentially dangerous events on the Internet. First of all this service will help internet and hosting providers to protect subscribers sites from being hacked. BlockList will help to stop receiving a large amount of spam from dubious SMTP relays or from attempts of brute force passwords to servers and network equipment.|ipv4 hash:ip|30505 unique IPs|updated every 10 mins from [this link](https://blocklist.net.ua/blocklist.csv)
[blueliv_crimeserver_last](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|24381 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_1d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_1d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|58312 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_2d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_2d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|71293 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_30d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_30d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|87551 unique IPs|updated every 6 hours
[blueliv_crimeserver_last_7d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_7d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|77098 unique IPs|updated every 6 hours
[blueliv_crimeserver_online](http://iplists.firehol.org/?ipset=blueliv_crimeserver_online)|[blueliv.com](https://www.blueliv.com/) Online Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|15628 unique IPs|updated every 1 day
[blueliv_crimeserver_recent](http://iplists.firehol.org/?ipset=blueliv_crimeserver_recent)|[blueliv.com](https://www.blueliv.com/) Recent Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|64076 unique IPs|updated every 1 day
[bm_tor](http://iplists.firehol.org/?ipset=bm_tor)|[torstatus.blutmagie.de](https://torstatus.blutmagie.de) list of all TOR network servers|ipv4 hash:ip|6440 unique IPs|updated every 30 mins from [this link](https://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv)
[bogons](http://iplists.firehol.org/?ipset=bogons)|[Team-Cymru.org](http://www.team-cymru.org) private and reserved addresses defined by RFC 1918, RFC 5735, and RFC 6598 and netblocks that have not been allocated to a regional internet registry|ipv4 hash:net|13 subnets, 592708608 unique IPs|updated every 1 day
[botscout](http://iplists.firehol.org/?ipset=botscout)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|49 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_1d](http://iplists.firehol.org/?ipset=botscout_1d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|1345 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_30d](http://iplists.firehol.org/?ipset=botscout_30d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|18111 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_7d](http://iplists.firehol.org/?ipset=botscout_7d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|5971 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botvrij_dst](http://iplists.firehol.org/?ipset=botvrij_dst)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious destination IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|56 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-dst.raw)
[botvrij_src](http://iplists.firehol.org/?ipset=botvrij_src)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious source IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-src.raw)
[bruteforceblocker](http://iplists.firehol.org/?ipset=bruteforceblocker)|[danger.rulez.sk bruteforceblocker](http://danger.rulez.sk/index.php/bruteforceblocker/) (fail2ban alternative for SSH on OpenBSD). This is an automatically generated list from users reporting failed authentication attempts. An IP seems to be included if 3 or more users report it. Its retention pocily seems 30 days.|ipv4 hash:ip|579 unique IPs|updated every 3 hours from [this link](http://danger.rulez.sk/projects/bruteforceblocker/blist.php)
[ciarmy](http://iplists.firehol.org/?ipset=ciarmy)|[CIArmy.com](http://ciarmy.com/) IPs with poor Rogue Packet score that have not yet been identified as malicious by the community|ipv4 hash:ip|15000 unique IPs|updated every 3 hours from [this link](http://cinsscore.com/list/ci-badguys.txt)
[cidr_report_bogons](http://iplists.firehol.org/?ipset=cidr_report_bogons)|Unallocated (Free) Address Space, generated on a daily basis using the IANA registry files, the Regional Internet Registry stats files and the Regional Internet Registry whois data.|ipv4 hash:net|3145 subnets, 594599832 unique IPs|updated every 1 day from [this link](http://www.cidr-report.org/bogons/freespace-prefix.txt)
[cleanmx_phishing](http://iplists.firehol.org/?ipset=cleanmx_phishing)|[Clean-MX.de](http://support.clean-mx.de/) IPs sending phishing messages|ipv4 hash:ip|4519 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format=csv&domain=)
[cleanmx_viruses](http://iplists.firehol.org/?ipset=cleanmx_viruses)|[Clean-MX.de](http://support.clean-mx.de/clean-mx/viruses.php) IPs with viruses|ipv4 hash:ip|12190 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlviruses.php?response=alive&fields=ip)
[cleantalk](http://iplists.firehol.org/?ipset=cleantalk)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new cleantalk_updated)|ipv4 hash:ip|980 unique IPs|updated every 1 min
[cleantalk_1d](http://iplists.firehol.org/?ipset=cleantalk_1d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_1d cleantalk_updated_1d)|ipv4 hash:ip|6355 unique IPs|updated every 1 min
[cleantalk_30d](http://iplists.firehol.org/?ipset=cleantalk_30d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_30d cleantalk_updated_30d)|ipv4 hash:ip|144260 unique IPs|updated every 1 min
[cleantalk_7d](http://iplists.firehol.org/?ipset=cleantalk_7d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_7d cleantalk_updated_7d)|ipv4 hash:ip|67566 unique IPs|updated every 1 min
[cleantalk_new](http://iplists.firehol.org/?ipset=cleantalk_new)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|500 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_1d](http://iplists.firehol.org/?ipset=cleantalk_new_1d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|3846 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_30d](http://iplists.firehol.org/?ipset=cleantalk_new_30d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|103684 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_7d](http://iplists.firehol.org/?ipset=cleantalk_new_7d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|50076 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_top20](http://iplists.firehol.org/?ipset=cleantalk_top20)|[CleanTalk](https://cleantalk.org/) Top 20 HTTP Spammers|ipv4 hash:ip|20 unique IPs|updated every 1 day from [this link](https://cleantalk.org/blacklists/top20)
[cleantalk_updated](http://iplists.firehol.org/?ipset=cleantalk_updated)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|500 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_1d](http://iplists.firehol.org/?ipset=cleantalk_updated_1d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|2728 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_30d](http://iplists.firehol.org/?ipset=cleantalk_updated_30d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|50961 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_7d](http://iplists.firehol.org/?ipset=cleantalk_updated_7d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|20570 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[coinbl_hosts](http://iplists.firehol.org/?ipset=coinbl_hosts)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains all domains - A list for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|4833 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts)
[coinbl_hosts_browser](http://iplists.firehol.org/?ipset=coinbl_hosts_browser)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. A hosts list to prevent browser mining only. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|897 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser)
[coinbl_hosts_optional](http://iplists.firehol.org/?ipset=coinbl_hosts_optional)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains additional domains, for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|415 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/hosts_optional)
[coinbl_ips](http://iplists.firehol.org/?ipset=coinbl_ips)|[CoinBlockerLists](https://gitlab.com/ZeroDot1/CoinBlockerLists) Simple lists that can help prevent cryptomining in the browser or other applications. This list contains all IPs - An additional list for administrators to prevent mining in networks. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1390 unique IPs|updated every 1 day from [this link](https://zerodot1.gitlab.io/CoinBlockerLists/MiningServerIPList.txt)
[cruzit_web_attacks](http://iplists.firehol.org/?ipset=cruzit_web_attacks)|[CruzIt.com](http://www.cruzit.com/wbl.php) IPs of compromised machines scanning for vulnerabilities and DDOS attacks|ipv4 hash:ip|9541 unique IPs|updated every 12 hours from [this link](http://www.cruzit.com/xwbl2txt.php)
[cta_cryptowall](http://iplists.firehol.org/?ipset=cta_cryptowall)|[Cyber Threat Alliance](http://www.cyberthreatalliance.org/cryptowall-dashboard.html) CryptoWall is one of the most lucrative and broad-reaching ransomware campaigns affecting Internet users today. Sharing intelligence and analysis resources, the CTA profiled the latest version of CryptoWall, which impacted hundreds of thousands of users, resulting in over US $325 million in damages worldwide.|ipv4 hash:ip|1360 unique IPs|updated every 1 day from [this link](https://public.tableau.com/views/CTAOnlineViz/DashboardData.csv?:embed=y&:showVizHome=no&:showTabs=y&:display_count=y&:display_static_image=y&:bootstrapWhenNotified=true)
[cybercrime](http://iplists.firehol.org/?ipset=cybercrime)|[CyberCrime](http://cybercrime-tracker.net/) A project tracking Command and Control.|ipv4 hash:ip|1625 unique IPs|updated every 12 hours from [this link](http://cybercrime-tracker.net/fuckerz.php)
[darklist_de](http://iplists.firehol.org/?ipset=darklist_de)|[darklist.de](http://www.darklist.de/) ssh fail2ban reporting|ipv4 hash:net|6249 subnets, 83820 unique IPs|updated every 1 day from [this link](http://www.darklist.de/raw.php)
[datacenters](http://iplists.firehol.org/?ipset=datacenters)|[Nick Galbreath](https://github.com/client9/ipcat) This is a list of IPv4 address that correspond to datacenters, co-location centers, shared and virtual webhosting providers. In other words, ip addresses that end web consumers should not be using.|ipv4 hash:net|4224 subnets, 95959476 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/client9/ipcat/master/datacenters.csv)
[dataplane_dnsrd](http://iplists.firehol.org/?ipset=dataplane_dnsrd)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending recursive DNS queries to a remote host. This report lists addresses that may be cataloging open DNS resolvers or evaluating cache entries.|ipv4 hash:ip|575 unique IPs|updated every 1 hour
[dataplane_dnsrdany](http://iplists.firehol.org/?ipset=dataplane_dnsrdany)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending recursive DNS IN ANY queries to a remote host. This report lists addresses that may be cataloging open DNS resolvers for the purpose of later using them to facilitate DNS amplification and reflection attacks.|ipv4 hash:ip|19 unique IPs|updated every 1 hour
[dataplane_dnsversion](http://iplists.firehol.org/?ipset=dataplane_dnsversion)|[DataPlane.org](https://dataplane.org/) IP addresses that have been identified as sending DNS CH TXT VERSION.BIND queries to a remote host. This report lists addresses that may be cataloging DNS software.|ipv4 hash:ip|409 unique IPs|updated every 1 hour
[dataplane_sipinvitation](http://iplists.firehol.org/?ipset=dataplane_sipinvitation)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a SIP INVITE operation to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP client cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|38 unique IPs|updated every 1 hour
[dataplane_sipquery](http://iplists.firehol.org/?ipset=dataplane_sipquery)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating a SIP OPTIONS query to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP server cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|467 unique IPs|updated every 1 hour
[dataplane_sipregistration](http://iplists.firehol.org/?ipset=dataplane_sipregistration)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a SIP REGISTER operation to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP client cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|49 unique IPs|updated every 1 hour
[dataplane_sshclient](http://iplists.firehol.org/?ipset=dataplane_sshclient)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating an SSH connection to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SSH server cataloging or conducting authentication attack attempts.|ipv4 hash:ip|16240 unique IPs|updated every 1 hour
[dataplane_sshpwauth](http://iplists.firehol.org/?ipset=dataplane_sshpwauth)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen attempting to remotely login to a host using SSH password authentication. This report lists hosts that are highly suspicious and are likely conducting malicious SSH password authentication attacks.|ipv4 hash:ip|14099 unique IPs|updated every 1 hour
[dataplane_vncrfb](http://iplists.firehol.org/?ipset=dataplane_vncrfb)|[DataPlane.org](https://dataplane.org/) IP addresses that have been seen initiating a VNC remote frame buffer (RFB) session to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be VNC server cataloging or conducting various forms of remote access abuse.|ipv4 hash:ip|1437 unique IPs|updated every 1 hour
[dm_tor](http://iplists.firehol.org/?ipset=dm_tor)|[dan.me.uk](https://www.dan.me.uk) dynamic list of TOR nodes|ipv4 hash:ip|6460 unique IPs|updated every 30 mins from [this link](https://www.dan.me.uk/torlist/)
[dronebl_anonymizers](http://iplists.firehol.org/?ipset=dronebl_anonymizers)|[DroneBL.org](https://dronebl.org) List of open proxies. It includes IPs which DroneBL categorizes as SOCKS proxies (8), HTTP proxies (9), web page proxies (11), WinGate proxies (14), proxy chains (10).|ipv4 hash:net|817622 subnets, 883454 unique IPs|updated every 1 min
[dronebl_auto_botnets](http://iplists.firehol.org/?ipset=dronebl_auto_botnets)|[DroneBL.org](https://dronebl.org) IPs of automatically detected botnets. It includes IPs for which DroneBL responds with 17.|ipv4 hash:net|9692 subnets, 9801 unique IPs|updated every 1 min
[dronebl_autorooting_worms](http://iplists.firehol.org/?ipset=dronebl_autorooting_worms)|[DroneBL.org](https://dronebl.org) IPs of autorooting worms. It includes IPs for which DroneBL responds with 16. These are usually SSH bruteforce attacks.|ipv4 hash:net|599 subnets, 633 unique IPs|updated every 1 min
[dronebl_compromised](http://iplists.firehol.org/?ipset=dronebl_compromised)|[DroneBL.org](https://dronebl.org) IPs of compromised routers / gateways. It includes IPs for which DroneBL responds with 15 (BOPM detected).|ipv4 hash:net|54652 subnets, 186578 unique IPs|updated every 1 min
[dronebl_ddos_drones](http://iplists.firehol.org/?ipset=dronebl_ddos_drones)|[DroneBL.org](https://dronebl.org) IPs of DDoS drones. It includes IPs for which DroneBL responds with 7.|ipv4 hash:net|803404 subnets, 844097 unique IPs|updated every 1 min
[dronebl_dns_mx_on_irc](http://iplists.firehol.org/?ipset=dronebl_dns_mx_on_irc)|[DroneBL.org](https://dronebl.org) List of IPs of DNS / MX hostname detected on IRC. It includes IPs for which DroneBL responds with 18.|ipv4 hash:net|553 subnets, 559 unique IPs|updated every 1 min
[dronebl_irc_drones](http://iplists.firehol.org/?ipset=dronebl_irc_drones)|[DroneBL.org](https://dronebl.org) List of IRC spam drones (litmus/sdbot/fyle). It includes IPs for which DroneBL responds with 3.|ipv4 hash:net|345841 subnets, 354475 unique IPs|updated every 1 min
[dronebl_unknown](http://iplists.firehol.org/?ipset=dronebl_unknown)|[DroneBL.org](https://dronebl.org) List of IPs of uncategorized threats. It includes IPs for which DroneBL responds with 255.|ipv4 hash:net|7 subnets, 7 unique IPs|updated every 1 min
[dronebl_worms_bots](http://iplists.firehol.org/?ipset=dronebl_worms_bots)|[DroneBL.org](https://dronebl.org) IPs of unknown worms or spambots. It includes IPs for which DroneBL responds with 6|ipv4 hash:net|87780 subnets, 166449 unique IPs|updated every 1 min
[dshield](http://iplists.firehol.org/?ipset=dshield)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|18 subnets, 5120 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_1d](http://iplists.firehol.org/?ipset=dshield_1d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|26 subnets, 7168 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_30d](http://iplists.firehol.org/?ipset=dshield_30d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|74 subnets, 22528 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_7d](http://iplists.firehol.org/?ipset=dshield_7d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|39 subnets, 10752 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_top_1000](http://iplists.firehol.org/?ipset=dshield_top_1000)|[DShield.org](https://dshield.org/) top 1000 attacking hosts in the last 30 days|ipv4 hash:ip|930 unique IPs|updated every 1 hour from [this link](https://isc.sans.edu/api/sources/attacks/1000/)
[dyndns_ponmocup](http://iplists.firehol.org/?ipset=dyndns_ponmocup)|[DynDNS.org](http://security-research.dyndns.org/pub/malware-feeds/) Ponmocup. The malware powering the botnet has been around since 2006 and its known under various names, including Ponmocup, Vundo, Virtumonde, Milicenso and Swisyn. It has been used for ad fraud, data theft and downloading additional threats to infected systems. Ponmocup is one of the largest currently active and, with nine consecutive years, also one of the longest running, but it is rarely noticed as the operators take care to keep it operating under the radar.|ipv4 hash:ip|103 unique IPs|updated every 1 day from [this link](http://security-research.dyndns.org/pub/malware-feeds/ponmocup-infected-domains-shadowserver.csv)
[esentire_14072015_com](http://iplists.firehol.org/?ipset=esentire_14072015_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|579 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015.com_watch_ip.lst)
[esentire_14072015q_com](http://iplists.firehol.org/?ipset=esentire_14072015q_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|575 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015q.com_watch_ip.lst)
[esentire_22072014a_com](http://iplists.firehol.org/?ipset=esentire_22072014a_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1290 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014a.com_watch_ip.lst)
[esentire_22072014b_com](http://iplists.firehol.org/?ipset=esentire_22072014b_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1288 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014b.com_watch_ip.lst)
[esentire_22072014c_com](http://iplists.firehol.org/?ipset=esentire_22072014c_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1289 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014c.com_watch_ip.lst)
[esentire_atomictrivia_ru](http://iplists.firehol.org/?ipset=esentire_atomictrivia_ru)|Andromeda/Gamarue Checkin|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/atomictrivia.ru_watch_ip.lst)
[esentire_auth_update_ru](http://iplists.firehol.org/?ipset=esentire_auth_update_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1306 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/auth-update.ru_watch_ip.lst)
[esentire_burmundisoul_ru](http://iplists.firehol.org/?ipset=esentire_burmundisoul_ru)|Ursnif Variant CnC|ipv4 hash:ip|2551 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/burmundisoul.ru_watch_ip.lst)
[esentire_crazyerror_su](http://iplists.firehol.org/?ipset=esentire_crazyerror_su)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|18613 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/crazyerror.su_watch_ip.lst)
[esentire_dagestanskiiviskis_ru](http://iplists.firehol.org/?ipset=esentire_dagestanskiiviskis_ru)|Ursnif Variant CnC|ipv4 hash:ip|517 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dagestanskiiviskis.ru_watch_ip.lst)
[esentire_differentia_ru](http://iplists.firehol.org/?ipset=esentire_differentia_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|12 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/differentia.ru_watch_ip.lst)
[esentire_disorderstatus_ru](http://iplists.firehol.org/?ipset=esentire_disorderstatus_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/disorderstatus.ru_watch_ip.lst)
[esentire_dorttlokolrt_com](http://iplists.firehol.org/?ipset=esentire_dorttlokolrt_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|23664 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dorttlokolrt.com_watch_ip.lst)
[esentire_downs1_ru](http://iplists.firehol.org/?ipset=esentire_downs1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7231 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/downs1.ru_watch_ip.lst)
[esentire_ebankoalalusys_ru](http://iplists.firehol.org/?ipset=esentire_ebankoalalusys_ru)|Ursnif Variant CnC|ipv4 hash:ip|898 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/ebankoalalusys.ru_watch_ip.lst)
[esentire_emptyarray_ru](http://iplists.firehol.org/?ipset=esentire_emptyarray_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|20139 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/emptyarray.ru_watch_ip.lst)
[esentire_fioartd_com](http://iplists.firehol.org/?ipset=esentire_fioartd_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|601 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/fioartd.com_watch_ip.lst)
[esentire_getarohirodrons_com](http://iplists.firehol.org/?ipset=esentire_getarohirodrons_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|2156 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/getarohirodrons.com_watch_ip.lst)
[esentire_hasanhashsde_ru](http://iplists.firehol.org/?ipset=esentire_hasanhashsde_ru)|Ursnif Variant CnC|ipv4 hash:ip|1184 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/hasanhashsde.ru_watch_ip.lst)
[esentire_inleet_ru](http://iplists.firehol.org/?ipset=esentire_inleet_ru)|Ursnif Variant CnC|ipv4 hash:ip|4219 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/inleet.ru_watch_ip.lst)
[esentire_islamislamdi_ru](http://iplists.firehol.org/?ipset=esentire_islamislamdi_ru)|Ursnif Variant CnC|ipv4 hash:ip|673 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/islamislamdi.ru_watch_ip.lst)
[esentire_krnqlwlplttc_com](http://iplists.firehol.org/?ipset=esentire_krnqlwlplttc_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/krnqlwlplttc.com_watch_ip.lst)
[esentire_maddox1_ru](http://iplists.firehol.org/?ipset=esentire_maddox1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|11345 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/maddox1.ru_watch_ip.lst)
[esentire_manning1_ru](http://iplists.firehol.org/?ipset=esentire_manning1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|6824 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/manning1.ru_watch_ip.lst)
[esentire_misteryherson_ru](http://iplists.firehol.org/?ipset=esentire_misteryherson_ru)|Ursnif Variant CnC|ipv4 hash:ip|176 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/misteryherson.ru_watch_ip.lst)
[esentire_mysebstarion_ru](http://iplists.firehol.org/?ipset=esentire_mysebstarion_ru)|Ursnif Variant CnC|ipv4 hash:ip|1058 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/mysebstarion.ru_watch_ip.lst)
[esentire_smartfoodsglutenfree_kz](http://iplists.firehol.org/?ipset=esentire_smartfoodsglutenfree_kz)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2674 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/smartfoodsglutenfree.kz_watch_ip.lst)
[esentire_venerologvasan93_ru](http://iplists.firehol.org/?ipset=esentire_venerologvasan93_ru)|Ursnif Variant CnC|ipv4 hash:ip|1263 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/venerologvasan93.ru_watch_ip.lst)
[esentire_volaya_ru](http://iplists.firehol.org/?ipset=esentire_volaya_ru)|Win32/PSW.Papras.CK CnC|ipv4 hash:ip|5080 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/volaya.ru_watch_ip.lst)
[et_block](http://iplists.firehol.org/?ipset=et_block)|[EmergingThreats.net](http://www.emergingthreats.net/) default blacklist (at the time of writing includes spamhaus DROP, dshield and abuse.ch trackers, which are available separately too - prefer to use the direct ipsets instead of this, they seem to lag a bit in updates)|ipv4 hash:net|1245 subnets, 18776026 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt)
[et_botcc](http://iplists.firehol.org/?ipset=et_botcc)|[EmergingThreats.net Command and Control IPs](http://doc.emergingthreats.net/bin/view/Main/BotCC) These IPs are updates every 24 hours and should be considered VERY highly reliable indications that a host is communicating with a known and active Bot or Malware command and control server - (although they say this includes abuse.ch trackers, it does not - check its overlaps)|ipv4 hash:ip|53 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-CC.rules)
[et_compromised](http://iplists.firehol.org/?ipset=et_compromised)|[EmergingThreats.net compromised hosts](http://doc.emergingthreats.net/bin/view/Main/CompromisedHost)|ipv4 hash:ip|707 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/compromised-ips.txt)
[et_dshield](http://iplists.firehol.org/?ipset=et_dshield)|[EmergingThreats.net](http://www.emergingthreats.net/) dshield blocklist|ipv4 hash:net|19 subnets, 5120 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DSHIELD.rules)
[et_spamhaus](http://iplists.firehol.org/?ipset=et_spamhaus)|[EmergingThreats.net](http://www.emergingthreats.net/) spamhaus blocklist|ipv4 hash:net|752 subnets, 18770432 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DROP.rules)
[et_tor](http://iplists.firehol.org/?ipset=et_tor)|[EmergingThreats.net TOR list](http://doc.emergingthreats.net/bin/view/Main/TorRules) of TOR network IPs|ipv4 hash:ip|6387 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/emerging-tor.rules)
[feodo](http://iplists.firehol.org/?ipset=feodo)|[Abuse.ch Feodo tracker](https://feodotracker.abuse.ch) trojan includes IPs which are being used by Feodo (also known as Cridex or Bugat) which commits ebanking fraud|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=ipblocklist)
[feodo_badips](http://iplists.firehol.org/?ipset=feodo_badips)|[Abuse.ch Feodo tracker BadIPs](https://feodotracker.abuse.ch) The Feodo Tracker Feodo BadIP Blocklist only contains IP addresses (IPv4) used as C&C communication channel by the Feodo Trojan version B. These IP addresses are usually servers rented by cybercriminals directly and used for the exclusive purpose of hosting a Feodo C&C server. Hence you should expect no legit traffic to those IP addresses. The site highly recommends you to block/drop any traffic towards any Feodo C&C using the Feodo BadIP Blocklist. Please consider that this blocklist only contains IP addresses used by version B of the Feodo Trojan. C&C communication channels used by version A, version C and version D are not covered by this blocklist.|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=badips)
[firehol_abusers_1d](http://iplists.firehol.org/?ipset=firehol_abusers_1d)|An ipset made from blocklists that track abusers in the last 24 hours. (includes: botscout_1d cleantalk_new_1d cleantalk_updated_1d php_commenters_1d php_dictionary_1d php_harvesters_1d php_spammers_1d stopforumspam_1d)|ipv4 hash:net|13760 subnets, 14089 unique IPs|updated every 1 min
[firehol_abusers_30d](http://iplists.firehol.org/?ipset=firehol_abusers_30d)|An ipset made from blocklists that track abusers in the last 30 days. (includes: cleantalk_new_30d cleantalk_updated_30d php_commenters_30d php_dictionary_30d php_harvesters_30d php_spammers_30d stopforumspam sblam)|ipv4 hash:net|304383 subnets, 316871 unique IPs|updated every 1 min
[firehol_anonymous](http://iplists.firehol.org/?ipset=firehol_anonymous)|An ipset that includes all the anonymizing IPs of the world. (includes: anonymous bm_tor dm_tor firehol_proxies tor_exits)|ipv4 hash:net|840719 subnets, 877134 unique IPs|updated every 1 min
[firehol_level1](http://iplists.firehol.org/?ipset=firehol_level1)|A firewall blacklist composed from IP lists, providing maximum protection with minimum false positives. Suitable for basic protection on all internet facing servers, routers and firewalls. (includes: bambenek_c2 dshield feodo fullbogons spamhaus_drop spamhaus_edrop sslbl zeus_badips ransomware_rw)|ipv4 hash:net|4717 subnets, 627419209 unique IPs|updated every 1 min
[firehol_level2](http://iplists.firehol.org/?ipset=firehol_level2)|An ipset made from blocklists that track attacks, during about the last 48 hours. (includes: blocklist_de dshield_1d greensnow)|ipv4 hash:net|21031 subnets, 36918 unique IPs|updated every 1 min
[firehol_level3](http://iplists.firehol.org/?ipset=firehol_level3)|An ipset made from blocklists that track attacks, spyware, viruses. It includes IPs than have been reported or detected in the last 30 days. (includes: bruteforceblocker ciarmy dshield_30d dshield_top_1000 malc0de maxmind_proxy_fraud myip shunlist snort_ipfilter sslbl_aggressive talosintel_ipfilter zeus vxvault)|ipv4 hash:net|17134 subnets, 40655 unique IPs|updated every 1 min
[firehol_level4](http://iplists.firehol.org/?ipset=firehol_level4)|An ipset made from blocklists that track attacks, but may include a large number of false positives. (includes: blocklist_net_ua botscout_30d cruzit_web_attacks cybercrime haley_ssh iblocklist_hijacked iblocklist_spyware iblocklist_webexploit ipblacklistcloud_top iw_wormlist malwaredomainlist)|ipv4 hash:net|104846 subnets, 9395496 unique IPs|updated every 1 min
[firehol_proxies](http://iplists.firehol.org/?ipset=firehol_proxies)|An ipset made from all sources that track open proxies. It includes IPs reported or detected in the last 30 days. (includes: iblocklist_proxies maxmind_proxy_fraud ip2proxy_px1lite proxylists_30d proxyrss_30d proxz_30d ri_connect_proxies_30d ri_web_proxies_30d socks_proxy_30d sslproxies_30d xroxy_30d)|ipv4 hash:net|834751 subnets, 865150 unique IPs|updated every 1 min
[firehol_webclient](http://iplists.firehol.org/?ipset=firehol_webclient)|An IP blacklist made from blocklists that track IPs that a web client should never talk to. This list is to be used on top of firehol_level1. (includes: ransomware_online sslbl_aggressive cybercrime dyndns_ponmocup maxmind_proxy_fraud)|ipv4 hash:net|2324 subnets, 2417 unique IPs|updated every 1 min
[firehol_webserver](http://iplists.firehol.org/?ipset=firehol_webserver)|A web server IP blacklist made from blocklists that track IPs that should never be used by your web users. (This list includes IPs that are servers hosting malware, bots, etc or users having a long criminal history. This list is to be used on top of firehol_level1, firehol_level2, firehol_level3 and possibly firehol_proxies or firehol_anonymous). (includes: maxmind_proxy_fraud myip pushing_inertia_blocklist stopforumspam_toxic)|ipv4 hash:net|2496 subnets, 34667297 unique IPs|updated every 1 min
[fullbogons](http://iplists.firehol.org/?ipset=fullbogons)|[Team-Cymru.org](http://www.team-cymru.org) IP space that has been allocated to an RIR, but not assigned by that RIR to an actual ISP or other end-user|ipv4 hash:net|3032 subnets, 607932872 unique IPs|updated every 1 day
geolite2_asn|[MaxMind GeoLite2 ASN](https://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|disabled|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN-CSV.zip)
[geolite2_country](https://github.com/firehol/blocklist-ipsets/tree/master/geolite2_country)|[MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/) databases are free IP geolocation databases comparable to, but less accurate than, MaxMinds GeoIP2 databases. They include IPs per country, IPs per continent, IPs used by anonymous services (VPNs, Proxies, etc) and Satellite Providers.|ipv4 hash:net|All the world|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[gofferje_sip](http://iplists.firehol.org/?ipset=gofferje_sip)|[Stefan Gofferje](http://stefan.gofferje.net/it-stuff/sipfraud/sip-attacker-blacklist) A personal blacklist of networks and IPs of SIP attackers. To end up here, the IP or network must have been the origin of considerable and repeated attacks on my PBX and additionally, the ISP didn't react to any complaint. Note from the author: I don't give any guarantees of accuracy, completeness or even usability! USE AT YOUR OWN RISK! Also note that I block complete countries, namely China, Korea and Palestine with blocklists from ipdeny.com, so some attackers will never even get the chance to get noticed by me to be put on this blacklist. I also don't accept any liabilities related to this blocklist. If you're an ISP and don't like your IPs being listed here, too bad! You should have done something about your customers' behavior and reacted to my complaints. This blocklist is nothing but an expression of my personal opinion and exercising my right of free speech.|ipv4 hash:net|3535 subnets, 1097545 unique IPs|updated every 6 hours from [this link](http://stefan.gofferje.net/sipblocklist.zone)
[gpf_comics](http://iplists.firehol.org/?ipset=gpf_comics)|The GPF DNS Block List is a list of IP addresses on the Internet that have attacked the [GPF Comics](http://www.gpf-comics.com/) family of Web sites. IPs on this block list have been banned from accessing all of our servers because they were caught in the act of spamming, attempting to exploit our scripts, scanning for vulnerabilities, or consuming resources to the detriment of our human visitors.|ipv4 hash:ip|10872 unique IPs|updated every 1 day from [this link](https://www.gpf-comics.com/dnsbl/export.php)
[graphiclineweb](http://iplists.firehol.org/?ipset=graphiclineweb)|[GraphiclineWeb](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/) The IPs, Hosts and Domains listed in this table are banned universally from accessing websites controlled by the maintainer. Some form of bad activity has been seen from the addresses listed. Bad activity includes: unwanted spiders, rule breakers, comment spammers, trackback spammers, spambots, hacker bots, registration bots and other scripting attackers, harvesters, nuisance spiders, spy bots and organizations spying on websites for commercial reasons.|ipv4 hash:net|2579 subnets, 330527 unique IPs|updated every 1 day from [this link](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/)
[greensnow](http://iplists.firehol.org/?ipset=greensnow)|[GreenSnow](https://greensnow.co/) is a team harvesting a large number of IPs from different computers located around the world. GreenSnow is comparable with SpamHaus.org for attacks of any kind except for spam. Their list is updated automatically and you can withdraw at any time your IP address if it has been listed. Attacks / bruteforce that are monitored are: Scan Port, FTP, POP3, mod_security, IMAP, SMTP, SSH, cPanel, etc.|ipv4 hash:ip|1939 unique IPs|updated every 30 mins from [this link](http://blocklist.greensnow.co/greensnow.txt)
[haley_ssh](http://iplists.firehol.org/?ipset=haley_ssh)|[Charles Haley](http://charles.the-haleys.org) IPs launching SSH dictionary attacks.|ipv4 hash:ip|49993 unique IPs|updated every 4 hours from [this link](http://charles.the-haleys.org/ssh_dico_attack_hdeny_format.php/hostsdeny.txt)
[hphosts_ats](http://iplists.firehol.org/?ipset=hphosts_ats)|[hpHosts](http://hosts-file.net/?s=Download) ad/tracking servers listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|13436 unique IPs|updated every 1 day from [this link](http://hosts-file.net/ad_servers.txt)
[hphosts_emd](http://iplists.firehol.org/?ipset=hphosts_emd)|[hpHosts](http://hosts-file.net/?s=Download) malware sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|63243 unique IPs|updated every 1 day from [this link](http://hosts-file.net/emd.txt)
[hphosts_exp](http://iplists.firehol.org/?ipset=hphosts_exp)|[hpHosts](http://hosts-file.net/?s=Download) exploit sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|196 unique IPs|updated every 1 day from [this link](http://hosts-file.net/exp.txt)
[hphosts_fsa](http://iplists.firehol.org/?ipset=hphosts_fsa)|[hpHosts](http://hosts-file.net/?s=Download) fraud sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|26433 unique IPs|updated every 1 day from [this link](http://hosts-file.net/fsa.txt)
[hphosts_grm](http://iplists.firehol.org/?ipset=hphosts_grm)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in spam (that do not otherwise meet any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|293 unique IPs|updated every 1 day from [this link](http://hosts-file.net/grm.txt)
[hphosts_hfs](http://iplists.firehol.org/?ipset=hphosts_hfs)|[hpHosts](http://hosts-file.net/?s=Download) sites spamming the hpHosts forums (and not meeting any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|245 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hfs.txt)
[hphosts_hjk](http://iplists.firehol.org/?ipset=hphosts_hjk)|[hpHosts](http://hosts-file.net/?s=Download) hijack sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|152 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hjk.txt)
[hphosts_mmt](http://iplists.firehol.org/?ipset=hphosts_mmt)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in misleading marketing (e.g. fake Flash update adverts) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1058 unique IPs|updated every 1 day from [this link](http://hosts-file.net/mmt.txt)
[hphosts_pha](http://iplists.firehol.org/?ipset=hphosts_pha)|[hpHosts](http://hosts-file.net/?s=Download) illegal pharmacy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|2443 unique IPs|updated every 1 day from [this link](http://hosts-file.net/pha.txt)
[hphosts_psh](http://iplists.firehol.org/?ipset=hphosts_psh)|[hpHosts](http://hosts-file.net/?s=Download) phishing sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|46390 unique IPs|updated every 1 day from [this link](http://hosts-file.net/psh.txt)
[hphosts_wrz](http://iplists.firehol.org/?ipset=hphosts_wrz)|[hpHosts](http://hosts-file.net/?s=Download) warez/piracy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|982 unique IPs|updated every 1 day from [this link](http://hosts-file.net/wrz.txt)
[iblocklist_abuse_palevo](http://iplists.firehol.org/?ipset=iblocklist_abuse_palevo)|palevotracker.abuse.ch IP blocklist.|ipv4 hash:net|12 subnets, 12 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=erqajhwrxiuvjxqrrwfj&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_spyeye](http://iplists.firehol.org/?ipset=iblocklist_abuse_spyeye)|spyeyetracker.abuse.ch IP blocklist.|ipv4 hash:net|83 subnets, 84 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zvjxsfuvdhoxktpeiokq&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_zeus](http://iplists.firehol.org/?ipset=iblocklist_abuse_zeus)|zeustracker.abuse.ch IP blocklist that contains IP addresses which are currently beeing tracked on the abuse.ch ZeuS Tracker.|ipv4 hash:net|209 subnets, 212 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ynkdjqsjyfmilsgbogqf&fileformat=p2p&archiveformat=gz)
[iblocklist_ads](http://iplists.firehol.org/?ipset=iblocklist_ads)|Advertising trackers and a short list of bad/intrusive porn sites.|ipv4 hash:net|3385 subnets, 888881 unique IPs|updated every 12 hours
[iblocklist_badpeers](http://iplists.firehol.org/?ipset=iblocklist_badpeers)|IPs that have been reported for bad deeds in p2p.|ipv4 hash:net|48578 subnets, 1569289 unique IPs|updated every 12 hours
[iblocklist_bogons](http://iplists.firehol.org/?ipset=iblocklist_bogons)|Unallocated address space.|ipv4 hash:net|2692 subnets, 647770791 unique IPs|updated every 12 hours
[iblocklist_ciarmy_malicious](http://iplists.firehol.org/?ipset=iblocklist_ciarmy_malicious)|ciarmy.com IP blocklist. Based on information from a network of Sentinel devices deployed around the world, they compile a list of known bad IP addresses. Sentinel devices are uniquely positioned to pick up traffic from bad guys without requiring any type of signature-based or rate-based identification. If an IP is identified in this way by a significant number of Sentinels, the IP is malicious and should be blocked.|ipv4 hash:net|13461 subnets, 15000 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=npkuuhuxcsllnhoamkvm&fileformat=p2p&archiveformat=gz)
[iblocklist_cidr_report_bogons](http://iplists.firehol.org/?ipset=iblocklist_cidr_report_bogons)|cidr-report.org IP list of Unallocated address space.|ipv4 hash:net|3145 subnets, 594599832 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=lujdnbasfaaixitgmxpp&fileformat=p2p&archiveformat=gz)
[iblocklist_cruzit_web_attacks](http://iplists.firehol.org/?ipset=iblocklist_cruzit_web_attacks)|CruzIT IP list with individual IP addresses of compromised machines scanning for vulnerabilities and DDOS attacks.|ipv4 hash:net|9398 subnets, 9592 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=czvaehmjpsnwwttrdoyl&fileformat=p2p&archiveformat=gz)
[iblocklist_dshield](http://iplists.firehol.org/?ipset=iblocklist_dshield)|known Hackers and such people.|ipv4 hash:net|16 subnets, 2566 unique IPs|updated every 12 hours
[iblocklist_edu](http://iplists.firehol.org/?ipset=iblocklist_edu)|IPs used by Educational Institutions.|ipv4 hash:net|43893 subnets, 227732059 unique IPs|updated every 12 hours
[iblocklist_exclusions](http://iplists.firehol.org/?ipset=iblocklist_exclusions)|Exclusions.|ipv4 hash:net|313 subnets, 7488 unique IPs|updated every 12 hours
[iblocklist_fornonlancomputers](http://iplists.firehol.org/?ipset=iblocklist_fornonlancomputers)|IP blocklist for non-LAN computers.|ipv4 hash:net|4 subnets, 302055424 unique IPs|updated every 12 hours
[iblocklist_forumspam](http://iplists.firehol.org/?ipset=iblocklist_forumspam)|Forum spam.|ipv4 hash:net|455 subnets, 479 unique IPs|updated every 12 hours
[iblocklist_hijacked](http://iplists.firehol.org/?ipset=iblocklist_hijacked)|Hijacked IP-Blocks. Contains hijacked IP-Blocks and known IP-Blocks that are used to deliver Spam. This list is a combination of lists with hijacked IP-Blocks. Hijacked IP space are IP blocks that are being used without permission by organizations that have no relation to original organization (or its legal successor) that received the IP block. In essence it's stealing of somebody else's IP resources.|ipv4 hash:net|514 subnets, 8933120 unique IPs|updated every 12 hours
[iblocklist_iana_multicast](http://iplists.firehol.org/?ipset=iblocklist_iana_multicast)|IANA Multicast IPs.|ipv4 hash:net|1 subnets, 268435456 unique IPs|updated every 12 hours
[iblocklist_iana_private](http://iplists.firehol.org/?ipset=iblocklist_iana_private)|IANA Private IPs.|ipv4 hash:net|58 subnets, 51643646 unique IPs|updated every 12 hours
[iblocklist_iana_reserved](http://iplists.firehol.org/?ipset=iblocklist_iana_reserved)|IANA Reserved IPs.|ipv4 hash:net|1 subnets, 536870912 unique IPs|updated every 12 hours
[iblocklist_isp_aol](http://iplists.firehol.org/?ipset=iblocklist_isp_aol)|AOL IPs.|ipv4 hash:net|16 subnets, 6627584 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=toboaiysofkflwgrttmb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_att](http://iplists.firehol.org/?ipset=iblocklist_isp_att)|AT&T IPs.|ipv4 hash:net|35 subnets, 55845128 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=grbtkzijgrowvobvessf&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_cablevision](http://iplists.firehol.org/?ipset=iblocklist_isp_cablevision)|Cablevision IPs.|ipv4 hash:net|11 subnets, 1787136 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=dwwbsmzirrykdlvpqozb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_charter](http://iplists.firehol.org/?ipset=iblocklist_isp_charter)|Charter IPs.|ipv4 hash:net|21 subnets, 6138112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=htnzojgossawhpkbulqw&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_comcast](http://iplists.firehol.org/?ipset=iblocklist_isp_comcast)|Comcast IPs.|ipv4 hash:net|33 subnets, 45121536 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=rsgyxvuklicibautguia&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_embarq](http://iplists.firehol.org/?ipset=iblocklist_isp_embarq)|Embarq IPs.|ipv4 hash:net|14 subnets, 2703360 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=twdblifaysaqtypevvdp&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_qwest](http://iplists.firehol.org/?ipset=iblocklist_isp_qwest)|Qwest IPs.|ipv4 hash:net|73 subnets, 15777552 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=jezlifrpefawuoawnfez&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_sprint](http://iplists.firehol.org/?ipset=iblocklist_isp_sprint)|Sprint IPs.|ipv4 hash:net|73 subnets, 6310570 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=hngtqrhhuadlceqxbrob&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_suddenlink](http://iplists.firehol.org/?ipset=iblocklist_isp_suddenlink)|Suddenlink IPs.|ipv4 hash:net|3 subnets, 458752 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=psaoblrwylfrdsspfuiq&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_twc](http://iplists.firehol.org/?ipset=iblocklist_isp_twc)|Time Warner Cable IPs.|ipv4 hash:net|56 subnets, 15015936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aqtsnttnqmcucwrjmohd&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_verizon](http://iplists.firehol.org/?ipset=iblocklist_isp_verizon)|Verizon IPs.|ipv4 hash:net|22 subnets, 18087936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cdmdbprvldivlqsaqjol&fileformat=p2p&archiveformat=gz)
[iblocklist_level1](http://iplists.firehol.org/?ipset=iblocklist_level1)|Level 1 (for use in p2p): Companies or organizations who are clearly involved with trying to stop filesharing (e.g. Baytsp, MediaDefender, Mediasentry). Companies which anti-p2p activity has been seen from. Companies that produce or have a strong financial interest in copyrighted material (e.g. music, movie, software industries a.o.). Government ranges or companies that have a strong financial interest in doing work for governments. Legal industry ranges. IPs or ranges of ISPs from which anti-p2p activity has been observed. Basically this list will block all kinds of internet connections that most people would rather not have during their internet travels.|ipv4 hash:net|236295 subnets, 756667943 unique IPs|updated every 12 hours
[iblocklist_level2](http://iplists.firehol.org/?ipset=iblocklist_level2)|Level 2 (for use in p2p). General corporate ranges. Ranges used by labs or researchers. Proxies.|ipv4 hash:net|78383 subnets, 338032483 unique IPs|updated every 12 hours
[iblocklist_level3](http://iplists.firehol.org/?ipset=iblocklist_level3)|Level 3 (for use in p2p). Many portal-type websites. ISP ranges that may be dodgy for some reason. Ranges that belong to an individual, but which have not been determined to be used by a particular company. Ranges for things that are unusual in some way. The L3 list is aka the paranoid list.|ipv4 hash:net|18869 subnets, 136867343 unique IPs|updated every 12 hours
[iblocklist_malc0de](http://iplists.firehol.org/?ipset=iblocklist_malc0de)|malc0de.com IP blocklist. Addresses that have been identified distributing malware during the past 30 days.|ipv4 hash:net|76 subnets, 76 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=pbqcylkejciyhmwttify&fileformat=p2p&archiveformat=gz)
[iblocklist_onion_router](http://iplists.firehol.org/?ipset=iblocklist_onion_router)|The Onion Router IP addresses.|ipv4 hash:net|6307 subnets, 6521 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=togdoptykrlolpddwbvz&fileformat=p2p&archiveformat=gz)
[iblocklist_org_activision](http://iplists.firehol.org/?ipset=iblocklist_org_activision)|Activision IPs.|ipv4 hash:net|49 subnets, 4902 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=gfnxlhxsijzrcuxwzebb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_apple](http://iplists.firehol.org/?ipset=iblocklist_org_apple)|Apple IPs.|ipv4 hash:net|1 subnets, 16777216 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aphcqvpxuqgrkgufjruj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_blizzard](http://iplists.firehol.org/?ipset=iblocklist_org_blizzard)|Blizzard IPs.|ipv4 hash:net|8 subnets, 16795139 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ercbntshuthyykfkmhxc&fileformat=p2p&archiveformat=gz)
[iblocklist_org_crowd_control](http://iplists.firehol.org/?ipset=iblocklist_org_crowd_control)|Crowd Control Productions IPs.|ipv4 hash:net|2 subnets, 768 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=eveiyhgmusglurfmjyag&fileformat=p2p&archiveformat=gz)
[iblocklist_org_electronic_arts](http://iplists.firehol.org/?ipset=iblocklist_org_electronic_arts)|Electronic Arts IPs.|ipv4 hash:net|42 subnets, 69720 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ejqebpcdmffinaetsvxj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_joost](http://iplists.firehol.org/?ipset=iblocklist_org_joost)|Joost IPs.|ipv4 hash:net|4 subnets, 16779456 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=alxugfmeszbhpxqfdits&fileformat=p2p&archiveformat=gz)
[iblocklist_org_linden_lab](http://iplists.firehol.org/?ipset=iblocklist_org_linden_lab)|Linden Lab IPs.|ipv4 hash:net|11 subnets, 23600 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=qnjdimxnaupjmpqolxcv&fileformat=p2p&archiveformat=gz)
[iblocklist_org_logmein](http://iplists.firehol.org/?ipset=iblocklist_org_logmein)|LogMeIn IPs.|ipv4 hash:net|13 subnets, 16781568 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tgbankumtwtrzllndbmb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_microsoft](http://iplists.firehol.org/?ipset=iblocklist_org_microsoft)|Microsoft IP ranges.|ipv4 hash:net|901 subnets, 1848599 unique IPs|updated every 12 hours
[iblocklist_org_ncsoft](http://iplists.firehol.org/?ipset=iblocklist_org_ncsoft)|NCsoft IPs.|ipv4 hash:net|5 subnets, 12560 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=mwjuwmebrnzyyxpbezxu&fileformat=p2p&archiveformat=gz)
[iblocklist_org_nintendo](http://iplists.firehol.org/?ipset=iblocklist_org_nintendo)|Nintendo IPs.|ipv4 hash:net|45 subnets, 3927 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=pevkykuhgaegqyayzbnr&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pandora](http://iplists.firehol.org/?ipset=iblocklist_org_pandora)|Pandora IPs.|ipv4 hash:net|1 subnets, 2048 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aevzidimyvwybzkletsg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pirate_bay](http://iplists.firehol.org/?ipset=iblocklist_org_pirate_bay)|The Pirate Bay IPs.|ipv4 hash:net|5 subnets, 323 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=nzldzlpkgrcncdomnttb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_punkbuster](http://iplists.firehol.org/?ipset=iblocklist_org_punkbuster)|Punkbuster IPs.|ipv4 hash:net|1 subnets, 1 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=zvwwndvzulqcltsicwdg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_riot_games](http://iplists.firehol.org/?ipset=iblocklist_org_riot_games)|Riot Games IPs.|ipv4 hash:net|6 subnets, 1792 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=sdlvfabdjvrdttfjotcy&fileformat=p2p&archiveformat=gz)
[iblocklist_org_sony_online](http://iplists.firehol.org/?ipset=iblocklist_org_sony_online)|Sony Online Entertainment IPs.|ipv4 hash:net|7 subnets, 24616 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tukpvrvlubsputmkmiwg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_square_enix](http://iplists.firehol.org/?ipset=iblocklist_org_square_enix)|Square Enix IPs.|ipv4 hash:net|2 subnets, 4112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=odyaqontcydnodrlyina&fileformat=p2p&archiveformat=gz)
[iblocklist_org_steam](http://iplists.firehol.org/?ipset=iblocklist_org_steam)|Steam IPs.|ipv4 hash:net|53 subnets, 596448 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cnxkgiklecdaihzukrud&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ubisoft](http://iplists.firehol.org/?ipset=iblocklist_org_ubisoft)|Ubisoft IPs.|ipv4 hash:net|10 subnets, 5308 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=etmcrglomupyxtaebzht&fileformat=p2p&archiveformat=gz)
[iblocklist_org_xfire](http://iplists.firehol.org/?ipset=iblocklist_org_xfire)|XFire IPs.|ipv4 hash:net|3 subnets, 3328 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ppqqnyihmcrryraaqsjo&fileformat=p2p&archiveformat=gz)
[iblocklist_pedophiles](http://iplists.firehol.org/?ipset=iblocklist_pedophiles)|IP ranges of people who we have found to be sharing child pornography in the p2p community.|ipv4 hash:net|29188 subnets, 847889 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=dufcxgnbjsdwmwctgfuj&fileformat=p2p&archiveformat=gz)
[iblocklist_proxies](http://iplists.firehol.org/?ipset=iblocklist_proxies)|Open Proxies IPs list (without TOR)|ipv4 hash:ip|672 unique IPs|updated every 12 hours
[iblocklist_rangetest](http://iplists.firehol.org/?ipset=iblocklist_rangetest)|Suspicious IPs that are under investigation.|ipv4 hash:net|576 subnets, 4280758 unique IPs|updated every 12 hours
[iblocklist_spamhaus_drop](http://iplists.firehol.org/?ipset=iblocklist_spamhaus_drop)|Spamhaus.org DROP (Don't Route Or Peer) list.|ipv4 hash:net|753 subnets, 18778624 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zbdlwrqkabxbcppvrnos&fileformat=p2p&archiveformat=gz)
[iblocklist_spider](http://iplists.firehol.org/?ipset=iblocklist_spider)|IP list intended to be used by webmasters to block hostile spiders from their web sites.|ipv4 hash:net|773 subnets, 846788 unique IPs|updated every 12 hours
[iblocklist_spyware](http://iplists.firehol.org/?ipset=iblocklist_spyware)|Known malicious SPYWARE and ADWARE IP Address ranges. It is compiled from various sources, including other available spyware blacklists, HOSTS files, from research found at many of the top anti-spyware forums, logs of spyware victims, etc.|ipv4 hash:net|3357 subnets, 339303 unique IPs|updated every 12 hours
[iblocklist_webexploit](http://iplists.firehol.org/?ipset=iblocklist_webexploit)|Web server hack and exploit attempts. IP addresses related to current web server hack and exploit attempts that have been logged or can be found in and cross referenced with other related IP databases. Malicious and other non search engine bots will also be listed here, along with anything found that can have a negative impact on a website or webserver such as proxies being used for negative SEO hijacks, unauthorised site mirroring, harvesting, scraping, snooping and data mining / spy bot / security & copyright enforcement companies that target and continuosly scan webservers.|ipv4 hash:ip|15382 unique IPs|updated every 12 hours
[iblocklist_yoyo_adservers](http://iplists.firehol.org/?ipset=iblocklist_yoyo_adservers)|pgl.yoyo.org ad servers|ipv4 hash:net|9698 subnets, 11318 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zhogegszwduurnvsyhdf&fileformat=p2p&archiveformat=gz)
[ip2location_country](https://github.com/ktsaou/blocklist-ipsets/tree/master/ip2location_country)|[IP2Location.com](http://lite.ip2location.com/database-ip-country) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_eh](http://iplists.firehol.org/?ipset=ip2location_country_eh)|Western Sahara (EH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sh](http://iplists.firehol.org/?ipset=ip2location_country_sh)|Saint Helena (SH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2proxy_px1lite](http://iplists.firehol.org/?ipset=ip2proxy_px1lite)|[IP2Location.com](https://lite.ip2location.com/database/px1-ip-country) IP2Proxy LITE IP-COUNTRY Database contains IP addresses which are used as public proxies. The LITE edition is a free version of database that is limited to public proxies IP address.|ipv4 hash:net|833578 subnets, 863660 unique IPs|updated every 1 day
[ipblacklistcloud_recent](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|32 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_1d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_1d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|85 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_30d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_30d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|788 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_7d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_7d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|292 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_top](http://iplists.firehol.org/?ipset=ipblacklistcloud_top)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the top IP addresses that have been blacklisted by many websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|232 unique IPs|updated every 1 day from [this link](http://www.ip-finder.me/ip-full-list/)
[ipdeny_country](https://github.com/firehol/blocklist-ipsets/tree/master/ipdeny_country)|[IPDeny.com](http://www.ipdeny.com/) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[iw_spamlist](http://iplists.firehol.org/?ipset=iw_spamlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending spam, in the last 3 days|ipv4 hash:ip|943 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/spamlist)
[iw_wormlist](http://iplists.firehol.org/?ipset=iw_wormlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending emails with viruses or worms, in the last 3 days|ipv4 hash:ip|0 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/wormlist)
[lashback_ubl](http://iplists.firehol.org/?ipset=lashback_ubl)|[The LashBack UBL](http://blacklist.lashback.com/) The Unsubscribe Blacklist (UBL) is a real-time blacklist of IP addresses which are sending email to names harvested from suppression files (this is a big list, more than 500.000 IPs)|ipv4 hash:ip|378001 unique IPs|updated every 1 day from [this link](http://www.unsubscore.com/blacklist.txt)
[malc0de](http://iplists.firehol.org/?ipset=malc0de)|[Malc0de.com](http://malc0de.com) malicious IPs of the last 30 days|ipv4 hash:ip|76 unique IPs|updated every 1 day from [this link](http://malc0de.com/bl/IP_Blacklist.txt)
[malwaredomainlist](http://iplists.firehol.org/?ipset=malwaredomainlist)|[malwaredomainlist.com](http://www.malwaredomainlist.com) list of malware active ip addresses|ipv4 hash:ip|997 unique IPs|updated every 12 hours from [this link](http://www.malwaredomainlist.com/hostslist/ip.txt)
[maxmind_proxy_fraud](http://iplists.firehol.org/?ipset=maxmind_proxy_fraud)|[MaxMind.com](https://www.maxmind.com/en/high-risk-ip-sample-list) sample list of high-risk IP addresses.|ipv4 hash:ip|670 unique IPs|updated every 4 hours from [this link](https://www.maxmind.com/en/high-risk-ip-sample-list)
[myip](http://iplists.firehol.org/?ipset=myip)|[myip.ms](http://www.myip.ms/info/about) IPs identified as web bots in the last 10 days, using several sites that require human action|ipv4 hash:ip|1233 unique IPs|updated every 1 day from [this link](http://www.myip.ms/files/blacklist/csf/latest_blacklist.txt)
[nixspam](http://iplists.firehol.org/?ipset=nixspam)|[NiX Spam](http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html) IP addresses that sent spam in the last hour - automatically generated entries without distinguishing open proxies from relays, dialup gateways, and so on. All IPs are removed after 12 hours if there is no spam from there.|ipv4 hash:ip|11380 unique IPs|updated every 15 mins from [this link](http://www.dnsbl.manitu.net/download/nixspam-ip.dump.gz)
[normshield_all_attack](http://iplists.firehol.org/?ipset=normshield_all_attack)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category attack with severity all|ipv4 hash:ip|3982 unique IPs|updated every 12 hours
[normshield_all_bruteforce](http://iplists.firehol.org/?ipset=normshield_all_bruteforce)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category bruteforce with severity all|ipv4 hash:ip|4803 unique IPs|updated every 12 hours
[normshield_all_ddosbot](http://iplists.firehol.org/?ipset=normshield_all_ddosbot)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category ddosbot with severity all|ipv4 hash:ip|12 unique IPs|updated every 12 hours
[normshield_all_dnsscan](http://iplists.firehol.org/?ipset=normshield_all_dnsscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category dnsscan with severity all|ipv4 hash:ip|12 unique IPs|updated every 12 hours
[normshield_all_spam](http://iplists.firehol.org/?ipset=normshield_all_spam)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category spam with severity all|ipv4 hash:ip|69 unique IPs|updated every 12 hours
[normshield_all_suspicious](http://iplists.firehol.org/?ipset=normshield_all_suspicious)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category suspicious with severity all|ipv4 hash:ip|152 unique IPs|updated every 12 hours
[normshield_all_wannacry](http://iplists.firehol.org/?ipset=normshield_all_wannacry)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wannacry with severity all|ipv4 hash:ip|8087 unique IPs|updated every 12 hours
[normshield_all_webscan](http://iplists.firehol.org/?ipset=normshield_all_webscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category webscan with severity all|ipv4 hash:ip|419 unique IPs|updated every 12 hours
[normshield_all_wormscan](http://iplists.firehol.org/?ipset=normshield_all_wormscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wormscan with severity all|ipv4 hash:ip|173 unique IPs|updated every 12 hours
[normshield_high_attack](http://iplists.firehol.org/?ipset=normshield_high_attack)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category attack with severity high|ipv4 hash:ip|3973 unique IPs|updated every 12 hours
[normshield_high_bruteforce](http://iplists.firehol.org/?ipset=normshield_high_bruteforce)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category bruteforce with severity high|ipv4 hash:ip|4379 unique IPs|updated every 12 hours
[normshield_high_ddosbot](http://iplists.firehol.org/?ipset=normshield_high_ddosbot)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category ddosbot with severity high|ipv4 hash:ip|12 unique IPs|updated every 12 hours
[normshield_high_dnsscan](http://iplists.firehol.org/?ipset=normshield_high_dnsscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category dnsscan with severity high|ipv4 hash:ip|12 unique IPs|updated every 12 hours
[normshield_high_spam](http://iplists.firehol.org/?ipset=normshield_high_spam)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category spam with severity high|ipv4 hash:ip|69 unique IPs|updated every 12 hours
[normshield_high_suspicious](http://iplists.firehol.org/?ipset=normshield_high_suspicious)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category suspicious with severity high|ipv4 hash:ip|152 unique IPs|updated every 12 hours
[normshield_high_wannacry](http://iplists.firehol.org/?ipset=normshield_high_wannacry)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wannacry with severity high|ipv4 hash:ip|8023 unique IPs|updated every 12 hours
[normshield_high_webscan](http://iplists.firehol.org/?ipset=normshield_high_webscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category webscan with severity high|ipv4 hash:ip|379 unique IPs|updated every 12 hours
[normshield_high_wormscan](http://iplists.firehol.org/?ipset=normshield_high_wormscan)|[NormShield.com](https://services.normshield.com/threatfeed) IPs in category wormscan with severity high|ipv4 hash:ip|173 unique IPs|updated every 12 hours
[nt_malware_dns](http://iplists.firehol.org/?ipset=nt_malware_dns)|[No Think](http://www.nothink.org/) Malware DNS (the original list includes hostnames and domains, which are ignored)|ipv4 hash:ip|235 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_dns.txt)
[nt_malware_http](http://iplists.firehol.org/?ipset=nt_malware_http)|[No Think](http://www.nothink.org/) Malware HTTP|ipv4 hash:ip|69 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_http.txt)
[nt_malware_irc](http://iplists.firehol.org/?ipset=nt_malware_irc)|[No Think](http://www.nothink.org/) Malware IRC|ipv4 hash:ip|42 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_irc.txt)
[nt_ssh_7d](http://iplists.firehol.org/?ipset=nt_ssh_7d)|[NoThink](http://www.nothink.org/) Last 7 days SSH attacks|ipv4 hash:ip|164 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_ssh_week.txt)
[nullsecure](http://iplists.firehol.org/?ipset=nullsecure)|[nullsecure.org](http://nullsecure.org/) This is a free threat feed provided for use in any acceptable manner. This feed was aggregated using the [Tango Honeypot Intelligence Splunk App](https://github.com/aplura/Tango) by Brian Warehime, a Senior Security Analyst at Defense Point Security.|ipv4 hash:ip|29439 unique IPs|updated every 8 hours from [this link](http://nullsecure.org/threatfeed/master.txt)
[packetmail](http://iplists.firehol.org/?ipset=packetmail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 206.82.85.196/30 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|3986 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep.txt)
[packetmail_emerging_ips](http://iplists.firehol.org/?ipset=packetmail_emerging_ips)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected as potentially of interest based on the number of unique users of the packetmail IP Reputation system. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|26 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_emerging_ips.txt)
[packetmail_mail](http://iplists.firehol.org/?ipset=packetmail_mail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing behavior not in compliance with the requirements this system enforces for email acceptance. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|73 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_mail.txt)
[packetmail_ramnode](http://iplists.firehol.org/?ipset=packetmail_ramnode)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 81.4.103.251 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|2502 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_ramnode.txt)
php_bad|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) bad web hosts (this list is composed using an RSS feed)|ipv4 hash:ip|disabled|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=b&rss=1)
[php_commenters](http://iplists.firehol.org/?ipset=php_commenters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_1d](http://iplists.firehol.org/?ipset=php_commenters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|95 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_30d](http://iplists.firehol.org/?ipset=php_commenters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|1202 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_7d](http://iplists.firehol.org/?ipset=php_commenters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|341 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_dictionary](http://iplists.firehol.org/?ipset=php_dictionary)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_1d](http://iplists.firehol.org/?ipset=php_dictionary_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_30d](http://iplists.firehol.org/?ipset=php_dictionary_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|1181 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_7d](http://iplists.firehol.org/?ipset=php_dictionary_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|327 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_harvesters](http://iplists.firehol.org/?ipset=php_harvesters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_1d](http://iplists.firehol.org/?ipset=php_harvesters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|53 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_30d](http://iplists.firehol.org/?ipset=php_harvesters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|505 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_7d](http://iplists.firehol.org/?ipset=php_harvesters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|168 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_spammers](http://iplists.firehol.org/?ipset=php_spammers)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_1d](http://iplists.firehol.org/?ipset=php_spammers_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|99 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_30d](http://iplists.firehol.org/?ipset=php_spammers_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|1204 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_7d](http://iplists.firehol.org/?ipset=php_spammers_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|348 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[proxylists](http://iplists.firehol.org/?ipset=proxylists)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|5961 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_1d](http://iplists.firehol.org/?ipset=proxylists_1d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|9014 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_30d](http://iplists.firehol.org/?ipset=proxylists_30d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|15331 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_7d](http://iplists.firehol.org/?ipset=proxylists_7d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|12323 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxyrss](http://iplists.firehol.org/?ipset=proxyrss)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|2574 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_1d](http://iplists.firehol.org/?ipset=proxyrss_1d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|4754 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_30d](http://iplists.firehol.org/?ipset=proxyrss_30d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|9472 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_7d](http://iplists.firehol.org/?ipset=proxyrss_7d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|7091 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyspy_1d](http://iplists.firehol.org/?ipset=proxyspy_1d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|300 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_30d](http://iplists.firehol.org/?ipset=proxyspy_30d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|6720 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_7d](http://iplists.firehol.org/?ipset=proxyspy_7d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|2828 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxz](http://iplists.firehol.org/?ipset=proxz)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|27 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_1d](http://iplists.firehol.org/?ipset=proxz_1d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|207 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_30d](http://iplists.firehol.org/?ipset=proxz_30d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|2525 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_7d](http://iplists.firehol.org/?ipset=proxz_7d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|882 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[pushing_inertia_blocklist](http://iplists.firehol.org/?ipset=pushing_inertia_blocklist)|[Pushing Inertia](https://github.com/pushinginertia/ip-blacklist) IPs of hosting providers that are known to host various bots, spiders, scrapers, etc. to block access from these providers to web servers.|ipv4 hash:net|879 subnets, 34512268 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/pushinginertia/ip-blacklist/master/ip_blacklist.conf)
[ransomware_cryptowall_ps](http://iplists.firehol.org/?ipset=ransomware_cryptowall_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is CW_PS_IPBL: CryptoWall Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|0 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/CW_PS_IPBL.txt)
[ransomware_feed](http://iplists.firehol.org/?ipset=ransomware_feed)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. The IPs in this list have been extracted from the tracker data feed.|ipv4 hash:ip|4724 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_locky_c2](http://iplists.firehol.org/?ipset=ransomware_locky_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is LY_C2_IPBL: Locky Ransomware C2 URL blocklist.|ipv4 hash:ip|331 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_C2_IPBL.txt)
[ransomware_locky_ps](http://iplists.firehol.org/?ipset=ransomware_locky_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is LY_PS_IPBL: Locky Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_PS_IPBL.txt)
[ransomware_online](http://iplists.firehol.org/?ipset=ransomware_online)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. The IPs in this list have been extracted from the tracker data feed, filtering only online IPs.|ipv4 hash:ip|24 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_rw](http://iplists.firehol.org/?ipset=ransomware_rw)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list includes TC_PS_IPBL, LY_C2_IPBL, TL_C2_IPBL, TL_PS_IPBL and it is the recommended blocklist. It might not catch everything, but the false positive rate should be low. However, false positives are possible, especially with regards to RW_IPBL. IP addresses associated with Ransomware Payment Sites (*_PS_IPBL) or Locky botnet C&Cs (LY_C2_IPBL) stay listed on RW_IPBL for a time of 30 days after the last appearance. This means that an IP address stays listed on RW_IPBL even after the threat has been eliminated (e.g. the VPS / server has been suspended by the hosting provider) for another 30 days.|ipv4 hash:ip|341 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt)
[ransomware_teslacrypt_ps](http://iplists.firehol.org/?ipset=ransomware_teslacrypt_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TC_PS_IPBL: TeslaCrypt Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TC_PS_IPBL.txt)
[ransomware_torrentlocker_c2](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TL_C2_IPBL: TorrentLocker Ransomware C2 IP blocklist.|ipv4 hash:ip|15 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_C2_IPBL.txt)
[ransomware_torrentlocker_ps](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreants to commit fraud. This list is TL_PS_IPBL: TorrentLocker Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|2 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_PS_IPBL.txt)
[ri_connect_proxies](http://iplists.firehol.org/?ipset=ri_connect_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_1d](http://iplists.firehol.org/?ipset=ri_connect_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_30d](http://iplists.firehol.org/?ipset=ri_connect_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_7d](http://iplists.firehol.org/?ipset=ri_connect_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_web_proxies](http://iplists.firehol.org/?ipset=ri_web_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_1d](http://iplists.firehol.org/?ipset=ri_web_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_30d](http://iplists.firehol.org/?ipset=ri_web_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_7d](http://iplists.firehol.org/?ipset=ri_web_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|139 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[sblam](http://iplists.firehol.org/?ipset=sblam)|[sblam.com](http://sblam.com) IPs used by web form spammers, during the last month|ipv4 hash:ip|10896 unique IPs|updated every 1 day from [this link](http://sblam.com/blacklist.txt)
[shunlist](http://iplists.firehol.org/?ipset=shunlist)|[AutoShun.org](http://autoshun.org/) IPs identified as hostile by correlating logs from distributed snort installations running the autoshun plugin|ipv4 hash:ip|500 unique IPs|updated every 4 hours
[snort_ipfilter](http://iplists.firehol.org/?ipset=snort_ipfilter)|[labs.snort.org](https://labs.snort.org/) supplied IP blacklist (this list seems to be updated frequently, but we found no information about it)|ipv4 hash:ip|1610 unique IPs|updated every 12 hours from [this link](http://labs.snort.org/feeds/ip-filter.blf)
[socks_proxy](http://iplists.firehol.org/?ipset=socks_proxy)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|80 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_1d](http://iplists.firehol.org/?ipset=socks_proxy_1d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|6514 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_30d](http://iplists.firehol.org/?ipset=socks_proxy_30d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|29243 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_7d](http://iplists.firehol.org/?ipset=socks_proxy_7d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|18840 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[sorbs_anonymizers](http://iplists.firehol.org/?ipset=sorbs_anonymizers)|[Sorbs.net](https://www.sorbs.net/) List of open HTTP and SOCKS proxies.|ipv4 hash:net|597391 subnets, 610263 unique IPs|updated every 1 min
sorbs_block|[Sorbs.net](https://www.sorbs.net/) List of hosts demanding that they never be tested by SORBS.|ipv4 hash:net|disabled|
[sorbs_dul](http://iplists.firehol.org/?ipset=sorbs_dul)|[Sorbs.net](https://www.sorbs.net/) Dynamic IP Addresses.|ipv4 hash:net|607718 subnets, 375474210 unique IPs|updated every 1 min
[sorbs_escalations](http://iplists.firehol.org/?ipset=sorbs_escalations)|[Sorbs.net](https://www.sorbs.net/) Netblocks of spam supporting service providers, including those who provide websites, DNS or drop boxes for a spammer. Spam supporters are added on a 'third strike and you are out' basis, where the third spam will cause the supporter to be added to the list.|ipv4 hash:net|8 subnets, 2304 unique IPs|updated every 1 min
[sorbs_new_spam](http://iplists.firehol.org/?ipset=sorbs_new_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 48 hours|ipv4 hash:net|33977 subnets, 35967 unique IPs|updated every 1 min
[sorbs_noserver](http://iplists.firehol.org/?ipset=sorbs_noserver)|[Sorbs.net](https://www.sorbs.net/) IP addresses and netblocks of where system administrators and ISPs owning the network have indicated that servers should not be present.|ipv4 hash:net|15066 subnets, 22951270 unique IPs|updated every 1 min
[sorbs_recent_spam](http://iplists.firehol.org/?ipset=sorbs_recent_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 28 days (includes sorbs_new_spam)|ipv4 hash:net|522240 subnets, 555438 unique IPs|updated every 1 min
[sorbs_smtp](http://iplists.firehol.org/?ipset=sorbs_smtp)|[Sorbs.net](https://www.sorbs.net/) List of SMTP Open Relays.|ipv4 hash:net|1968 subnets, 1976 unique IPs|updated every 1 min
[sorbs_web](http://iplists.firehol.org/?ipset=sorbs_web)|[Sorbs.net](https://www.sorbs.net/) List of IPs which have spammer abusable vulnerabilities (e.g. FormMail scripts)|ipv4 hash:net|5895259 subnets, 6375029 unique IPs|updated every 1 min
[sorbs_zombie](http://iplists.firehol.org/?ipset=sorbs_zombie)|[Sorbs.net](https://www.sorbs.net/) List of networks hijacked from their original owners, some of which have already used for spamming.|ipv4 hash:net|78 subnets, 1903876 unique IPs|updated every 1 min
[spamhaus_drop](http://iplists.firehol.org/?ipset=spamhaus_drop)|[Spamhaus.org](http://www.spamhaus.org) DROP list (according to their site this list should be dropped at tier-1 ISPs globally)|ipv4 hash:net|753 subnets, 18778624 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/drop.txt)
[spamhaus_edrop](http://iplists.firehol.org/?ipset=spamhaus_edrop)|[Spamhaus.org](http://www.spamhaus.org) EDROP (extended matches that should be used with DROP)|ipv4 hash:net|102 subnets, 969728 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/edrop.txt)
[sslbl](http://iplists.firehol.org/?ipset=sslbl)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) bad SSL traffic related to malware or botnet activities|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist.csv)
[sslbl_aggressive](http://iplists.firehol.org/?ipset=sslbl_aggressive)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) The aggressive version of the SSL IP Blacklist contains all IPs that SSLBL ever detected being associated with a malicious SSL certificate. Since IP addresses can be reused (e.g. when the customer changes), this blacklist may cause false positives. Hence I highly recommend you to use the standard version instead of the aggressive one.|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.csv)
[sslproxies](http://iplists.firehol.org/?ipset=sslproxies)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|100 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_1d](http://iplists.firehol.org/?ipset=sslproxies_1d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|1402 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_30d](http://iplists.firehol.org/?ipset=sslproxies_30d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|12599 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_7d](http://iplists.firehol.org/?ipset=sslproxies_7d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|6392 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[stopforumspam](http://iplists.firehol.org/?ipset=stopforumspam)|[StopForumSpam.com](http://www.stopforumspam.com) Banned IPs used by forum spammers|ipv4 hash:ip|188494 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/bannedips.zip)
[stopforumspam_180d](http://iplists.firehol.org/?ipset=stopforumspam_180d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 180 days)|ipv4 hash:ip|324003 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_180.zip)
[stopforumspam_1d](http://iplists.firehol.org/?ipset=stopforumspam_1d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers in the last 24 hours|ipv4 hash:ip|7445 unique IPs|updated every 1 hour from [this link](http://www.stopforumspam.com/downloads/listed_ip_1.zip)
[stopforumspam_30d](http://iplists.firehol.org/?ipset=stopforumspam_30d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 30 days)|ipv4 hash:ip|71041 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_30.zip)
[stopforumspam_365d](http://iplists.firehol.org/?ipset=stopforumspam_365d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 365 days)|ipv4 hash:ip|433570 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_365.zip)
[stopforumspam_7d](http://iplists.firehol.org/?ipset=stopforumspam_7d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 7 days)|ipv4 hash:ip|25423 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_7.zip)
[stopforumspam_90d](http://iplists.firehol.org/?ipset=stopforumspam_90d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 90 days)|ipv4 hash:ip|190689 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_90.zip)
[stopforumspam_toxic](http://iplists.firehol.org/?ipset=stopforumspam_toxic)|[StopForumSpam.com](http://www.stopforumspam.com) Networks that have large amounts of spambots and are flagged as toxic. Toxic IP ranges are infrequently changed.|ipv4 hash:net|86 subnets, 521315 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/toxic_ip_cidr.txt)
[taichung](http://iplists.firehol.org/?ipset=taichung)|[Taichung Education Center](https://www.tc.edu.tw/net/netflow/lkout/recent/30) Blocked IP Addresses (attacks and bots).|ipv4 hash:ip|18949 unique IPs|updated every 1 day from [this link](https://www.tc.edu.tw/net/netflow/lkout/recent/30)
[talosintel_ipfilter](http://iplists.firehol.org/?ipset=talosintel_ipfilter)|[TalosIntel.com](http://talosintel.com/additional-resources/) List of known malicious network threats|ipv4 hash:ip|1607 unique IPs|updated every 15 mins from [this link](http://talosintel.com/feeds/ip-filter.blf)
[threatcrowd](http://iplists.firehol.org/?ipset=threatcrowd)|[Crowdsourced IP feed from ThreatCrowd](http://threatcrowd.blogspot.gr/2016/02/crowdsourced-feeds-from-threatcrowd.html). These feeds are not a substitute for the scale of auto-extracted command and control domains or the quality of some commercially provided feeds. But crowd-sourcing does go some way towards the quick sharing of threat intelligence between the community.|ipv4 hash:ip|977 unique IPs|updated every 1 hour from [this link](https://www.threatcrowd.org/feeds/ips.txt)
[tor_exits](http://iplists.firehol.org/?ipset=tor_exits)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|953 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_1d](http://iplists.firehol.org/?ipset=tor_exits_1d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|991 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_30d](http://iplists.firehol.org/?ipset=tor_exits_30d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1897 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_7d](http://iplists.firehol.org/?ipset=tor_exits_7d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1233 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[turris_greylist](http://iplists.firehol.org/?ipset=turris_greylist)|[Turris Greylist](https://www.turris.cz/en/greylist) IPs that are blocked on the firewalls of Turris routers. The data is processed and clasified every week and behaviour of IP addresses that accessed a larger number of Turris routers is evaluated. The result is a list of addresses that have tried to obtain information about services on the router or tried to gain access to them. We do not recommend to use these data as a list of addresses that should be blocked but it can be used for example in analysis of the traffic in other networks.|ipv4 hash:ip|16435 unique IPs|updated every 7 days from [this link](https://www.turris.cz/greylist-data/greylist-latest.csv)
[urandomusto_dns](http://iplists.firehol.org/?ipset=urandomusto_dns)|IP Feed about dns, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|67 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=dns&out=txt&submit=go)
[urandomusto_ftp](http://iplists.firehol.org/?ipset=urandomusto_ftp)|IP Feed about ftp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|152 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ftp&out=txt&submit=go)
[urandomusto_http](http://iplists.firehol.org/?ipset=urandomusto_http)|IP Feed about http, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|289 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=http&out=txt&submit=go)
[urandomusto_mailer](http://iplists.firehol.org/?ipset=urandomusto_mailer)|IP Feed about mailer, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|259 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=mailer&out=txt&submit=go)
[urandomusto_malware](http://iplists.firehol.org/?ipset=urandomusto_malware)|IP Feed about malware, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|1 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=malware&out=txt&submit=go)
[urandomusto_ntp](http://iplists.firehol.org/?ipset=urandomusto_ntp)|IP Feed about ntp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|72 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ntp&out=txt&submit=go)
[urandomusto_rdp](http://iplists.firehol.org/?ipset=urandomusto_rdp)|IP Feed about rdp, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|133 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=rdp&out=txt&submit=go)
[urandomusto_smb](http://iplists.firehol.org/?ipset=urandomusto_smb)|IP Feed about smb, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|45 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=smb&out=txt&submit=go)
[urandomusto_spam](http://iplists.firehol.org/?ipset=urandomusto_spam)|IP Feed about spam, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|4 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=spam&out=txt&submit=go)
[urandomusto_ssh](http://iplists.firehol.org/?ipset=urandomusto_ssh)|IP Feed about ssh, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|126 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=ssh&out=txt&submit=go)
[urandomusto_telnet](http://iplists.firehol.org/?ipset=urandomusto_telnet)|IP Feed about telnet, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|299 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=telnet&out=txt&submit=go)
[urandomusto_unspecified](http://iplists.firehol.org/?ipset=urandomusto_unspecified)|IP Feed about unspecified, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|178 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=unspecified&out=txt&submit=go)
[urandomusto_vnc](http://iplists.firehol.org/?ipset=urandomusto_vnc)|IP Feed about vnc, crawled from several sources, including several twitter accounts.|ipv4 hash:ip|27 unique IPs|updated every 1 hour from [this link](http://urandom.us.to/report.php?ip=&info=&tag=vnc&out=txt&submit=go)
[urlvir](http://iplists.firehol.org/?ipset=urlvir)|[URLVir.com](http://www.urlvir.com/) Active Malicious IP Addresses Hosting Malware. URLVir is an online security service developed by NoVirusThanks Company Srl that automatically monitors changes of malicious URLs (executable files).|ipv4 hash:ip|1115 unique IPs|updated every 1 day from [this link](http://www.urlvir.com/export-ip-addresses/)
[uscert_hidden_cobra](http://iplists.firehol.org/?ipset=uscert_hidden_cobra)|Since 2009, HIDDEN COBRA actors have leveraged their capabilities to target and compromise a range of victims; some intrusions have resulted in the exfiltration of data while others have been disruptive in nature. Commercial reporting has referred to this activity as Lazarus Group and Guardians of Peace. DHS and FBI assess that HIDDEN COBRA actors will continue to use cyber operations to advance their governments military and strategic objectives. Tools and capabilities used by HIDDEN COBRA actors include DDoS botnets, keyloggers, remote access tools (RATs), and wiper malware. Variants of malware and tools used by HIDDEN COBRA actors include Destover, Wild Positron/Duuzer and Hangman.|ipv4 hash:ip|627 unique IPs|updated every 1 day from [this link](https://www.us-cert.gov/sites/default/files/publications/TA-17-164A_csv.csv)
[voipbl](http://iplists.firehol.org/?ipset=voipbl)|[VoIPBL.org](http://www.voipbl.org/) a distributed VoIP blacklist that is aimed to protects against VoIP Fraud and minimizing abuse for network that have publicly accessible PBX's. Several algorithms, external sources and manual confirmation are used before they categorize something as an attack and determine the threat level.|ipv4 hash:net|71556 subnets, 76972 unique IPs|updated every 4 hours from [this link](http://www.voipbl.org/update/)
[vxvault](http://iplists.firehol.org/?ipset=vxvault)|[VxVault](http://vxvault.net) The latest 100 additions of VxVault.|ipv4 hash:ip|48 unique IPs|updated every 12 hours from [this link](http://vxvault.net/ViriList.php?s=0&m=100)
[xforce_bccs](http://iplists.firehol.org/?ipset=xforce_bccs)|[IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/) Botnet Command and Control Servers|ipv4 hash:ip|401 unique IPs|updated every 1 day from [this link](https://api.xforce.ibmcloud.com/taxii)
[xroxy](http://iplists.firehol.org/?ipset=xroxy)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|65 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_1d](http://iplists.firehol.org/?ipset=xroxy_1d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|103 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_30d](http://iplists.firehol.org/?ipset=xroxy_30d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|346 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_7d](http://iplists.firehol.org/?ipset=xroxy_7d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|181 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[yoyo_adservers](http://iplists.firehol.org/?ipset=yoyo_adservers)|[Yoyo.org](http://pgl.yoyo.org/adservers/) IPs of ad servers|ipv4 hash:ip|11318 unique IPs|updated every 12 hours from [this link](http://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext)
[zeus](http://iplists.firehol.org/?ipset=zeus)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) standard, contains the same data as the ZeuS IP blocklist (zeus_badips) but with the slight difference that it doesn't exclude hijacked websites (level 2) and free web hosting providers (level 3). This means that this blocklist contains all IPv4 addresses associated with ZeuS C&Cs which are currently being tracked by ZeuS Tracker. Hence this blocklist will likely cause some false positives.|ipv4 hash:ip|113 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist)
[zeus_badips](http://iplists.firehol.org/?ipset=zeus_badips)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) badips includes IPv4 addresses that are used by the ZeuS trojan. It is the recommened blocklist if you want to block only ZeuS IPs. It excludes IP addresses that ZeuS Tracker believes to be hijacked (level 2) or belong to a free web hosting provider (level 3). Hence the false postive rate should be much lower compared to the standard ZeuS IP blocklist.|ipv4 hash:ip|108 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=badips)

53900
alienvault_reputation.ipset Normal file

File diff suppressed because it is too large Load Diff

30
asprox_c2.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# asprox_c2
#
# ipv4 hash:ip ipset
#
# [h3x.eu] (http://atrack.h3x.eu/) ASPROX Tracker - Asprox
# C&C Sites
#
# Maintainer : h3x.eu
# Maintainer URL : http://atrack.h3x.eu/
# List source URL : http://atrack.h3x.eu/c2
# Source File Date: Mon Nov 6 03:04:11 UTC 2017
#
# Category : malware
# Version : 1
#
# This File Date : Sun Jun 3 05:36:21 UTC 2018
# Update Frequency: 1 day
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=asprox_c2
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

143
bambenek_banjori.ipset Normal file
View File

@ -0,0 +1,143 @@
#
# bambenek_banjori
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of banjori C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt
# Source File Date: Sun Apr 21 10:05:59 UTC 2019
#
# Category : malware
# Version : 7259
#
# This File Date : Sun Apr 21 10:12:12 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 112 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_banjori
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.79.79.209
23.89.20.107
23.89.102.179
23.105.99.15
23.107.124.53
23.236.62.147
27.124.28.149
31.11.33.228
35.169.58.188
43.230.142.125
43.241.196.105
47.91.170.222
52.58.78.16
54.72.11.253
54.208.77.124
62.4.17.220
64.95.103.181
64.99.64.32
67.229.184.183
74.208.236.219
74.220.199.8
74.220.207.152
78.24.9.52
78.46.156.194
81.169.145.88
81.169.145.159
81.169.145.160
81.169.145.161
83.137.194.79
85.158.203.201
89.35.39.65
89.188.24.70
91.195.240.117
96.30.52.60
103.70.226.182
103.71.236.189
104.18.56.87
104.18.57.87
104.171.24.25
104.171.24.26
104.192.84.85
106.187.51.202
107.158.31.120
107.175.239.2
107.180.20.91
108.59.12.98
108.187.67.6
109.70.4.246
109.71.51.55
112.78.125.29
112.121.187.246
119.188.157.23
121.40.153.149
122.10.99.22
123.1.194.96
123.254.108.81
130.211.40.170
133.242.195.32
134.73.61.187
134.73.227.39
149.255.58.42
150.95.255.38
154.213.207.188
154.219.152.60
154.221.45.196
156.233.139.8
158.69.254.60
160.153.89.67
162.210.102.66
162.255.119.180
163.44.191.38
173.239.23.228
178.22.59.66
184.168.131.241
184.168.221.96
185.106.96.203
186.202.153.222
192.169.243.26
192.190.87.140
193.222.100.37
196.22.132.17
198.8.63.179
198.23.48.104
198.38.82.115
198.38.83.24
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
199.58.179.10
199.168.185.2
200.63.47.3
202.124.241.178
202.181.97.76
202.254.234.152
203.156.192.80
204.11.56.48
208.73.210.202
208.73.210.217
208.73.211.165
208.73.211.177
208.109.80.14
209.99.40.222
209.99.40.223
212.12.54.87
213.186.33.5
216.40.47.17
216.120.247.66
217.26.53.16
217.26.63.20
217.70.184.38
219.118.71.121

31
bambenek_bebloh.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_bebloh
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of bebloh C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt
# Source File Date: Thu Jun 7 00:02:37 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:33 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_bebloh
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

500
bambenek_c2.ipset Normal file
View File

@ -0,0 +1,500 @@
#
# bambenek_c2
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) master feed of
# known, active and non-sinkholed C&Cs IP addresses
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt
# Source File Date: Sun Apr 21 10:11:32 UTC 2019
#
# Category : malware
# Version : 7615
#
# This File Date : Sun Apr 21 10:16:34 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 469 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_c2
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
0.0.0.64
5.9.80.176
5.79.79.209
5.79.79.211
5.157.84.170
14.128.132.21
18.213.250.117
18.215.128.143
23.20.239.12
23.23.86.44
23.80.37.57
23.89.20.107
23.89.102.68
23.89.102.179
23.105.99.15
23.107.124.53
23.236.62.147
27.124.28.149
27.126.188.205
31.11.33.228
31.170.160.61
31.186.169.41
34.197.76.50
34.225.182.233
35.169.58.188
35.170.58.11
35.184.193.177
35.187.36.248
35.224.11.86
35.225.160.245
37.9.175.13
40.255.0.62
43.230.142.125
43.241.196.105
45.16.128.217
45.33.2.79
45.33.23.183
45.56.79.23
45.79.19.196
45.194.132.201
45.194.179.185
45.227.252.56
46.16.61.114
46.28.105.107
46.30.213.62
46.30.215.126
46.30.215.194
46.151.97.7
46.165.220.141
46.165.220.142
46.165.220.143
46.165.220.144
46.165.220.145
46.165.220.146
46.165.220.147
46.165.220.148
46.165.220.149
46.165.220.150
46.165.220.151
46.165.220.152
46.165.220.153
46.165.220.154
46.165.220.155
46.165.221.136
46.165.221.144
46.165.221.154
46.165.229.164
46.165.229.165
46.165.229.166
46.165.229.167
46.165.254.193
46.165.254.194
46.165.254.195
46.165.254.196
46.165.254.197
46.165.254.198
46.165.254.199
46.165.254.200
46.165.254.201
46.165.254.202
46.165.254.203
46.165.254.204
46.165.254.205
46.165.254.206
46.165.254.207
46.165.254.208
46.165.254.209
46.165.254.210
46.165.254.211
46.165.254.212
46.165.254.213
46.165.254.214
46.249.43.105
47.90.55.204
47.91.170.222
50.3.238.206
52.0.217.44
52.4.209.250
52.23.117.159
52.30.231.158
52.58.78.16
54.72.11.253
54.208.77.124
62.4.17.220
62.97.115.37
62.129.200.14
62.149.128.72
62.149.128.74
62.149.128.151
62.149.128.154
62.149.128.157
62.149.128.160
62.149.128.163
62.149.128.166
62.153.122.95
62.197.128.123
62.233.121.61
64.21.149.167
64.95.103.181
64.98.145.30
64.99.64.32
64.127.116.113
64.135.184.86
64.183.175.116
65.7.101.214
65.39.60.115
65.61.216.12
65.143.188.50
65.191.72.147
65.239.199.183
66.29.58.119
66.31.65.240
66.31.215.115
66.47.44.209
66.55.157.183
66.119.92.211
67.59.157.51
67.119.30.114
67.159.114.214
67.215.92.114
67.229.184.183
68.55.223.183
68.151.122.19
68.159.11.53
68.175.161.22
69.15.209.177
69.31.197.20
69.41.162.77
69.71.168.215
69.151.245.144
69.162.80.52
69.162.80.56
69.195.124.249
70.23.114.87
70.111.107.215
70.127.16.209
70.207.245.86
70.247.168.21
71.15.217.83
71.31.135.16
71.71.77.87
71.183.249.247
71.191.66.116
71.215.128.52
71.239.121.17
74.119.239.234
74.208.236.219
74.220.199.8
74.220.207.152
75.5.255.185
75.126.38.106
77.55.97.141
77.111.240.32
77.111.240.52
78.24.9.52
78.46.156.194
78.47.106.15
79.98.25.1
79.170.40.236
79.173.157.148
80.85.86.6
80.237.132.180
81.2.194.62
81.2.194.128
81.2.194.176
81.95.96.29
81.169.145.68
81.169.145.84
81.169.145.88
81.169.145.94
81.169.145.105
81.169.145.151
81.169.145.159
81.169.145.160
81.169.145.161
81.177.165.51
82.64.11.138
82.98.135.43
82.100.220.53
82.112.184.197
83.137.194.79
84.16.73.17
84.38.228.119
84.234.64.242
85.13.129.76
85.13.132.239
85.114.135.128
85.128.128.104
85.128.151.58
85.158.203.201
85.214.112.103
85.236.47.218
87.98.154.146
87.98.230.60
88.198.56.106
89.31.143.1
89.35.39.65
89.42.219.208
89.46.108.57
89.188.24.70
89.223.109.60
91.121.59.137
91.121.154.229
91.121.208.116
91.148.168.34
91.195.240.94
91.195.240.117
91.196.124.119
91.199.77.50
91.212.28.29
91.221.151.118
91.240.216.11
92.43.203.171
92.61.39.239
93.90.146.101
93.125.99.87
93.185.103.42
93.190.48.3
93.237.141.54
94.152.8.56
95.211.117.215
96.30.52.60
96.126.123.244
98.124.199.9
98.124.199.41
98.124.199.124
103.70.226.182
103.71.236.189
103.218.240.135
104.18.56.87
104.18.57.87
104.25.130.22
104.25.131.22
104.27.3.231
104.31.76.199
104.31.77.199
104.149.71.206
104.171.24.25
104.171.24.26
104.192.84.85
104.196.176.208
106.187.51.202
107.158.31.120
107.172.147.54
107.175.239.2
107.180.20.91
107.180.27.240
107.180.51.41
107.180.54.176
108.59.12.98
108.59.12.101
108.186.163.166
108.187.67.6
109.68.33.18
109.70.4.246
109.71.51.55
112.78.125.29
112.121.187.246
118.123.247.7
119.188.157.23
121.40.153.149
122.10.99.22
123.1.194.96
123.254.108.81
128.1.131.7
130.211.40.170
133.242.195.32
134.73.61.187
134.73.227.39
137.74.155.163
139.59.59.137
141.8.225.31
141.8.230.20
141.105.126.87
143.215.15.199
146.148.34.125
149.216.106.61
149.255.58.42
150.95.255.38
151.139.240.29
154.82.51.92
154.213.207.188
154.219.152.60
154.221.45.196
156.67.222.80
156.233.139.8
156.236.208.147
157.7.107.168
157.7.231.192
158.69.254.60
159.8.40.54
160.153.89.67
162.210.102.14
162.210.102.66
162.241.216.56
162.255.119.180
163.44.191.38
163.172.86.124
173.231.184.54
173.231.184.57
173.239.5.6
173.239.8.164
173.239.23.228
174.136.13.148
178.22.59.66
178.32.208.147
178.254.10.14
180.101.125.67
183.110.225.165
183.111.199.188
184.168.131.241
184.168.221.15
184.168.221.96
184.178.139.50
185.5.53.11
185.51.65.84
185.66.237.14
185.106.96.203
185.114.108.15
185.134.245.113
185.149.84.23
185.183.8.67
185.189.25.209
185.254.94.130
186.202.153.222
188.165.143.5
191.5.59.60
192.64.147.231
192.74.247.68
192.169.243.26
192.190.87.140
193.146.253.36
193.146.253.37
193.146.253.39
193.222.100.37
194.9.94.85
194.9.94.86
194.63.248.52
194.150.113.18
194.150.113.50
194.242.61.31
195.8.208.58
195.110.124.188
195.149.84.100
195.149.84.101
196.22.132.17
198.8.63.179
198.23.48.104
198.38.82.115
198.38.83.24
198.49.23.144
198.49.23.145
198.54.115.163
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
198.58.118.167
198.185.159.144
198.185.159.145
198.187.30.249
199.34.228.48
199.58.179.10
199.59.242.151
199.168.185.2
199.191.50.185
200.63.47.3
200.112.24.33
201.168.186.3
202.124.241.178
202.181.97.76
202.254.234.152
203.156.192.80
204.11.56.48
204.72.66.167
204.240.20.103
205.168.145.99
205.178.189.131
206.189.61.126
207.10.232.16
207.10.232.21
207.97.224.97
207.148.248.145
208.73.210.202
208.73.210.217
208.73.211.165
208.73.211.177
208.91.197.26
208.91.197.39
208.91.197.66
208.91.197.91
208.97.148.236
208.109.80.14
208.109.181.6
209.99.40.222
209.99.40.223
209.99.40.227
209.99.64.55
209.140.30.61
209.160.65.66
210.172.183.32
211.43.203.53
212.12.54.87
212.57.32.63
212.85.106.71
213.174.151.179
213.186.33.5
213.186.33.17
213.247.47.190
216.40.47.17
216.120.247.66
217.19.237.54
217.20.116.129
217.20.116.130
217.20.116.131
217.20.116.132
217.20.116.133
217.20.116.134
217.20.116.135
217.20.116.136
217.20.116.137
217.20.116.138
217.20.116.139
217.20.116.140
217.20.116.141
217.20.116.142
217.20.116.143
217.20.116.149
217.20.116.150
217.20.116.151
217.26.53.16
217.26.63.20
217.70.184.38
217.76.156.252
217.160.0.27
217.160.0.59
217.160.0.169
217.160.0.225
217.160.0.239
217.160.122.61
217.160.233.84
219.118.71.121
219.135.56.194
225.114.51.252
225.210.105.31
228.74.2.190
228.74.149.56
228.218.20.93
229.74.184.248

31
bambenek_cl.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_cl
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of cl C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/cl-iplist.txt
# Source File Date: Fri Dec 14 00:05:01 UTC 2018
#
# Category : malware
# Version : 18
#
# This File Date : Fri Dec 14 00:08:08 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_cl
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_cryptowall.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_cryptowall
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of cryptowall C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/cryptowall-iplist.txt
# Source File Date: Thu Dec 3 12:25:05 UTC 2015
#
# Category : malware
# Version : 5
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_cryptowall
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

42
bambenek_dircrypt.ipset Normal file
View File

@ -0,0 +1,42 @@
#
# bambenek_dircrypt
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of dircrypt C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt
# Source File Date: Thu Apr 18 09:08:03 UTC 2019
#
# Category : malware
# Version : 110
#
# This File Date : Thu Apr 18 09:12:23 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 11 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_dircrypt
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
18.213.250.117
18.215.128.143
35.225.160.245
45.194.179.185
52.4.209.250
173.231.184.57
192.74.247.68
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200

31
bambenek_dyre.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_dyre
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of dyre C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt
# Source File Date: Thu Jun 7 00:03:08 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_dyre
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

31
bambenek_geodo.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_geodo
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of geodo C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt
# Source File Date: Thu Jun 7 00:02:33 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:34 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_geodo
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

32
bambenek_hesperbot.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bambenek_hesperbot
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of hesperbot C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt
# Source File Date: Thu Apr 18 09:02:37 UTC 2019
#
# Category : malware
# Version : 102
#
# This File Date : Thu Apr 18 09:08:34 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_hesperbot
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
173.231.184.57

34
bambenek_matsnu.ipset Normal file
View File

@ -0,0 +1,34 @@
#
# bambenek_matsnu
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of matsnu C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt
# Source File Date: Sun Apr 21 10:01:22 UTC 2019
#
# Category : malware
# Version : 273
#
# This File Date : Sun Apr 21 10:04:30 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 3 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_matsnu
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.23.86.44
91.148.168.34
184.168.221.15

80
bambenek_necurs.ipset Normal file
View File

@ -0,0 +1,80 @@
#
# bambenek_necurs
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of necurs C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt
# Source File Date: Sun Apr 21 08:06:41 UTC 2019
#
# Category : malware
# Version : 3747
#
# This File Date : Sun Apr 21 08:12:09 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 49 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_necurs
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
0.0.0.64
35.187.36.248
64.127.116.113
64.135.184.86
64.183.175.116
65.7.101.214
65.39.60.115
65.143.188.50
65.191.72.147
65.239.199.183
66.31.65.240
66.31.215.115
66.47.44.209
66.55.157.183
66.119.92.211
67.119.30.114
67.159.114.214
67.215.92.114
68.55.223.183
68.151.122.19
68.159.11.53
68.175.161.22
69.15.209.177
69.31.197.20
69.71.168.215
69.151.245.144
70.23.114.87
70.111.107.215
70.127.16.209
70.207.245.86
70.247.168.21
71.15.217.83
71.31.135.16
71.71.77.87
71.183.249.247
71.191.66.116
71.215.128.52
71.239.121.17
200.112.24.33
201.168.186.3
204.72.66.167
204.240.20.103
205.168.145.99
225.114.51.252
225.210.105.31
228.74.2.190
228.74.149.56
228.218.20.93
229.74.184.248

33
bambenek_p2pgoz.ipset Normal file
View File

@ -0,0 +1,33 @@
#
# bambenek_p2pgoz
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of p2pgoz C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt
# Source File Date: Thu Apr 18 16:00:49 UTC 2019
#
# Category : malware
# Version : 217
#
# This File Date : Thu Apr 18 16:08:34 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 2 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_p2pgoz
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.187.36.248
35.225.160.245

31
bambenek_pushdo.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_pushdo
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of pushdo C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt
# Source File Date: Thu Jun 7 00:01:48 UTC 2018
#
# Category : malware
# Version : 6
#
# This File Date : Thu Jun 7 00:08:36 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_pushdo
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

40
bambenek_pykspa.ipset Normal file
View File

@ -0,0 +1,40 @@
#
# bambenek_pykspa
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of pykspa C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt
# Source File Date: Sat Apr 20 11:07:50 UTC 2019
#
# Category : malware
# Version : 752
#
# This File Date : Sat Apr 20 11:12:37 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 9 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_pykspa
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.225.160.245
40.255.0.62
78.47.106.15
191.5.59.60
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
219.135.56.194

32
bambenek_qakbot.ipset Normal file
View File

@ -0,0 +1,32 @@
#
# bambenek_qakbot
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of qakbot C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt
# Source File Date: Wed Apr 17 14:01:56 UTC 2019
#
# Category : malware
# Version : 55
#
# This File Date : Wed Apr 17 14:04:09 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_qakbot
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.225.160.245

114
bambenek_ramnit.ipset Normal file
View File

@ -0,0 +1,114 @@
#
# bambenek_ramnit
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of ramnit C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt
# Source File Date: Sat Apr 20 20:03:26 UTC 2019
#
# Category : malware
# Version : 1110
#
# This File Date : Sat Apr 20 20:08:39 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 83 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_ramnit
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
18.213.250.117
18.215.128.143
34.197.76.50
34.225.182.233
35.184.193.177
35.224.11.86
35.225.160.245
45.227.252.56
46.165.220.141
46.165.220.142
46.165.220.143
46.165.220.144
46.165.220.145
46.165.220.146
46.165.220.147
46.165.220.148
46.165.220.149
46.165.220.150
46.165.220.151
46.165.220.152
46.165.220.153
46.165.220.154
46.165.220.155
46.165.221.136
46.165.221.144
46.165.221.154
46.165.229.164
46.165.229.165
46.165.229.166
46.165.229.167
46.165.254.193
46.165.254.194
46.165.254.195
46.165.254.196
46.165.254.197
46.165.254.198
46.165.254.199
46.165.254.200
46.165.254.201
46.165.254.202
46.165.254.203
46.165.254.204
46.165.254.205
46.165.254.206
46.165.254.207
46.165.254.208
46.165.254.209
46.165.254.210
46.165.254.211
46.165.254.212
46.165.254.213
46.165.254.214
52.0.217.44
52.4.209.250
82.112.184.197
89.223.109.60
139.59.59.137
178.32.208.147
193.146.253.36
193.146.253.39
206.189.61.126
208.91.197.66
209.99.40.222
209.99.40.223
209.99.40.227
217.20.116.129
217.20.116.130
217.20.116.131
217.20.116.132
217.20.116.133
217.20.116.134
217.20.116.135
217.20.116.136
217.20.116.137
217.20.116.138
217.20.116.139
217.20.116.140
217.20.116.141
217.20.116.142
217.20.116.143
217.20.116.149
217.20.116.150
217.20.116.151

31
bambenek_ranbyus.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_ranbyus
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of ranbyus C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt
# Source File Date: Thu Feb 14 14:06:27 UTC 2019
#
# Category : malware
# Version : 101
#
# This File Date : Thu Feb 14 14:12:10 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_ranbyus
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

166
bambenek_simda.ipset Normal file
View File

@ -0,0 +1,166 @@
#
# bambenek_simda
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of simda C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/simda-iplist.txt
# Source File Date: Sun Apr 21 10:07:34 UTC 2019
#
# Category : malware
# Version : 6635
#
# This File Date : Sun Apr 21 10:12:15 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 135 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_simda
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.79.79.209
5.79.79.211
5.157.84.170
18.213.250.117
18.215.128.143
23.20.239.12
23.80.37.57
23.89.102.68
31.186.169.41
37.9.175.13
46.28.105.107
46.30.213.62
46.30.215.126
46.30.215.194
46.151.97.7
46.249.43.105
52.4.209.250
52.30.231.158
52.58.78.16
62.97.115.37
62.129.200.14
62.149.128.72
62.149.128.74
62.149.128.151
62.149.128.154
62.149.128.157
62.149.128.160
62.149.128.163
62.149.128.166
62.153.122.95
62.197.128.123
69.162.80.52
69.162.80.56
77.55.97.141
77.111.240.32
77.111.240.52
79.98.25.1
79.170.40.236
80.85.86.6
80.237.132.180
81.2.194.62
81.2.194.128
81.2.194.176
81.95.96.29
81.169.145.68
81.169.145.84
81.169.145.94
81.169.145.105
81.169.145.161
81.177.165.51
82.64.11.138
82.98.135.43
82.100.220.53
84.38.228.119
84.234.64.242
85.13.129.76
85.13.132.239
85.114.135.128
85.128.128.104
85.128.151.58
85.214.112.103
85.236.47.218
87.98.154.146
87.98.230.60
88.198.56.106
89.31.143.1
89.42.219.208
89.46.108.57
91.121.59.137
91.121.154.229
91.121.208.116
91.196.124.119
91.199.77.50
91.212.28.29
91.240.216.11
92.43.203.171
92.61.39.239
93.90.146.101
93.185.103.42
93.190.48.3
93.237.141.54
94.152.8.56
95.211.117.215
98.124.199.9
103.218.240.135
107.172.147.54
108.59.12.101
128.1.131.7
141.8.230.20
141.105.126.87
146.148.34.125
149.216.106.61
151.139.240.29
157.7.107.168
163.172.86.124
173.239.5.6
173.239.8.164
178.32.208.147
178.254.10.14
183.110.225.165
185.5.53.11
185.51.65.84
185.66.237.14
185.114.108.15
185.149.84.23
185.183.8.67
188.165.143.5
192.64.147.231
194.9.94.85
194.9.94.86
194.150.113.18
194.242.61.31
195.8.208.58
195.110.124.188
198.54.115.163
198.187.30.249
199.191.50.185
204.11.56.48
208.91.197.91
209.140.30.61
210.172.183.32
211.43.203.53
212.57.32.63
212.85.106.71
213.186.33.5
213.247.47.190
217.19.237.54
217.70.184.38
217.76.156.252
217.160.0.59
217.160.0.169
217.160.0.225
217.160.0.239
217.160.122.61
217.160.233.84

87
bambenek_suppobox.ipset Normal file
View File

@ -0,0 +1,87 @@
#
# bambenek_suppobox
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of suppobox C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt
# Source File Date: Sun Apr 21 05:08:24 UTC 2019
#
# Category : malware
# Version : 4291
#
# This File Date : Sun Apr 21 05:12:14 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 56 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_suppobox
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
14.128.132.21
18.213.250.117
18.215.128.143
27.126.188.205
35.225.160.245
45.16.128.217
45.33.2.79
45.33.23.183
45.56.79.23
45.79.19.196
47.90.55.204
47.91.170.222
52.4.209.250
52.23.117.159
62.233.121.61
64.98.145.30
65.61.216.12
69.195.124.249
74.119.239.234
75.126.38.106
81.169.145.151
84.16.73.17
91.195.240.94
91.221.151.118
93.125.99.87
96.126.123.244
98.124.199.41
98.124.199.124
104.25.130.22
104.25.131.22
104.27.3.231
104.31.76.199
104.31.77.199
107.180.51.41
107.180.54.176
118.123.247.7
141.8.225.31
159.8.40.54
162.210.102.14
162.241.216.56
184.168.131.241
195.149.84.100
195.149.84.101
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200
198.58.118.167
199.34.228.48
199.59.242.151
205.178.189.131
207.148.248.145
208.91.197.26
208.91.197.39
208.109.181.6
213.186.33.17

31
bambenek_symmi.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_symmi
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of symmi C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt
# Source File Date: Tue Jul 3 03:09:04 UTC 2018
#
# Category : malware
# Version : 11
#
# This File Date : Tue Jul 3 03:16:20 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_symmi
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

37
bambenek_tinba.ipset Normal file
View File

@ -0,0 +1,37 @@
#
# bambenek_tinba
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of tinba C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt
# Source File Date: Sun Apr 21 09:01:22 UTC 2019
#
# Category : malware
# Version : 1398
#
# This File Date : Sun Apr 21 09:08:32 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 6 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_tinba
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
35.225.160.245
193.146.253.37
198.54.117.197
198.54.117.198
198.54.117.199
198.54.117.200

31
bambenek_volatile.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bambenek_volatile
#
# ipv4 hash:ip ipset
#
# [Bambenek Consulting]
# (http://osint.bambenekconsulting.com/feeds/) feed of
# current IPs of volatile C&Cs with 90 minute lookback
#
# Maintainer : Bambenek Consulting
# Maintainer URL : http://osint.bambenekconsulting.com/feeds/
# List source URL : http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt
# Source File Date: Sat Dec 8 22:07:53 UTC 2018
#
# Category : malware
# Version : 9
#
# This File Date : Sat Dec 8 22:16:23 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bambenek_volatile
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

2729
bbcan177_ms1.netset Normal file

File diff suppressed because it is too large Load Diff

1175
bbcan177_ms3.netset Normal file

File diff suppressed because it is too large Load Diff

8221
bds_atif.ipset Normal file

File diff suppressed because it is too large Load Diff

24202
bi_any_0_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

15374
bi_any_1_7d.ipset Normal file

File diff suppressed because it is too large Load Diff

5885
bi_any_2_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

29905
bi_any_2_30d.ipset Normal file

File diff suppressed because it is too large Load Diff

13434
bi_any_2_7d.ipset Normal file

File diff suppressed because it is too large Load Diff

31
bi_apache-404_0_1d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_apache-404_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-404 with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-404/0?age=1d
# Source File Date: Sat Apr 20 21:52:33 UTC 2019
#
# Category : attacks
# Version : 2188
#
# This File Date : Sat Apr 20 21:52:33 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-404_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
139.59.23.231

View File

@ -0,0 +1,48 @@
#
# bi_apache-modsec_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-modsec with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-modsec/0?age=1d
# Source File Date: Sun Apr 21 08:52:28 UTC 2019
#
# Category : attacks
# Version : 7818
#
# This File Date : Sun Apr 21 08:52:28 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 18 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-modsec_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.9.156.30
47.103.42.52
58.87.95.60
58.218.67.161
77.236.201.44
85.75.132.187
87.2.51.172
94.23.255.34
94.46.168.170
120.79.190.152
123.206.62.95
139.199.198.220
177.95.52.9
178.62.220.59
180.71.56.200
192.99.15.139
198.50.215.26
206.189.42.218

View File

@ -0,0 +1,183 @@
#
# bi_apache-noscript_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-noscript with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-noscript/0?age=1d
# Source File Date: Sun Apr 21 09:24:13 UTC 2019
#
# Category : attacks
# Version : 11285
#
# This File Date : Sun Apr 21 09:24:13 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 153 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-noscript_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.188.210.12
5.188.210.50
5.188.210.55
18.188.177.131
27.152.28.35
34.76.54.152
34.76.109.52
36.7.72.26
36.67.33.218
37.59.54.172
37.59.55.45
37.248.213.5
38.21.243.244
39.108.232.160
39.114.10.212
45.117.80.77
47.52.209.92
47.105.121.96
52.15.40.107
54.147.132.28
60.21.253.72
62.232.174.114
65.213.16.216
66.249.75.207
80.211.69.242
81.110.55.125
82.196.4.184
89.76.216.74
93.76.37.0
94.23.255.34
94.191.100.248
95.213.177.123
95.213.177.124
95.213.177.125
95.213.177.126
101.1.31.27
101.37.32.58
101.201.140.45
104.128.144.131
104.227.248.18
104.248.153.159
106.12.209.6
106.13.43.1
106.13.51.33
106.13.58.36
106.75.177.128
109.201.137.36
109.201.137.50
110.77.134.242
111.230.186.190
111.230.225.187
111.230.241.77
111.231.51.143
114.116.83.201
115.159.84.120
115.159.98.117
116.62.232.226
116.196.69.7
116.255.215.25
117.50.50.55
118.24.17.145
118.24.58.56
118.24.83.220
118.24.156.246
118.24.167.225
118.24.169.11
118.25.105.88
118.25.227.13
118.32.127.213
118.126.112.242
118.126.115.146
119.28.72.50
119.28.85.203
119.28.143.198
119.29.60.49
120.27.248.226
120.31.136.230
120.194.214.172
121.164.33.249
122.114.5.200
122.114.59.132
122.114.171.250
122.114.254.38
123.206.6.9
124.165.205.23
125.63.103.2
129.204.32.247
129.204.39.114
132.232.18.111
132.232.32.150
132.232.135.73
132.232.142.168
132.232.158.199
134.175.89.122
139.159.210.222
139.159.215.211
139.199.37.80
139.199.170.242
139.199.227.86
139.224.18.42
140.143.19.113
140.143.21.91
140.143.238.137
141.8.142.15
147.91.203.216
148.70.49.176
148.70.54.3
148.228.54.14
149.129.50.37
154.8.226.134
154.211.2.119
159.65.151.224
159.192.218.88
161.129.42.32
166.62.40.199
180.76.244.220
182.16.75.194
185.234.218.74
186.167.2.130
188.131.176.138
192.99.15.55
192.99.15.141
192.144.160.200
193.112.2.155
193.112.41.239
193.112.94.86
193.112.121.74
193.112.178.67
194.147.32.50
194.147.34.60
198.167.223.52
200.116.77.42
202.53.139.161
202.60.231.71
202.78.200.166
202.133.48.153
202.138.248.61
202.175.64.242
203.195.147.129
211.159.155.202
211.159.180.74
212.64.4.70
212.64.55.40
212.237.0.99
212.237.2.216
213.42.235.200
213.178.38.13
216.244.66.239
216.244.66.247
218.3.85.142
218.65.178.222
218.75.223.224
219.159.197.13

View File

@ -0,0 +1,39 @@
#
# bi_apache-noscript_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-noscript with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-noscript/2?age=30d
# Source File Date: Wed Apr 17 21:08:31 UTC 2019
#
# Category : attacks
# Version : 209
#
# This File Date : Wed Apr 17 21:08:31 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 9 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-noscript_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.8.10.202
47.254.147.224
95.211.211.232
104.128.144.131
113.161.194.212
125.64.94.206
171.25.193.25
171.25.193.78
188.213.175.168

View File

@ -0,0 +1,33 @@
#
# bi_apache-phpmyadmin_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-phpmyadmin with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-phpmyadmin/0?age=1d
# Source File Date: Sat Apr 20 20:56:31 UTC 2019
#
# Category : attacks
# Version : 3341
#
# This File Date : Sat Apr 20 20:56:31 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 3 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-phpmyadmin_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
81.47.167.189
132.232.131.248
222.179.152.117

View File

@ -0,0 +1,34 @@
#
# bi_apache-scriddies_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache-scriddies with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache-scriddies/0?age=1d
# Source File Date: Sun Apr 21 09:00:43 UTC 2019
#
# Category : attacks
# Version : 3250
#
# This File Date : Sun Apr 21 09:00:43 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache-scriddies_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
66.249.64.130
118.42.229.68
178.62.232.43
192.99.15.55

309
bi_apache_0_1d.ipset Normal file
View File

@ -0,0 +1,309 @@
#
# bi_apache_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/0?age=1d
# Source File Date: Sun Apr 21 09:56:11 UTC 2019
#
# Category : attacks
# Version : 14055
#
# This File Date : Sun Apr 21 09:56:11 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 279 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
4.34.201.34
5.8.10.202
5.9.156.30
5.160.122.37
5.188.210.12
5.188.210.50
5.188.210.55
18.184.21.157
18.188.177.131
18.195.141.44
18.205.60.116
27.102.207.167
27.152.28.35
31.18.248.127
34.76.54.152
34.76.109.52
36.7.72.26
36.67.33.218
37.59.54.172
37.59.55.45
37.138.226.138
37.173.77.221
37.248.213.5
38.21.243.244
39.108.232.160
39.114.10.212
45.117.80.77
45.127.96.239
47.52.209.92
47.103.42.52
47.105.121.96
49.247.202.93
52.15.40.107
54.37.22.46
54.37.22.92
54.37.22.95
54.37.22.180
54.37.22.223
54.37.23.14
54.37.23.114
54.37.23.120
54.37.23.179
54.37.149.24
54.37.150.175
54.38.90.164
54.38.90.228
54.147.132.28
58.87.95.60
58.210.253.118
58.218.67.161
60.21.253.72
60.191.38.77
60.191.52.254
62.232.174.114
64.140.200.40
64.188.6.3
65.213.16.216
66.249.64.130
66.249.64.141
66.249.75.207
66.249.79.5
66.249.79.7
66.249.79.9
66.249.79.10
66.249.79.12
66.249.79.14
66.249.79.16
66.249.79.18
66.249.79.25
66.249.79.27
66.249.79.64
66.249.79.93
66.249.79.95
66.249.79.163
66.249.79.189
66.249.79.190
66.249.79.219
66.249.79.223
66.249.79.241
66.249.79.245
69.94.64.189
72.46.129.66
77.88.5.10
77.136.15.20
77.236.201.44
79.18.213.179
80.211.69.242
81.47.167.189
81.110.55.125
82.79.97.196
82.196.4.184
83.16.221.126
85.75.132.187
86.140.199.121
86.159.76.195
87.2.51.172
88.74.140.177
89.76.216.74
91.121.222.157
92.90.178.205
93.76.37.0
93.79.71.12
94.23.255.34
94.41.223.185
94.46.168.170
94.102.49.190
94.191.100.248
95.85.76.95
95.213.177.123
95.213.177.124
95.213.177.125
95.213.177.126
101.1.31.27
101.37.32.58
101.200.190.141
101.201.140.45
104.128.144.131
104.227.248.18
104.248.0.193
104.248.153.159
105.227.218.3
106.12.209.6
106.13.43.1
106.13.51.33
106.13.58.36
106.75.177.128
107.170.247.224
109.201.137.36
109.201.137.50
109.214.253.77
110.77.134.242
111.230.186.190
111.230.225.187
111.230.241.77
111.231.51.143
114.64.249.37
114.116.83.201
115.159.84.120
115.159.98.117
116.62.232.226
116.100.165.223
116.110.22.203
116.196.69.7
116.255.215.25
117.50.50.55
118.24.17.145
118.24.58.56
118.24.83.220
118.24.156.246
118.24.167.225
118.24.169.11
118.25.105.88
118.25.211.250
118.25.227.13
118.32.127.213
118.42.229.68
118.126.112.242
118.126.115.146
119.28.72.50
119.28.85.203
119.28.143.198
119.29.60.49
120.27.248.226
120.31.136.230
120.79.190.152
120.194.214.172
121.164.33.249
121.226.29.112
122.114.5.200
122.114.59.132
122.114.171.250
122.114.254.38
123.56.49.19
123.206.6.9
123.206.62.95
124.165.205.23
125.63.103.2
125.133.152.37
129.204.32.247
129.204.39.114
129.204.147.225
130.61.109.213
132.232.18.111
132.232.32.150
132.232.131.248
132.232.135.73
132.232.142.168
132.232.158.199
134.19.179.218
134.175.89.122
139.59.23.231
139.159.210.222
139.159.215.211
139.199.37.80
139.199.170.242
139.199.198.220
139.199.227.86
139.224.18.42
140.143.19.113
140.143.21.91
140.143.238.137
141.8.142.15
145.239.15.241
147.91.203.216
148.70.49.176
148.70.54.3
148.228.54.14
149.129.50.37
154.8.226.134
154.211.2.119
157.97.170.35
159.65.151.224
159.192.218.88
159.203.169.16
161.129.42.32
162.243.139.8
163.172.69.248
166.62.40.199
167.114.29.135
167.114.166.13
174.19.31.18
176.109.234.111
177.95.52.9
178.62.220.59
178.62.232.43
178.128.75.224
180.71.56.200
180.76.15.10
180.76.244.220
182.16.75.194
185.153.198.235
185.222.211.70
185.234.218.74
186.167.2.130
188.131.176.138
192.99.4.37
192.99.15.55
192.99.15.139
192.99.15.141
192.144.160.200
192.169.227.95
193.112.2.155
193.112.41.239
193.112.94.86
193.112.121.74
193.112.178.67
193.188.22.127
194.147.32.50
194.147.34.60
198.50.215.26
198.167.223.52
199.115.99.122
200.116.77.42
202.53.139.161
202.60.231.71
202.78.200.166
202.133.48.153
202.138.248.61
202.175.64.242
203.195.147.129
206.189.42.218
211.159.155.202
211.159.180.74
212.64.4.70
212.64.55.40
212.237.0.99
212.237.2.216
213.42.235.200
213.152.173.98
213.178.38.13
216.244.66.196
216.244.66.239
216.244.66.247
218.3.85.142
218.65.178.222
218.75.223.224
219.159.197.13
222.129.38.54
222.179.152.117

96
bi_apache_1_7d.ipset Normal file
View File

@ -0,0 +1,96 @@
#
# bi_apache_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/1?age=7d
# Source File Date: Sun Apr 21 03:56:39 UTC 2019
#
# Category : attacks
# Version : 936
#
# This File Date : Sun Apr 21 03:56:39 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 66 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.2.211.92
5.8.10.202
37.58.150.203
58.221.72.202
60.191.38.77
66.240.236.119
66.249.79.5
66.249.79.8
66.249.79.9
66.249.79.10
66.249.79.12
66.249.79.14
66.249.79.16
66.249.79.18
66.249.79.29
66.249.79.64
66.249.79.95
66.249.79.116
66.249.79.126
66.249.79.128
66.249.79.132
66.249.79.149
66.249.79.151
66.249.79.237
87.98.227.4
91.200.12.9
91.200.12.12
91.205.173.48
94.102.49.198
95.105.171.133
104.128.144.131
107.77.106.84
108.168.247.250
121.42.152.155
167.114.166.13
176.53.120.134
178.73.215.171
180.76.15.6
180.76.15.7
180.76.15.10
180.76.15.16
180.76.15.22
180.76.15.23
180.76.15.28
180.76.15.29
180.76.15.139
180.76.15.148
180.76.15.153
180.76.15.158
180.76.15.162
180.76.15.163
181.48.9.82
185.100.87.190
185.100.87.248
185.129.148.167
186.201.194.58
192.187.108.186
193.106.30.99
197.248.136.250
201.183.237.8
208.100.26.230
209.29.221.147
210.72.142.7
216.244.66.239
218.69.91.88
221.212.99.106

197
bi_apache_2_30d.ipset Normal file
View File

@ -0,0 +1,197 @@
#
# bi_apache_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apache with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apache/2?age=30d
# Source File Date: Sun Apr 21 04:20:47 UTC 2019
#
# Category : attacks
# Version : 277
#
# This File Date : Sun Apr 21 04:20:47 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 167 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apache_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.2.211.92
5.8.10.202
37.58.150.203
37.187.243.209
47.254.147.224
58.221.72.202
60.191.38.77
62.4.14.198
62.210.185.4
64.41.200.104
66.240.236.119
66.249.64.18
66.249.64.21
66.249.64.22
66.249.64.23
66.249.65.84
66.249.65.94
66.249.65.157
66.249.65.205
66.249.66.69
66.249.66.76
66.249.66.138
66.249.66.140
66.249.66.141
66.249.66.142
66.249.66.144
66.249.66.145
66.249.66.200
66.249.66.202
66.249.66.210
66.249.66.212
66.249.66.214
66.249.66.217
66.249.66.219
66.249.66.220
66.249.66.221
66.249.69.212
66.249.73.148
66.249.73.195
66.249.79.5
66.249.79.8
66.249.79.9
66.249.79.10
66.249.79.12
66.249.79.14
66.249.79.18
66.249.79.86
66.249.79.116
66.249.79.126
66.249.79.128
66.249.79.132
66.249.79.134
66.249.79.142
66.249.79.144
71.6.135.131
87.98.227.4
91.200.12.9
91.200.12.12
91.205.173.48
93.174.95.106
94.102.49.193
94.102.49.198
95.105.171.133
95.211.211.232
96.127.158.235
104.128.144.131
107.170.192.241
107.170.226.201
107.170.228.217
107.170.228.248
107.170.230.54
107.170.230.97
107.170.230.250
107.170.231.45
107.170.231.183
107.170.231.244
107.170.236.40
107.170.237.92
107.170.238.226
107.170.238.228
107.170.253.245
107.170.254.21
113.161.194.212
115.28.245.132
121.42.152.155
125.64.94.201
125.64.94.206
139.129.40.112
139.162.78.135
139.162.106.181
139.162.116.133
155.94.222.12
157.55.39.26
167.114.166.13
168.1.128.36
171.25.193.25
171.25.193.78
178.73.215.171
180.76.15.5
180.76.15.6
180.76.15.7
180.76.15.10
180.76.15.11
180.76.15.14
180.76.15.16
180.76.15.19
180.76.15.22
180.76.15.23
180.76.15.27
180.76.15.28
180.76.15.29
180.76.15.31
180.76.15.32
180.76.15.33
180.76.15.34
180.76.15.134
180.76.15.135
180.76.15.136
180.76.15.138
180.76.15.139
180.76.15.140
180.76.15.141
180.76.15.142
180.76.15.146
180.76.15.147
180.76.15.148
180.76.15.149
180.76.15.153
180.76.15.156
180.76.15.157
180.76.15.158
180.76.15.160
180.76.15.161
180.76.15.162
180.76.15.163
181.48.9.82
184.154.74.66
185.100.87.190
185.100.87.191
185.100.87.245
185.100.87.246
185.100.87.247
185.100.87.248
185.100.87.249
185.100.87.250
185.129.148.167
188.213.175.168
192.187.108.186
193.106.30.99
196.52.43.53
196.52.43.88
196.52.43.96
196.52.43.111
197.248.136.250
198.20.70.114
198.143.133.154
198.143.155.138
201.183.237.8
204.11.50.131
208.100.26.230
210.72.142.7
213.23.12.149
213.222.56.130
217.69.143.64
217.69.143.67
221.212.99.106
223.112.190.70

35
bi_apacheddos_0_1d.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bi_apacheddos_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# apacheddos with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/apacheddos/0?age=1d
# Source File Date: Sun Apr 21 08:52:29 UTC 2019
#
# Category : attacks
# Version : 1361
#
# This File Date : Sun Apr 21 08:52:29 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 5 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_apacheddos_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
64.140.200.40
66.249.64.141
174.19.31.18
192.169.227.95
216.244.66.196

97
bi_assp_0_1d.ipset Normal file
View File

@ -0,0 +1,97 @@
#
# bi_assp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# assp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/assp/0?age=1d
# Source File Date: Sun Apr 21 10:20:08 UTC 2019
#
# Category : attacks
# Version : 7230
#
# This File Date : Sun Apr 21 10:20:08 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 67 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_assp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
43.231.128.95
45.227.253.99
46.101.252.216
49.76.203.100
58.219.90.249
60.167.112.57
60.167.119.52
60.168.10.52
60.168.87.49
60.168.172.98
60.168.172.167
60.168.240.185
60.168.241.180
60.168.244.240
60.169.94.146
60.169.95.179
60.176.234.242
62.210.26.216
62.210.28.104
62.210.28.105
62.210.28.114
62.210.194.42
104.192.109.140
112.196.77.202
113.105.202.243
113.123.0.69
114.97.187.64
114.99.26.224
114.99.29.246
114.99.30.222
114.223.62.99
114.223.211.223
114.223.218.202
114.223.221.23
117.57.21.149
117.64.232.50
117.64.233.162
117.85.97.244
119.116.227.165
122.233.149.51
125.118.214.122
125.121.115.49
139.162.73.19
139.162.109.245
139.162.115.7
172.104.105.194
173.208.243.36
175.139.231.129
178.32.53.143
178.128.237.180
185.83.114.75
189.206.130.57
190.24.10.75
196.46.210.235
198.108.66.32
200.3.14.11
211.72.92.124
212.83.149.117
220.179.210.173
220.191.12.191
220.227.40.235
221.227.18.130
223.240.216.16
223.240.217.204
223.240.249.105
223.240.249.204
223.241.116.106

115
bi_asterisk_0_1d.ipset Normal file
View File

@ -0,0 +1,115 @@
#
# bi_asterisk_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# asterisk with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/asterisk/0?age=1d
# Source File Date: Sun Apr 21 10:20:09 UTC 2019
#
# Category : attacks
# Version : 11591
#
# This File Date : Sun Apr 21 10:20:09 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 85 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_asterisk_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.11.45.69
5.62.63.181
5.62.63.223
5.133.31.173
5.196.243.62
31.200.196.68
37.8.32.230
37.8.48.255
37.8.49.215
46.166.151.174
51.79.26.54
51.159.17.252
62.4.15.23
62.173.145.43
62.210.12.84
62.210.71.42
65.48.179.221
67.211.209.179
77.234.46.253
77.247.108.19
77.247.108.22
77.247.108.37
77.247.108.53
77.247.108.54
77.247.109.9
77.247.109.59
77.247.109.72
77.247.109.83
77.247.109.107
77.247.109.112
77.247.109.119
77.247.109.121
77.247.109.138
77.247.109.142
77.247.109.146
77.247.109.165
77.247.109.211
77.247.109.212
80.232.251.114
82.205.14.158
94.155.195.168
102.165.32.138
102.165.35.96
102.165.35.122
102.165.37.226
102.165.38.61
102.165.38.64
102.165.38.79
102.165.38.146
102.165.38.193
102.165.38.246
102.165.48.45
102.165.48.99
102.165.49.121
102.165.49.170
102.165.49.212
102.165.52.231
117.18.4.112
118.38.198.68
122.54.2.215
125.21.188.216
134.119.187.249
134.119.205.187
137.53.223.228
139.99.119.241
158.69.52.194
163.172.61.101
178.48.19.209
185.53.88.2
185.53.88.155
185.53.88.175
185.53.88.177
185.107.83.33
192.3.92.114
195.154.85.236
195.154.86.233
195.154.87.93
195.154.251.116
198.23.189.90
212.83.181.173
212.237.45.135
216.245.219.110
217.147.1.73
217.147.1.183
217.182.220.61

60
bi_asterisk_2_30d.ipset Normal file
View File

@ -0,0 +1,60 @@
#
# bi_asterisk_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# asterisk with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/asterisk/2?age=30d
# Source File Date: Fri Apr 19 03:53:04 UTC 2019
#
# Category : attacks
# Version : 234
#
# This File Date : Fri Apr 19 03:53:04 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 30 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_asterisk_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.62.41.13
5.62.63.181
5.62.63.182
5.62.63.221
5.62.63.222
5.62.63.223
5.189.190.95
5.196.149.220
46.29.162.23
46.29.162.24
46.166.151.45
46.166.165.43
62.112.10.166
80.255.5.196
80.255.5.197
93.115.28.99
163.172.224.41
185.40.4.42
185.40.4.65
185.40.4.87
185.40.4.159
185.40.4.165
185.130.236.5
185.234.216.174
188.165.222.17
192.228.100.242
195.154.183.222
195.154.223.229
212.129.10.158
212.129.30.255

1846
bi_badbots_0_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

1586
bi_badbots_1_7d.ipset Normal file

File diff suppressed because it is too large Load Diff

1877
bi_bruteforce_0_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

1587
bi_bruteforce_1_7d.ipset Normal file

File diff suppressed because it is too large Load Diff

914
bi_cms_0_1d.ipset Normal file
View File

@ -0,0 +1,914 @@
#
# bi_cms_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/0?age=1d
# Source File Date: Sun Apr 21 10:04:47 UTC 2019
#
# Category : attacks
# Version : 14177
#
# This File Date : Sun Apr 21 10:04:47 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 884 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
3.16.11.153
3.16.29.228
3.16.55.66
3.81.48.182
3.81.150.38
3.84.9.248
3.86.246.47
3.88.161.108
3.90.53.104
4.78.193.138
5.135.245.237
5.188.62.5
5.189.165.251
5.196.239.120
5.199.161.29
13.58.17.77
13.58.69.111
13.59.11.221
13.59.19.31
13.59.46.93
13.82.169.153
13.89.185.97
13.92.198.122
13.94.202.212
13.126.50.216
18.188.71.111
18.188.252.149
18.191.70.139
18.191.80.131
18.191.142.68
18.191.152.70
18.191.152.121
18.191.155.227
18.191.160.204
18.191.175.200
18.191.219.192
18.204.19.249
18.206.160.205
18.206.250.252
18.208.115.42
18.212.5.85
18.212.5.188
18.212.14.49
18.212.204.154
18.216.75.204
18.217.210.141
18.217.222.111
18.217.253.112
18.218.28.139
18.218.37.96
18.218.95.38
18.218.96.7
18.218.126.95
18.218.185.151
18.219.6.198
18.219.39.192
18.219.60.158
18.219.65.242
18.219.141.109
18.219.180.191
18.219.192.65
18.220.126.29
18.220.244.185
18.221.7.154
18.221.48.223
18.222.3.132
18.222.178.146
18.222.180.136
18.222.206.217
18.222.216.120
18.222.217.81
18.223.29.98
18.223.100.236
18.223.124.198
18.223.152.69
18.224.18.95
18.224.202.189
18.225.7.17
18.225.36.161
18.233.166.192
18.235.198.172
18.236.66.100
18.236.94.102
18.236.136.2
18.236.167.83
18.236.186.153
18.237.73.59
18.237.81.91
18.237.93.224
18.237.248.111
23.95.129.130
23.254.138.189
27.254.142.196
31.220.55.103
31.223.87.149
34.73.107.208
34.201.113.45
34.201.222.143
34.202.236.116
34.207.94.104
34.207.164.183
34.208.35.228
34.211.171.29
34.212.6.130
34.212.9.191
34.212.33.180
34.212.50.160
34.212.56.54
34.212.83.140
34.213.32.34
34.214.191.99
34.215.16.128
34.216.20.180
34.216.72.198
34.216.219.88
34.216.229.190
34.217.64.159
34.217.86.144
34.218.240.206
34.218.255.111
34.219.10.43
34.219.21.164
34.219.81.248
34.220.171.216
34.220.225.99
34.222.61.222
34.222.120.28
34.222.132.104
34.228.145.97
34.229.85.144
34.235.126.176
34.238.155.175
34.238.243.174
34.239.1.127
35.161.132.181
35.161.137.250
35.163.175.188
35.163.182.82
35.164.73.219
35.166.89.67
35.172.190.61
35.177.24.120
35.181.14.173
35.192.10.178
35.196.168.91
35.197.115.73
35.205.167.139
35.222.178.45
35.227.57.72
35.227.189.22
35.231.252.44
35.243.167.237
35.243.198.46
35.244.21.122
35.245.35.141
35.246.154.105
35.247.27.84
36.91.91.53
37.59.50.223
37.59.54.172
37.97.207.205
37.97.238.228
37.115.184.19
37.115.189.148
37.187.129.166
37.187.151.220
37.250.199.88
39.107.14.93
40.87.64.218
41.39.71.154
41.210.49.98
41.226.27.239
43.227.254.4
43.251.16.143
45.32.173.30
45.55.47.128
45.55.82.44
45.55.186.234
45.55.188.248
45.55.252.224
45.63.11.23
45.64.1.243
45.64.112.184
45.77.242.188
45.116.79.63
45.117.170.178
45.119.81.92
45.252.248.10
46.22.223.196
46.37.172.252
46.101.17.138
46.101.117.204
46.101.154.38
46.101.201.249
46.105.96.164
46.105.101.178
46.105.154.50
46.118.155.222
47.90.247.218
47.150.249.89
50.17.169.51
50.62.35.103
50.62.161.217
50.62.161.222
50.62.176.243
50.62.177.121
50.62.177.193
50.77.233.185
50.91.71.83
50.101.150.231
51.38.68.96
51.38.133.245
51.38.184.133
51.38.230.224
51.75.94.176
51.83.33.210
51.83.41.247
51.83.94.102
51.83.94.103
51.254.200.204
51.254.217.112
51.255.30.118
51.255.133.120
51.255.210.151
52.3.100.151
52.10.42.116
52.12.191.86
52.13.3.163
52.13.107.62
52.14.8.77
52.14.224.59
52.15.157.217
52.22.87.50
52.23.195.165
52.25.0.97
52.26.110.90
52.30.22.143
52.33.172.225
52.36.87.136
52.36.217.78
52.37.131.108
52.42.94.2
52.71.6.218
52.87.183.20
52.90.114.242
52.91.25.139
52.91.162.164
52.91.245.113
52.204.19.178
52.221.69.147
54.36.89.141
54.36.250.91
54.37.119.218
54.82.247.248
54.82.250.210
54.83.205.45
54.84.43.124
54.86.208.117
54.86.253.175
54.88.101.66
54.89.57.211
54.90.86.231
54.148.84.92
54.148.135.28
54.149.4.50
54.149.214.125
54.149.215.211
54.152.121.211
54.152.154.166
54.157.14.78
54.158.91.6
54.162.48.173
54.164.30.145
54.164.37.41
54.164.74.120
54.164.189.105
54.165.118.103
54.165.194.58
54.167.25.197
54.167.164.162
54.172.215.43
54.173.202.80
54.176.39.143
54.183.230.202
54.184.123.30
54.188.49.25
54.189.183.39
54.191.6.52
54.191.74.178
54.191.86.162
54.191.164.42
54.191.217.245
54.193.41.85
54.198.108.176
54.198.253.213
54.200.167.24
54.201.110.51
54.209.216.77
54.212.40.168
54.212.127.240
54.213.99.184
54.213.249.165
54.218.118.75
54.218.182.35
54.244.175.169
54.244.193.240
54.245.145.198
54.245.209.13
58.17.221.4
58.19.204.129
58.20.36.88
58.109.124.3
58.125.192.201
58.140.108.2
58.246.5.122
60.6.214.48
60.11.113.164
60.30.66.199
60.30.224.189
60.172.64.229
60.216.106.162
60.222.227.195
60.223.252.6
61.50.130.146
61.134.52.164
61.136.82.164
61.136.94.166
61.158.186.84
61.160.207.85
61.163.229.226
61.177.181.109
61.182.82.34
62.4.55.182
62.47.19.62
62.109.30.103
62.151.179.175
62.210.101.223
62.210.185.4
63.111.67.215
64.71.191.163
64.90.40.114
64.191.114.146
66.7.149.135
66.63.190.10
66.63.190.11
66.63.190.12
66.63.190.13
66.63.190.14
67.205.180.197
68.66.243.244
68.183.20.129
68.183.51.126
68.183.52.40
68.183.52.239
68.183.101.123
68.183.107.9
68.183.113.125
69.12.66.202
69.12.66.204
69.12.66.205
69.12.66.206
69.12.66.207
69.12.66.208
69.12.66.209
69.12.66.210
69.12.66.211
69.12.66.213
69.12.66.215
69.12.66.216
69.12.66.217
69.12.66.220
69.12.66.223
69.12.66.224
69.12.66.234
69.12.66.241
69.12.66.244
69.12.72.163
69.12.72.164
69.12.72.165
69.12.72.170
69.12.72.181
69.12.87.130
69.80.43.13
69.162.92.170
69.162.113.186
69.163.234.36
70.182.199.253
72.52.169.207
72.167.51.193
74.59.132.126
74.67.44.17
74.139.16.43
74.208.71.73
74.208.89.119
74.208.183.105
74.208.216.211
74.208.239.79
74.208.244.107
75.11.27.87
75.119.200.116
75.119.200.126
77.37.208.110
77.86.251.201
79.137.112.42
80.216.117.252
81.18.90.9
82.116.32.74
82.223.108.229
84.123.2.144
85.73.228.7
85.148.146.122
85.152.56.230
85.214.17.156
86.195.18.194
86.201.153.152
87.98.153.94
87.98.233.44
87.98.241.175
87.98.251.177
87.98.253.108
87.121.77.43
88.32.17.110
88.83.5.41
88.147.11.28
88.198.14.102
88.230.198.53
89.223.24.233
91.121.219.211
91.134.158.106
91.134.180.211
91.142.222.230
91.160.135.193
91.203.164.3
91.207.174.75
91.226.102.34
92.55.94.30
92.222.50.76
92.222.51.75
92.222.139.251
92.222.202.54
92.243.31.212
93.115.10.241
94.23.70.229
94.23.76.241
94.23.84.44
94.23.89.231
94.23.91.63
94.23.144.162
94.23.147.2
94.23.156.199
94.23.157.38
94.23.164.189
94.23.199.47
94.23.255.34
94.154.13.162
94.176.77.23
94.237.72.134
95.85.15.251
95.105.252.74
95.141.115.93
95.160.159.227
95.216.36.102
96.47.231.221
96.78.222.147
96.127.170.122
97.74.228.245
99.8.92.185
100.24.45.103
101.53.137.204
101.99.75.80
103.1.210.141
103.7.40.198
103.27.63.12
103.94.6.60
103.97.124.187
103.107.87.254
103.119.251.67
103.197.133.3
103.216.63.11
103.221.222.218
103.221.223.20
103.243.25.104
104.129.73.210
104.131.136.70
104.131.173.223
104.156.244.194
104.193.143.55
104.209.223.159
104.236.67.252
104.236.68.160
104.238.80.144
104.248.40.63
104.248.68.159
104.248.77.231
104.248.124.57
104.248.235.238
104.254.247.168
105.112.98.252
106.187.88.186
107.23.44.222
107.23.96.77
107.23.250.54
107.161.176.66
107.180.68.170
107.181.189.40
108.61.62.211
108.175.153.171
110.17.188.30
111.40.84.27
111.40.93.65
111.67.29.99
112.4.235.211
112.27.128.13
112.78.1.59
112.78.10.32
112.149.180.118
113.133.171.56
113.190.240.254
113.214.28.243
115.28.43.234
115.28.145.231
115.28.154.44
115.28.229.143
115.28.245.132
115.29.32.55
115.84.112.138
115.84.182.210
115.132.77.8
115.159.99.54
115.159.102.154
115.230.124.103
116.202.22.79
117.159.84.142
118.24.63.246
118.69.84.44
118.163.58.117
118.163.143.170
119.23.12.170
119.27.178.206
119.29.64.80
119.226.175.133
120.27.35.11
120.27.37.74
120.27.114.224
120.194.7.10
120.194.212.234
121.42.50.93
121.42.152.155
122.225.238.98
123.15.58.162
123.30.168.114
123.249.50.125
124.42.103.139
124.217.227.90
125.17.39.90
125.111.204.132
125.212.225.88
125.212.233.147
128.199.170.154
128.199.181.111
128.199.194.163
128.199.205.152
128.199.222.92
128.199.223.220
128.199.254.136
129.126.133.221
130.211.205.153
131.108.209.110
132.148.87.214
132.148.135.79
132.148.140.240
132.148.148.21
132.148.150.92
134.209.11.118
134.209.15.190
134.209.22.36
134.209.50.90
134.209.245.248
137.74.22.92
137.74.85.74
138.68.10.118
138.68.15.94
138.68.21.195
138.68.85.148
138.68.252.246
138.68.255.230
138.197.45.4
138.197.201.39
138.197.223.160
139.59.78.60
139.59.87.240
139.59.191.7
139.129.14.230
140.143.93.167
142.4.26.198
142.4.208.21
142.4.214.159
142.93.11.6
142.93.39.206
142.93.52.55
142.93.120.74
142.93.204.219
142.93.211.216
144.76.163.47
144.217.161.180
148.74.119.1
149.28.96.212
149.28.241.110
149.255.60.164
150.95.105.108
150.109.118.238
151.30.67.178
151.80.80.7
151.80.80.38
151.80.121.234
153.37.22.155
157.52.132.198
157.230.38.149
157.230.84.196
157.230.102.39
157.230.151.72
157.230.222.149
157.230.228.186
158.69.249.121
158.69.252.78
158.140.137.39
159.65.14.103
159.65.57.49
159.65.129.92
159.65.228.139
159.65.245.206
159.89.160.152
159.203.109.222
159.203.167.210
162.241.179.255
162.243.27.98
162.243.74.89
162.243.205.37
162.255.85.237
164.132.69.134
164.132.108.201
164.132.188.204
165.225.38.64
165.225.170.35
165.227.14.208
165.227.24.126
165.227.73.144
165.227.119.155
165.227.184.73
165.227.214.174
166.62.41.169
167.99.66.175
167.99.76.154
167.99.79.66
167.99.98.28
167.99.168.222
167.99.171.116
167.99.174.179
167.99.201.162
167.99.224.224
167.114.95.218
167.114.232.200
171.244.141.183
173.20.161.168
173.44.34.4
173.44.34.6
173.44.34.44
173.44.35.35
173.44.35.51
173.44.41.233
173.44.41.234
173.44.41.236
173.44.41.248
173.44.41.252
173.44.41.254
173.82.173.97
173.167.185.183
173.172.57.228
173.206.116.101
173.230.225.155
173.236.157.85
173.254.205.67
173.254.205.68
173.254.205.69
173.254.205.70
173.254.227.74
173.254.227.75
173.254.227.76
173.254.227.77
173.254.227.78
174.138.62.92
174.138.73.133
175.19.204.202
176.31.116.34
176.31.126.73
176.31.197.128
176.161.120.14
176.177.151.54
177.19.164.147
177.19.187.79
177.43.49.244
177.43.247.237
177.99.211.149
177.99.217.233
177.135.28.127
177.135.98.161
177.135.103.107
177.159.99.31
178.17.170.135
178.32.49.144
178.32.52.218
178.33.38.59
178.33.76.18
178.33.118.44
178.62.112.34
178.128.7.251
178.128.56.15
178.128.75.224
178.128.83.207
178.128.97.206
178.128.191.139
178.128.220.26
178.137.84.233
180.169.58.42
180.179.212.184
182.176.139.38
182.190.4.53
183.90.238.22
183.103.205.76
183.181.79.54
183.220.53.39
184.75.221.195
184.154.93.133
184.170.145.60
185.2.5.12
185.2.5.20
185.4.63.46
185.12.109.102
185.45.72.102
185.55.225.82
185.62.137.67
185.85.190.132
185.86.164.98
185.86.164.102
185.86.164.109
185.86.164.110
185.163.111.12
185.165.168.229
185.211.245.166
185.220.101.45
185.220.102.7
185.234.217.42
185.253.97.250
186.202.161.16
186.215.143.149
186.215.195.249
186.215.197.15
186.215.197.183
186.215.199.65
186.232.141.151
186.250.92.169
187.45.107.165
187.58.134.57
187.115.123.74
188.64.186.224
188.164.196.153
188.165.0.66
188.165.5.74
188.165.16.119
188.165.29.110
188.165.29.230
188.165.118.89
188.165.137.96
188.165.164.212
188.166.110.80
189.204.6.157
189.204.52.236
189.206.125.171
190.64.71.38
190.106.96.7
190.166.252.202
190.178.125.116
190.202.44.194
190.210.182.93
190.233.49.160
192.34.57.235
192.99.11.224
192.99.13.15
192.99.13.18
192.99.13.29
192.99.15.141
192.169.218.10
192.241.129.70
192.241.148.70
192.241.173.195
192.241.186.29
192.241.212.203
192.241.228.250
193.70.9.76
193.106.31.130
193.172.88.179
193.200.173.172
193.201.224.213
193.201.224.220
193.201.224.225
194.71.109.44
194.113.106.11
194.113.106.125
194.113.106.126
195.78.93.222
197.45.97.216
197.50.105.114
198.27.67.152
198.27.68.80
198.71.57.251
198.100.145.189
198.100.148.124
198.199.94.148
198.199.113.210
198.199.115.8
198.199.117.232
198.211.98.13
198.245.62.228
200.75.219.58
200.146.227.146
201.140.110.78
202.92.7.103
202.93.35.19
202.154.186.31
203.93.109.130
203.195.224.176
204.12.12.182
204.48.27.9
206.81.3.41
206.189.36.106
206.189.93.154
206.189.117.73
206.189.164.211
206.189.166.94
206.189.186.211
206.189.198.137
206.189.201.185
206.198.227.18
207.38.86.10
207.180.228.122
208.43.30.58
209.59.190.100
209.126.97.217
209.141.53.185
209.182.205.181
209.239.122.187
210.16.189.4
210.63.224.172
210.128.159.81
210.188.201.16
210.211.122.243
210.211.125.200
210.212.233.43
210.212.250.41
211.198.225.81
212.129.7.167
212.174.10.12
213.32.46.100
213.59.146.28
213.147.111.187
213.171.220.113
217.61.37.12
217.124.183.197
218.22.129.38
218.26.97.162
218.104.133.243
218.107.46.228
218.189.15.187
218.201.83.148
219.154.66.223
220.164.2.111
220.227.147.150
221.1.177.2
221.3.236.94
221.125.195.245
221.235.184.101
222.42.148.60
222.161.47.82
222.171.61.97

650
bi_cms_1_7d.ipset Normal file
View File

@ -0,0 +1,650 @@
#
# bi_cms_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/1?age=7d
# Source File Date: Sun Apr 21 05:56:43 UTC 2019
#
# Category : attacks
# Version : 1180
#
# This File Date : Sun Apr 21 05:56:43 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 620 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.255.70.86
1.255.70.114
5.199.130.188
14.177.235.133
23.129.64.102
23.254.138.189
24.120.10.18
27.17.15.26
27.42.165.226
31.13.227.4
35.0.127.52
36.7.110.188
36.67.120.85
37.187.129.166
39.108.58.198
41.32.99.6
41.33.229.210
41.39.71.154
41.39.153.11
41.39.153.87
41.128.185.155
41.210.49.98
43.227.254.4
45.55.186.234
46.37.172.95
46.148.17.90
46.165.230.5
46.227.197.73
50.30.47.135
50.62.177.193
51.15.43.205
51.15.49.134
51.15.224.0
51.255.81.102
52.48.76.238
54.36.189.105
58.17.221.4
58.19.204.129
58.20.36.88
58.20.55.71
58.20.185.12
58.20.187.21
58.56.145.94
58.58.135.158
58.59.14.195
58.62.55.130
58.125.192.201
58.140.108.2
58.143.207.2
58.211.169.50
58.214.24.53
58.215.13.154
58.240.2.38
58.240.111.50
58.242.164.10
58.244.173.130
58.244.188.78
58.246.5.122
59.125.2.63
60.2.15.52
60.2.50.114
60.2.101.221
60.6.214.48
60.6.216.243
60.6.223.191
60.6.227.95
60.8.207.34
60.11.113.164
60.13.197.131
60.28.131.10
60.30.66.199
60.30.224.189
60.161.139.49
60.166.48.158
60.169.26.22
60.172.43.228
60.172.231.12
60.174.37.226
60.174.118.80
60.174.192.240
60.191.206.110
60.209.163.54
60.216.106.162
60.216.116.178
60.222.227.195
60.223.252.6
60.250.29.229
61.37.150.6
61.50.130.146
61.53.66.4
61.134.52.164
61.136.81.154
61.136.81.234
61.136.82.164
61.136.94.166
61.148.196.114
61.150.76.201
61.153.54.38
61.153.215.122
61.158.140.152
61.158.186.84
61.161.147.218
61.161.209.134
61.163.36.24
61.163.69.170
61.163.196.149
61.163.229.226
61.163.231.150
61.164.81.210
61.167.79.135
61.177.25.58
61.177.181.109
61.178.160.83
61.180.38.132
61.182.27.121
61.182.82.34
61.184.35.3
61.185.137.161
61.185.139.72
61.186.136.36
61.186.219.33
61.187.123.74
61.189.47.93
61.190.16.210
61.191.130.198
61.191.220.250
61.219.67.188
61.232.0.130
62.99.80.170
62.176.7.182
62.210.37.82
64.90.40.114
64.113.32.29
65.19.167.132
66.109.30.139
74.208.216.211
74.208.244.107
77.37.208.110
77.247.181.162
77.247.181.165
78.83.105.149
80.67.172.162
80.127.116.96
80.147.59.28
82.130.202.35
82.208.65.46
85.174.224.42
88.32.17.110
89.31.57.5
89.234.157.254
91.183.149.230
91.210.144.219
91.210.145.65
91.225.77.71
91.226.102.34
91.233.156.93
92.243.31.212
94.23.248.69
94.46.149.17
94.46.169.5
94.156.119.230
94.190.76.207
94.230.208.147
94.230.208.148
97.74.6.168
97.74.228.245
101.231.140.218
103.21.142.12
103.53.230.75
104.238.80.144
109.201.133.100
110.17.188.30
110.80.33.226
111.1.89.230
111.26.198.30
111.40.73.83
111.40.84.27
111.40.93.65
111.43.111.140
111.59.53.130
111.85.215.66
111.225.204.158
111.230.59.86
112.4.172.182
112.4.235.211
112.16.203.48
112.16.214.182
112.23.7.76
112.23.7.88
112.24.103.242
112.24.104.228
112.26.80.46
112.26.80.145
112.26.82.61
112.26.122.164
112.27.128.13
112.27.129.154
112.27.130.127
112.78.10.32
112.91.58.238
112.91.59.106
112.113.241.17
112.175.232.147
113.8.194.3
113.140.84.86
113.160.133.240
113.162.84.112
113.204.147.26
114.35.243.41
114.103.180.148
114.108.150.159
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.17.58
115.28.28.62
115.28.43.234
115.28.71.161
115.28.76.22
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.84.112.138
115.159.99.54
115.159.147.138
115.236.24.10
115.238.247.228
116.113.86.246
116.113.96.22
116.228.90.9
116.248.41.55
117.28.250.42
117.141.112.147
117.141.215.16
117.149.2.142
117.159.84.142
118.24.63.246
118.89.31.212
118.121.38.89
118.121.233.54
118.144.8.198
118.163.58.117
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
119.6.89.127
119.10.114.92
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
119.39.84.75
119.153.112.90
119.204.177.120
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.29.140.188
120.35.12.153
120.76.114.201
120.76.121.20
120.76.132.64
120.76.146.29
120.76.176.146
120.192.201.22
120.194.7.10
120.194.193.7
120.194.212.234
120.203.25.58
120.209.31.231
120.209.71.14
120.209.71.73
120.209.164.118
120.209.233.191
120.236.135.204
121.28.40.179
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
121.59.9.73
121.128.135.73
122.193.106.54
122.224.3.12
122.225.238.98
122.226.136.90
122.227.20.90
122.228.165.38
123.7.54.235
123.15.58.162
123.57.254.142
123.206.197.121
123.206.212.37
123.207.5.43
123.232.125.198
123.234.215.242
124.42.103.139
124.65.64.174
124.66.133.106
124.128.25.147
124.128.73.58
124.207.209.114
125.17.39.90
125.75.206.244
125.77.72.197
125.77.127.97
125.227.146.182
125.227.179.59
128.199.223.220
134.249.141.24
138.197.22.180
138.197.46.208
139.59.66.225
139.129.14.230
139.129.40.112
139.129.130.253
140.143.90.193
142.4.26.198
145.239.91.37
151.80.10.50
153.37.22.155
162.247.74.27
163.172.160.182
169.239.220.35
171.8.76.24
171.221.255.5
175.19.204.202
175.198.214.201
175.230.213.33
176.10.99.200
176.10.104.240
177.19.164.147
177.19.164.149
177.19.165.26
177.19.181.169
177.19.187.79
177.43.247.237
177.43.251.153
177.99.211.149
177.99.217.233
177.135.98.161
177.135.101.5
177.135.101.93
177.135.103.25
177.135.103.107
177.159.99.31
177.159.99.89
177.159.122.251
178.32.147.150
178.75.3.120
180.169.58.42
182.71.45.122
182.71.206.138
182.75.117.122
182.106.216.4
182.137.14.72
182.176.139.38
182.176.139.142
182.190.3.182
182.190.4.60
182.190.4.68
182.190.4.84
182.223.115.219
182.254.129.82
183.62.158.97
183.64.166.163
183.220.53.39
183.224.81.214
185.84.180.48
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.86.13.213
185.86.93.2
185.86.93.20
185.86.93.25
185.86.93.30
185.86.93.33
185.86.93.34
185.86.93.40
185.86.93.55
185.86.93.57
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.99.36.170
185.100.87.207
185.107.47.171
185.119.81.11
185.119.81.50
185.165.168.229
185.220.100.253
185.220.101.3
185.220.101.6
185.220.101.13
185.220.101.26
185.220.101.30
185.220.101.44
185.220.101.45
185.220.101.46
185.220.102.6
185.220.102.7
185.234.217.207
186.194.114.14
186.215.130.159
186.215.130.242
186.215.143.149
186.215.195.249
186.215.197.15
186.215.197.183
186.215.199.65
186.215.199.69
186.232.136.240
186.232.141.151
186.232.141.156
187.58.134.43
187.58.134.57
187.58.139.171
187.115.123.74
188.32.19.9
188.166.188.97
189.59.5.81
189.59.69.3
189.114.67.213
189.114.140.70
189.204.6.157
189.204.52.236
189.204.52.237
189.206.125.171
190.13.106.62
190.13.106.123
190.13.106.220
190.56.70.131
190.109.164.74
190.202.44.194
190.210.9.41
190.210.182.93
192.42.116.13
192.42.116.15
192.99.232.154
192.160.102.164
192.160.102.170
193.112.48.249
193.201.224.220
193.201.224.225
193.227.179.18
194.150.113.94
195.22.100.5
196.218.157.4
196.219.96.108
196.219.154.248
197.44.136.0
197.231.221.211
199.127.226.150
200.29.136.155
200.175.104.101
201.140.110.78
201.184.241.243
202.78.71.2
202.92.7.103
202.93.35.19
202.137.141.81
202.162.29.215
203.41.236.130
203.93.109.130
203.242.126.4
207.244.70.35
208.43.30.58
209.59.190.100
210.16.189.4
210.57.216.56
211.20.181.113
211.75.13.207
211.92.143.94
211.137.8.103
211.141.155.131
211.141.209.131
211.161.90.99
211.181.72.238
211.232.116.144
212.109.17.68
212.142.226.93
213.58.202.70
213.156.100.220
216.189.15.251
216.239.90.19
217.64.195.204
217.79.6.115
218.22.129.38
218.22.135.190
218.23.156.227
218.23.162.169
218.24.236.4
218.26.97.162
218.26.163.125
218.28.50.51
218.28.58.186
218.28.171.213
218.28.234.53
218.29.52.2
218.29.219.18
218.56.102.14
218.57.142.194
218.57.237.243
218.58.105.206
218.64.57.12
218.64.77.62
218.64.165.194
218.75.148.181
218.77.80.51
218.87.254.235
218.90.162.234
218.92.229.178
218.94.144.101
218.104.133.243
218.104.234.173
218.107.46.228
218.189.15.187
218.200.61.170
218.201.62.71
218.201.79.71
218.201.83.148
218.201.101.172
218.204.69.3
218.204.70.20
218.206.210.194
218.249.232.178
219.138.59.240
219.148.39.134
219.149.30.61
219.149.220.82
219.154.66.223
219.154.133.161
219.159.70.68
220.124.240.66
220.164.2.88
220.164.2.99
220.164.2.111
220.164.2.114
220.164.2.120
220.164.193.238
220.165.28.189
220.169.102.6
220.174.209.154
220.178.107.242
220.225.7.42
220.227.147.150
221.1.177.2
221.3.236.94
221.4.205.30
221.7.133.28
221.12.137.6
221.130.130.238
221.131.86.182
221.176.112.45
221.176.134.36
221.176.176.126
221.178.194.144
221.199.41.218
221.224.25.26
221.228.242.13
221.230.139.83
221.231.109.126
222.35.21.206
222.42.148.60
222.92.142.226
222.101.93.2
222.141.50.134
222.160.126.34
222.161.47.82
222.161.209.130
222.171.61.97
222.172.14.115
222.173.242.10
222.185.255.227
222.187.41.10
222.188.95.202
222.189.186.67
222.191.233.238
222.218.248.42
222.222.219.154
222.223.101.58
222.229.112.168
222.242.226.99
223.68.185.218
223.100.12.172
223.100.152.42

893
bi_cms_2_30d.ipset Normal file
View File

@ -0,0 +1,893 @@
#
# bi_cms_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# cms with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/cms/2?age=30d
# Source File Date: Sun Apr 21 04:20:49 UTC 2019
#
# Category : attacks
# Version : 303
#
# This File Date : Sun Apr 21 04:20:49 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 863 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_cms_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.255.70.86
1.255.70.114
1.255.70.123
2.119.45.57
5.135.158.101
5.188.62.117
5.196.1.129
5.199.130.188
14.177.235.133
23.129.64.102
23.226.69.242
23.238.18.241
23.254.138.189
24.120.10.18
27.17.15.26
27.42.165.226
27.189.251.86
31.13.227.4
31.168.157.167
35.0.127.52
36.7.110.188
36.33.0.160
36.33.35.217
36.67.61.165
36.67.120.85
37.187.129.166
37.187.132.5
39.108.58.198
39.108.187.244
41.32.18.81
41.32.99.6
41.32.142.74
41.32.184.75
41.33.229.210
41.38.174.254
41.38.198.106
41.39.47.132
41.39.71.154
41.39.153.11
41.39.153.87
41.128.185.155
41.210.49.98
43.227.254.4
45.55.186.234
46.37.172.95
46.148.17.90
46.165.230.5
46.181.60.178
46.227.197.73
47.98.165.187
47.98.175.190
47.98.176.76
50.30.47.135
50.62.176.163
50.62.177.110
50.62.177.193
51.15.43.205
51.15.49.134
51.15.224.0
51.255.81.102
54.36.189.105
58.16.29.26
58.17.221.4
58.19.204.129
58.20.36.88
58.20.55.71
58.20.185.12
58.20.187.21
58.52.131.108
58.56.145.94
58.58.135.158
58.59.14.195
58.62.55.130
58.97.8.10
58.125.192.201
58.210.119.226
58.210.126.206
58.211.64.222
58.211.169.50
58.214.24.53
58.214.25.190
58.214.239.53
58.215.13.154
58.216.156.58
58.240.2.38
58.240.111.50
58.242.164.10
58.244.173.130
58.244.188.78
58.246.5.122
59.45.222.24
59.49.233.24
59.125.2.63
60.2.15.52
60.2.50.114
60.2.101.221
60.6.214.48
60.6.216.243
60.6.223.191
60.6.227.95
60.8.207.34
60.11.113.164
60.13.181.244
60.13.197.131
60.28.131.10
60.29.163.114
60.30.66.199
60.30.224.189
60.161.139.49
60.166.48.158
60.169.26.22
60.171.110.17
60.171.135.254
60.171.155.26
60.172.22.178
60.172.43.228
60.172.231.12
60.174.37.226
60.174.118.80
60.174.130.19
60.174.192.240
60.191.206.110
60.209.163.54
60.212.42.56
60.216.106.162
60.216.116.178
60.222.227.195
60.223.252.6
60.250.29.229
61.37.150.6
61.50.130.146
61.53.66.4
61.82.71.36
61.128.208.174
61.134.52.164
61.136.81.154
61.136.81.234
61.136.82.164
61.136.94.166
61.136.104.131
61.148.29.198
61.148.124.108
61.148.196.114
61.150.76.90
61.150.76.201
61.153.54.38
61.153.215.122
61.158.140.152
61.158.186.84
61.161.147.218
61.161.209.134
61.163.36.24
61.163.69.170
61.163.196.149
61.163.229.226
61.163.231.150
61.164.81.210
61.167.79.135
61.177.25.58
61.177.181.109
61.178.160.83
61.180.38.132
61.182.27.121
61.182.82.34
61.184.35.3
61.184.176.231
61.185.137.161
61.185.139.72
61.186.136.36
61.186.219.33
61.187.123.74
61.189.47.93
61.190.16.210
61.190.99.62
61.191.130.198
61.191.220.250
61.219.67.188
61.232.0.130
62.99.78.120
62.99.80.128
62.99.80.170
62.210.37.82
62.210.112.27
62.210.139.92
62.210.185.4
64.113.32.29
65.19.167.131
65.19.167.132
66.109.30.139
72.44.70.134
74.208.216.211
74.208.244.107
77.247.181.162
77.247.181.163
77.247.181.165
78.4.254.171
78.83.105.149
80.22.131.131
80.67.172.162
80.147.59.28
81.1.242.165
81.10.3.180
82.130.202.35
82.208.65.46
85.152.56.230
85.174.224.42
85.234.37.114
86.109.170.96
87.118.92.43
88.32.17.110
89.31.57.5
89.234.157.254
91.134.248.211
91.134.248.235
91.134.248.245
91.134.248.253
91.183.149.230
91.210.144.219
91.210.146.160
91.210.147.250
91.221.109.101
91.233.156.93
91.238.136.5
91.238.163.173
92.222.170.161
92.243.31.212
93.146.73.50
94.156.119.230
94.190.76.207
95.211.209.158
95.211.211.232
97.74.6.168
97.74.228.245
101.231.140.218
103.3.65.35
103.21.142.12
103.27.239.160
103.53.230.75
105.155.254.214
109.61.102.126
109.201.133.100
109.226.63.83
110.17.188.30
110.80.33.226
110.249.218.69
111.1.89.230
111.26.198.30
111.30.31.176
111.38.140.12
111.40.73.83
111.40.84.27
111.40.93.65
111.43.111.140
111.59.53.130
111.75.167.157
111.85.15.4
111.85.215.66
111.121.220.219
111.204.225.178
111.206.163.56
111.230.48.64
111.230.51.65
111.230.52.42
111.230.59.86
112.2.13.93
112.4.172.182
112.4.235.211
112.16.203.48
112.16.214.182
112.23.7.76
112.23.7.88
112.24.103.242
112.24.104.228
112.24.104.236
112.25.220.99
112.26.80.46
112.26.80.145
112.26.82.52
112.26.82.61
112.26.122.164
112.27.128.13
112.27.129.78
112.27.129.154
112.27.130.127
112.53.66.27
112.74.94.30
112.91.58.238
112.91.59.106
112.101.80.250
112.113.241.17
112.175.232.147
112.218.211.227
113.8.194.3
113.140.48.156
113.140.84.86
113.160.133.240
113.204.147.26
114.32.181.215
114.35.243.41
114.103.180.148
114.104.162.36
114.108.150.159
114.199.112.138
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.17.58
115.28.28.62
115.28.43.234
115.28.44.252
115.28.71.161
115.28.76.22
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.84.105.146
115.84.112.138
115.159.99.54
115.159.147.138
115.236.7.170
115.236.24.10
115.238.34.226
115.238.247.228
116.113.86.246
116.113.96.22
116.228.90.9
116.248.41.55
116.249.127.11
117.28.250.42
117.57.168.80
117.141.112.147
117.141.215.16
117.149.2.142
117.159.84.142
118.24.63.246
118.89.31.212
118.89.139.150
118.121.38.89
118.121.233.54
118.144.8.198
118.144.83.130
118.163.58.117
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
118.163.146.70
118.163.216.107
119.6.89.127
119.10.114.92
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
119.39.84.75
119.53.91.170
119.53.149.66
119.146.145.50
119.153.112.90
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.29.140.188
120.35.12.153
120.76.114.201
120.76.121.20
120.76.126.197
120.76.132.64
120.76.146.29
120.76.176.146
120.192.201.22
120.194.7.10
120.194.173.77
120.194.193.7
120.194.212.234
120.202.36.46
120.203.25.58
120.209.31.231
120.209.71.14
120.209.71.73
120.209.164.118
120.209.233.191
120.236.135.204
121.28.40.179
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
121.59.9.73
121.128.135.73
121.128.135.75
122.193.106.54
122.224.3.12
122.224.36.28
122.225.238.98
122.226.136.90
122.227.20.90
122.228.165.38
123.7.54.235
123.15.58.162
123.57.254.142
123.138.199.66
123.206.197.121
123.206.212.37
123.207.5.43
123.207.29.152
123.207.45.15
123.207.94.126
123.232.125.198
123.234.215.242
123.249.50.75
124.42.103.139
124.65.64.174
124.66.133.106
124.105.249.210
124.128.25.147
124.128.35.218
124.128.73.58
124.161.35.88
124.165.232.138
124.165.247.42
124.193.199.202
124.207.57.146
124.207.209.114
125.17.39.90
125.35.93.62
125.64.94.206
125.75.206.244
125.77.72.197
125.77.127.97
125.227.146.182
125.227.179.59
128.31.0.13
134.249.141.24
137.74.167.96
139.129.14.230
139.129.40.112
139.129.60.64
139.129.130.253
140.143.90.193
140.143.93.167
145.239.91.37
153.37.22.155
157.122.183.218
157.122.183.220
163.172.160.182
169.239.220.35
171.8.76.24
171.25.193.25
171.34.168.247
171.221.253.69
171.221.255.5
175.19.204.202
175.198.214.201
175.230.213.33
176.10.99.200
176.10.104.240
176.10.107.180
177.19.164.147
177.19.164.149
177.19.165.26
177.19.181.169
177.19.187.79
177.43.247.237
177.43.251.153
177.99.211.149
177.99.217.233
177.135.98.161
177.135.101.5
177.135.101.93
177.135.103.25
177.135.103.107
177.159.99.31
177.159.99.89
177.159.103.9
177.159.122.251
178.17.170.194
178.32.147.150
178.32.224.119
178.74.70.82
179.184.23.195
179.184.115.3
180.169.36.92
180.169.58.42
182.71.45.122
182.71.146.22
182.71.239.18
182.74.112.226
182.75.82.102
182.75.117.122
182.106.216.4
182.137.14.72
182.176.139.38
182.176.139.142
182.176.203.38
182.190.3.182
182.190.4.53
182.190.4.60
182.190.4.68
182.190.4.84
182.223.115.219
182.254.129.82
183.62.158.97
183.64.166.163
183.102.114.251
183.112.115.205
183.167.231.206
183.220.53.39
183.224.81.214
185.11.240.205
185.59.75.47
185.84.180.48
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.85.239.195
185.86.13.213
185.86.93.11
185.86.93.13
185.86.93.15
185.86.93.36
185.86.93.39
185.86.93.40
185.86.93.60
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.104
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.100.87.207
185.107.47.171
185.119.81.11
185.119.81.50
185.165.168.229
185.166.131.147
185.220.100.253
185.220.101.3
185.220.101.5
185.220.101.6
185.220.101.13
185.220.101.20
185.220.101.26
185.220.101.27
185.220.101.28
185.220.101.29
185.220.101.30
185.220.101.32
185.220.101.33
185.220.101.34
185.220.101.44
185.220.101.45
185.220.101.46
185.220.102.4
185.220.102.6
185.220.102.7
185.234.217.207
186.194.114.14
186.215.130.159
186.215.130.242
186.215.139.209
186.215.143.149
186.215.195.249
186.215.197.15
186.215.197.183
186.215.199.65
186.215.199.69
186.229.28.106
186.232.136.240
186.232.141.145
186.232.141.151
187.58.134.43
187.58.134.57
187.58.134.87
187.58.139.171
187.58.139.189
187.115.123.74
188.165.224.207
188.168.81.241
188.237.250.100
189.59.5.81
189.59.5.91
189.59.69.3
189.89.240.110
189.114.67.141
189.114.67.195
189.114.67.213
189.114.140.70
189.204.6.157
189.204.52.236
189.204.52.237
189.206.125.171
189.254.142.228
190.13.106.62
190.13.106.99
190.13.106.108
190.13.106.123
190.13.106.214
190.13.106.220
190.56.70.131
190.109.164.74
190.202.44.194
190.210.182.93
192.42.116.13
192.42.116.15
192.42.116.16
192.99.232.154
192.160.102.164
192.160.102.170
193.112.48.249
193.201.224.220
193.201.224.225
193.227.179.18
194.165.132.194
195.9.189.190
195.22.100.5
195.176.3.19
196.218.157.4
196.219.77.218
196.219.96.108
196.219.154.248
197.44.136.0
197.44.214.61
197.45.97.216
197.45.117.177
197.50.15.189
197.50.105.120
197.51.59.138
197.231.221.211
198.46.81.31
198.57.210.93
198.96.155.3
199.127.226.150
200.29.136.155
200.129.150.3
200.175.104.101
200.175.104.103
201.47.245.162
201.47.252.79
201.140.110.78
201.184.241.243
202.52.137.72
202.56.164.147
202.78.71.2
202.92.4.34
202.92.7.103
202.93.35.19
202.97.147.183
202.103.61.102
202.107.34.250
202.111.43.14
202.137.141.81
203.41.236.130
203.93.109.130
203.242.126.4
204.17.56.42
207.244.70.35
209.59.190.100
210.16.189.4
210.16.189.19
210.86.162.228
210.86.168.116
211.20.181.113
211.75.13.207
211.92.143.94
211.137.8.103
211.138.182.198
211.141.155.131
211.141.209.131
211.161.90.99
211.181.72.238
211.221.155.6
211.232.116.143
211.232.116.144
211.232.116.147
212.21.66.6
212.34.152.251
212.109.17.68
212.142.159.61
212.142.226.93
212.220.56.185
213.58.202.70
213.156.100.220
213.206.238.164
213.251.182.110
213.251.182.114
216.189.15.251
216.239.90.19
217.26.1.82
218.4.177.21
218.22.129.38
218.22.135.190
218.22.180.146
218.22.187.66
218.22.198.212
218.23.156.227
218.23.162.169
218.24.236.4
218.26.97.162
218.26.163.125
218.27.162.22
218.28.50.51
218.28.58.186
218.28.164.218
218.28.171.213
218.28.234.53
218.29.52.2
218.29.219.18
218.56.102.14
218.57.142.194
218.57.237.243
218.58.105.206
218.64.57.12
218.64.77.62
218.64.165.194
218.65.220.48
218.75.148.181
218.76.252.245
218.77.80.51
218.87.46.173
218.87.254.235
218.90.162.234
218.92.229.178
218.94.144.101
218.104.133.243
218.104.234.173
218.107.46.228
218.107.49.71
218.189.15.187
218.200.61.170
218.201.14.134
218.201.62.71
218.201.79.71
218.201.83.148
218.201.101.172
218.204.69.3
218.204.70.20
218.204.138.137
218.206.132.194
218.206.210.194
218.207.103.168
218.249.232.178
219.138.59.240
219.148.39.134
219.149.30.61
219.149.220.82
219.154.66.223
219.154.133.161
219.159.70.68
219.159.229.115
220.124.240.66
220.164.2.88
220.164.2.99
220.164.2.100
220.164.2.111
220.164.2.114
220.164.2.116
220.164.2.118
220.164.2.120
220.164.193.238
220.165.28.189
220.169.102.6
220.171.48.39
220.173.107.124
220.174.209.154
220.178.107.242
220.180.110.144
220.225.7.42
220.227.147.150
221.1.177.2
221.3.236.94
221.4.128.114
221.4.197.154
221.4.205.30
221.7.133.28
221.12.137.6
221.130.130.238
221.131.83.162
221.131.86.182
221.176.112.45
221.176.134.36
221.176.176.126
221.178.138.106
221.178.194.144
221.193.248.52
221.199.41.218
221.199.43.146
221.212.18.146
221.224.25.26
221.224.114.229
221.226.50.162
221.228.242.13
221.229.247.179
221.230.139.83
221.231.109.126
222.35.21.206
222.42.148.60
222.73.129.15
222.91.248.106
222.92.142.226
222.92.204.50
222.101.93.2
222.141.50.134
222.160.126.34
222.161.47.82
222.161.209.130
222.161.229.55
222.162.70.249
222.169.186.242
222.170.168.66
222.171.61.97
222.172.14.115
222.173.242.10
222.175.49.22
222.179.214.217
222.185.255.227
222.187.41.10
222.188.95.202
222.189.186.67
222.191.233.238
222.218.17.20
222.218.248.42
222.222.71.101
222.222.219.154
222.223.56.116
222.223.101.58
222.229.112.168
222.242.226.99
222.242.230.123
223.27.218.54
223.68.185.218
223.100.12.172
223.100.152.42

30
bi_courierauth_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_courierauth_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# courierauth with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/courierauth/0?age=1d
# Source File Date: Sat Apr 20 02:16:32 UTC 2019
#
# Category : attacks
# Version : 3597
#
# This File Date : Sat Apr 20 02:48:26 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_courierauth_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

View File

@ -0,0 +1,30 @@
#
# bi_courierauth_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# courierauth with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/courierauth/2?age=30d
# Source File Date: Sat Mar 30 07:56:32 UTC 2019
#
# Category : attacks
# Version : 77
#
# This File Date : Sun Mar 31 08:08:41 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_courierauth_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

860
bi_default_0_1d.ipset Normal file
View File

@ -0,0 +1,860 @@
#
# bi_default_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/0?age=1d
# Source File Date: Sun Apr 21 10:04:48 UTC 2019
#
# Category : attacks
# Version : 14121
#
# This File Date : Sun Apr 21 10:04:48 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 830 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.21.100
1.119.162.197
1.179.137.10
1.213.195.154
1.236.151.31
2.28.16.231
2.238.151.179
4.71.111.102
5.26.109.56
5.39.16.117
5.39.85.220
5.148.3.212
5.196.110.170
13.64.93.10
13.127.246.75
14.18.115.2
14.63.174.149
14.63.221.108
14.102.127.69
24.37.196.182
24.188.239.163
27.106.45.6
27.150.169.223
27.254.13.198
35.222.86.85
35.224.199.230
35.226.109.107
35.239.132.125
36.66.203.23
36.82.104.132
36.89.214.234
36.91.24.27
36.155.2.246
37.59.6.106
37.59.99.243
37.139.13.105
37.187.54.67
37.187.127.13
37.187.147.84
37.195.105.57
40.71.188.26
40.73.25.111
40.117.229.31
40.124.4.131
41.72.105.171
41.76.149.212
41.131.119.107
41.222.196.57
43.225.117.245
43.225.166.162
43.254.160.164
45.55.41.232
45.55.63.164
45.55.145.31
45.55.182.232
45.55.254.13
45.118.145.51
45.227.255.82
46.29.166.60
46.44.201.212
46.101.1.198
46.101.101.66
46.101.119.94
46.101.230.131
46.105.98.93
46.148.192.41
47.22.135.70
47.44.115.81
47.154.229.133
47.184.202.120
49.84.213.159
49.206.196.114
49.244.38.54
50.248.154.57
50.250.231.41
50.251.172.145
51.9.29.160
51.38.112.45
51.38.186.207
51.38.239.50
51.68.122.216
51.68.189.69
51.68.243.1
51.75.18.120
51.75.26.106
51.75.29.61
51.75.37.28
51.75.65.72
51.75.127.147
51.75.195.222
51.75.205.122
51.75.253.20
51.77.137.103
51.77.141.158
51.255.173.160
51.255.174.164
52.166.56.37
52.247.165.205
54.36.112.147
54.37.68.191
54.37.69.113
54.37.138.172
54.38.33.73
54.38.50.99
54.38.188.34
54.39.145.31
58.22.61.212
58.56.140.62
58.61.142.98
58.64.144.108
58.87.67.142
58.140.223.5
58.144.150.233
59.36.173.179
60.29.241.2
60.251.146.74
61.37.82.220
61.93.201.198
61.149.183.242
61.163.196.137
61.177.38.66
62.234.201.168
65.48.219.31
65.96.111.18
66.70.188.25
67.187.30.77
67.205.163.213
67.218.96.156
68.183.84.15
68.183.115.83
68.183.115.176
68.183.122.94
68.183.124.53
68.183.132.245
68.188.68.18
70.89.88.3
71.234.172.214
74.92.210.138
75.138.186.120
76.27.163.60
77.148.225.149
77.221.21.148
77.237.1.111
78.193.8.166
78.195.160.147
78.203.68.178
78.231.63.148
79.2.9.254
79.7.217.174
79.137.72.171
79.137.86.205
80.52.199.93
80.53.7.213
80.99.17.116
80.226.132.184
81.136.241.89
81.136.255.20
82.64.9.197
82.117.190.170
82.135.198.252
82.144.6.116
82.196.4.46
82.200.168.94
82.200.226.226
82.213.224.48
82.239.217.87
83.48.29.116
83.212.105.80
84.58.60.135
84.93.153.9
84.216.77.222
84.217.109.6
84.236.67.102
85.70.70.64
85.233.153.67
85.246.135.70
86.42.91.227
86.43.103.111
86.98.58.199
87.27.84.145
87.197.7.25
87.197.135.199
88.119.221.196
88.167.94.24
88.210.134.54
89.3.236.207
89.36.212.148
89.39.142.34
89.109.190.50
89.134.194.209
89.154.133.167
89.154.162.113
89.155.41.131
90.165.114.182
90.171.227.63
90.189.117.121
91.121.7.107
91.121.142.225
91.121.211.34
91.134.241.32
92.59.21.55
92.62.131.113
92.91.60.249
92.154.53.93
92.222.69.23
92.222.70.252
93.66.56.27
93.150.33.134
94.21.127.78
94.23.0.13
94.23.30.183
94.23.212.137
94.177.215.195
94.177.229.191
94.191.68.83
94.191.87.254
94.191.102.171
94.198.110.205
95.58.194.141
95.58.194.148
95.90.137.66
95.224.54.201
96.78.175.36
96.114.71.147
96.224.240.84
99.149.251.77
101.71.2.111
101.91.214.178
101.228.143.176
103.8.119.166
103.17.159.54
103.21.148.16
103.23.100.183
103.37.160.252
103.39.133.110
103.60.137.4
103.91.183.29
103.92.85.202
103.94.130.4
103.113.105.11
103.198.131.249
103.207.2.204
103.209.20.36
103.217.217.146
103.244.82.231
103.249.205.78
104.131.37.34
104.131.93.33
104.211.217.225
104.236.38.105
104.236.77.96
104.236.93.172
104.236.148.47
104.236.181.90
104.236.246.127
104.236.249.50
104.238.116.19
104.248.24.192
104.248.44.227
104.248.57.21
104.248.88.33
104.248.95.188
104.248.174.126
104.248.175.98
104.248.182.111
104.248.183.0
104.248.211.180
106.2.6.143
106.12.5.204
106.12.28.36
106.12.36.21
106.12.39.227
106.12.85.76
106.12.90.123
106.12.100.179
106.12.107.23
106.12.108.23
106.12.117.114
106.12.131.50
106.12.132.3
106.12.194.79
106.12.196.238
106.12.202.180
106.12.203.32
106.12.204.44
106.12.215.125
106.12.216.140
106.12.216.210
106.12.221.10
106.13.11.225
106.13.39.154
106.13.39.234
106.13.44.83
106.13.47.10
106.13.65.210
106.13.88.44
106.13.89.192
106.13.99.221
106.13.101.129
106.51.66.214
106.75.64.70
106.240.127.67
107.167.180.11
107.170.63.221
107.170.249.81
108.176.0.2
109.92.27.17
109.207.159.178
109.237.81.98
110.52.151.157
110.53.215.122
111.122.181.250
111.205.93.188
111.230.21.80
111.230.112.37
111.230.155.145
111.230.209.21
111.230.227.17
111.230.241.90
111.231.54.248
111.231.63.14
111.231.112.235
111.231.144.219
111.231.204.127
112.26.44.112
112.112.102.79
112.140.185.64
112.169.9.149
112.220.104.210
113.15.209.31
113.134.211.228
113.161.66.214
113.203.237.86
113.204.66.138
114.7.170.194
114.32.230.189
114.67.227.241
114.67.231.65
114.113.221.162
114.118.91.64
114.143.59.202
114.242.34.220
115.132.151.69
115.159.216.187
115.159.235.17
115.248.198.106
116.236.141.36
117.1.82.107
117.3.69.194
117.48.208.200
117.48.212.113
118.24.22.222
118.24.30.101
118.24.33.65
118.24.41.104
118.24.83.1
118.24.201.114
118.24.216.148
118.25.3.34
118.25.27.67
118.25.40.74
118.25.46.72
118.25.48.248
118.25.55.87
118.25.61.152
118.25.138.95
118.27.16.122
118.70.118.236
118.89.20.131
118.89.106.252
118.98.127.138
118.107.233.29
118.193.80.106
118.222.146.186
119.27.173.72
119.27.188.153
119.27.189.46
119.28.226.230
119.29.98.253
119.29.107.20
119.29.138.250
119.29.228.236
119.197.77.52
120.92.102.121
120.131.13.186
121.30.255.134
122.114.79.77
122.115.43.147
122.144.212.142
122.165.207.151
122.176.85.148
122.224.203.228
122.227.202.174
123.30.149.40
123.30.240.121
123.59.63.140
123.207.137.176
123.207.140.248
123.207.233.84
124.95.132.243
124.207.193.119
125.209.124.155
125.211.166.243
125.212.254.144
128.0.120.112
128.199.69.86
128.199.87.114
128.199.109.58
128.199.145.242
128.199.212.82
128.199.216.250
129.146.121.201
129.204.58.180
129.204.85.252
129.204.141.3
129.204.161.47
129.204.210.237
129.211.12.119
129.213.131.22
129.213.147.93
132.232.33.161
132.232.44.85
132.232.64.124
132.232.80.107
132.232.81.207
132.232.104.106
132.232.227.102
132.232.248.82
132.255.29.228
133.130.119.178
134.175.93.162
134.175.112.251
134.175.168.97
134.175.200.70
134.175.219.34
134.209.7.179
134.209.90.139
134.209.100.93
134.209.114.86
134.209.124.147
137.74.42.235
137.74.44.162
138.68.17.96
138.68.146.186
138.68.226.175
138.68.228.1
138.121.128.42
138.197.140.194
138.197.147.233
138.197.153.228
138.197.166.233
138.197.197.174
138.219.229.212
139.59.9.58
139.59.13.223
139.59.17.173
139.59.35.117
139.59.59.90
139.59.59.154
139.59.74.143
139.59.75.219
139.59.82.59
139.59.85.89
139.59.92.10
139.59.140.55
139.59.141.137
139.59.181.7
139.59.189.62
139.59.228.147
139.59.239.185
139.99.98.248
139.99.202.72
139.199.14.128
139.199.105.82
139.199.175.246
139.199.201.66
139.199.227.208
139.219.107.11
139.228.191.249
140.143.136.89
140.143.183.71
140.143.208.180
140.143.227.43
140.143.230.156
140.143.230.233
140.143.244.198
141.144.120.163
142.44.247.87
142.93.11.10
142.93.39.29
142.93.39.181
142.93.140.101
142.93.198.48
142.93.218.84
142.93.218.128
142.93.228.105
142.93.232.144
142.93.238.103
143.0.100.230
144.217.83.201
144.217.170.65
145.239.29.13
146.185.130.101
146.185.175.132
147.135.209.40
148.70.71.137
148.72.40.221
148.233.0.22
149.56.15.98
149.56.99.180
149.202.65.173
150.109.37.75
151.53.243.41
151.80.140.166
151.80.153.174
151.80.207.9
154.8.217.73
157.0.30.130
157.92.26.222
157.100.133.21
157.230.62.33
157.230.131.33
157.230.142.37
157.230.159.148
157.230.182.251
157.230.183.255
157.230.234.222
158.69.113.39
158.69.113.180
158.69.124.9
158.69.197.113
158.69.222.121
159.65.4.64
159.65.30.66
159.65.77.254
159.65.81.187
159.65.88.161
159.65.111.89
159.65.126.32
159.65.155.215
159.65.155.227
159.65.170.50
159.89.12.81
159.89.43.184
159.89.116.97
159.89.149.46
159.89.165.36
159.89.199.224
159.90.61.77
159.203.82.104
159.203.100.20
159.203.141.208
159.224.194.240
162.157.185.72
162.241.183.17
162.243.136.230
162.243.160.215
162.243.165.39
162.243.165.95
162.243.168.172
163.172.167.208
164.132.42.32
164.132.194.250
164.132.196.98
164.132.225.250
164.132.230.244
165.227.5.206
165.227.10.163
165.227.122.7
165.227.122.251
165.227.151.59
165.227.165.98
165.227.212.99
167.99.8.158
167.99.158.136
167.99.159.2
167.99.173.0
167.99.173.171
167.99.222.202
167.99.226.212
167.99.234.170
168.63.249.49
168.194.160.188
170.81.148.7
170.239.84.215
170.239.86.115
170.239.86.225
171.221.217.145
171.244.27.224
172.81.248.249
173.219.80.40
174.138.56.93
175.143.127.73
175.144.131.204
175.211.101.66
176.31.100.19
176.181.168.172
177.7.217.57
177.39.222.152
177.67.5.35
177.69.118.197
177.71.74.230
177.72.134.243
177.87.110.52
177.126.78.243
177.135.93.227
177.191.249.167
178.22.122.234
178.32.243.116
178.33.228.67
178.62.33.138
178.62.41.7
178.62.60.225
178.62.252.89
178.113.105.194
178.128.10.188
178.128.12.23
178.128.57.156
178.128.75.54
178.128.79.169
178.128.84.122
178.128.94.55
178.128.96.221
178.128.156.144
178.128.158.113
178.128.181.186
178.128.185.38
178.128.212.241
178.128.217.40
178.128.220.178
178.128.236.154
178.159.2.189
178.200.165.204
179.33.137.117
179.222.49.135
180.76.108.110
180.76.141.215
180.76.156.146
180.97.80.55
180.151.8.180
180.242.200.63
180.250.115.98
181.10.193.18
181.15.88.133
181.49.150.45
181.120.121.189
181.123.8.76
181.174.112.21
181.214.59.84
181.223.213.28
182.61.26.113
182.61.27.149
182.72.104.106
182.73.47.154
182.74.252.58
182.75.249.110
182.140.214.150
182.247.238.225
182.254.225.230
182.254.227.147
182.254.234.206
183.82.121.34
183.107.101.201
183.166.190.6
183.232.36.13
185.2.140.155
185.23.154.29
185.74.4.189
185.88.196.30
185.109.54.156
185.207.107.56
186.3.59.124
186.31.25.22
187.8.84.141
187.74.44.238
187.191.115.23
188.92.75.248
188.118.240.17
188.131.202.74
188.143.91.142
188.165.19.221
188.165.206.185
188.165.250.228
188.166.30.203
188.166.47.181
188.166.70.245
188.166.150.79
188.166.161.117
188.166.226.209
188.166.237.191
188.166.243.150
188.195.227.179
188.226.187.115
188.254.254.5
189.8.68.56
190.18.166.125
190.85.234.201
190.94.18.2
190.140.110.10
190.140.171.186
190.144.135.118
190.145.25.166
190.151.105.182
190.186.170.83
190.210.59.237
190.210.246.53
191.98.163.2
192.99.55.214
192.99.56.103
192.99.57.193
192.99.68.115
192.99.245.135
192.144.155.63
192.144.172.189
192.166.218.31
192.241.201.182
192.241.213.168
193.32.163.89
193.34.52.89
193.70.0.42
193.70.80.11
193.112.4.12
193.112.9.213
193.112.58.212
193.112.78.133
193.112.97.157
193.112.213.148
193.147.87.16
193.254.231.9
194.87.236.76
195.84.49.20
195.98.89.76
196.203.31.154
196.210.54.81
198.23.189.18
198.98.53.45
199.244.49.220
200.44.50.155
200.72.209.66
200.108.130.50
200.171.87.138
200.241.37.82
201.76.70.46
201.144.30.136
201.149.10.165
201.149.22.37
201.163.180.183
201.219.186.243
201.236.191.16
202.65.154.110
202.75.100.234
202.112.237.228
202.137.10.186
202.150.142.38
203.38.38.89
203.92.62.242
203.151.43.167
206.81.24.64
206.189.23.43
206.189.35.191
206.189.37.30
206.189.72.217
206.189.127.6
206.189.184.81
206.189.185.202
206.189.190.32
206.189.219.253
206.189.229.112
207.154.193.37
207.154.198.74
207.154.229.50
209.97.139.121
209.97.161.46
209.235.67.49
210.16.189.164
210.54.37.139
210.59.145.167
210.129.184.15
210.212.249.228
211.22.154.225
211.35.76.241
211.171.43.72
212.10.74.113
212.64.11.188
212.64.105.196
212.64.111.18
212.81.23.241
212.114.58.32
212.156.210.223
213.32.18.189
213.32.52.1
213.32.91.37
213.32.92.57
213.97.245.39
213.203.173.179
213.209.114.26
213.242.102.166
216.144.251.86
217.61.2.97
217.61.14.223
217.61.105.33
217.77.221.85
217.133.58.148
217.182.65.138
217.182.69.48
217.182.71.54
217.182.95.16
217.218.21.242
217.219.132.254
218.75.132.59
218.92.1.130
218.92.1.156
218.246.5.113
219.73.114.139
219.92.245.171
220.118.0.221
220.120.106.254
220.130.221.140
220.175.137.216
220.191.208.139
221.7.221.50
221.125.165.59
221.126.225.184
221.150.17.93
221.229.219.188
222.104.98.105
222.184.233.222
222.188.110.66
222.252.30.117
223.71.206.22

291
bi_default_1_7d.ipset Normal file
View File

@ -0,0 +1,291 @@
#
# bi_default_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/1?age=7d
# Source File Date: Sun Apr 21 07:08:37 UTC 2019
#
# Category : attacks
# Version : 1120
#
# This File Date : Sun Apr 21 07:08:37 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 261 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.32.114.226
2.187.186.34
4.16.205.42
5.88.161.197
5.135.176.213
5.196.7.232
5.196.68.203
14.63.221.108
14.232.160.213
27.155.99.161
36.66.203.251
37.187.0.20
37.187.118.14
37.187.147.84
41.72.105.171
41.210.128.37
41.223.142.211
42.61.24.202
43.225.166.162
45.55.67.128
45.55.185.240
46.52.136.66
46.55.214.3
46.101.26.63
46.148.192.41
49.206.196.114
50.248.154.57
51.254.37.192
51.254.47.198
51.254.220.20
51.255.35.58
51.255.91.75
54.36.182.244
54.37.67.193
54.37.232.137
54.38.183.181
58.42.228.170
58.59.2.26
58.210.6.53
58.210.96.156
58.247.92.2
59.120.243.8
61.12.38.162
61.76.169.138
61.183.144.188
61.219.45.81
69.90.223.232
71.56.218.201
73.239.74.86
74.208.214.205
75.127.147.2
79.61.51.195
80.21.147.85
80.26.116.5
80.93.96.26
80.255.81.61
81.30.208.114
81.133.189.239
81.133.216.92
81.133.226.101
81.136.189.195
81.136.255.20
81.142.98.129
81.174.227.27
81.241.235.191
82.200.65.218
82.200.226.226
83.144.92.94
84.93.153.9
85.198.112.3
88.84.200.139
88.247.93.119
89.216.113.174
91.121.7.107
91.121.142.225
91.219.66.43
92.46.223.98
92.222.84.34
94.23.0.13
94.101.82.10
94.181.94.12
95.130.9.44
95.167.39.12
96.224.240.84
98.116.10.8
101.28.247.133
101.99.65.72
103.9.88.249
103.47.184.22
103.216.60.85
104.131.57.64
106.51.72.240
109.73.46.142
109.202.18.235
110.10.129.226
111.230.140.177
113.53.239.101
113.203.237.86
113.204.66.138
114.32.153.15
114.143.59.202
114.241.199.75
115.88.201.58
115.236.33.226
115.248.207.78
116.90.81.14
117.66.243.77
117.71.53.105
118.25.96.30
118.45.190.133
118.69.172.143
118.163.24.179
118.172.229.184
118.182.118.248
119.29.9.32
119.29.58.239
119.29.197.54
119.29.227.222
120.52.120.166
120.195.143.172
121.8.154.178
122.114.236.178
122.154.134.38
122.166.201.197
122.175.55.196
122.176.85.148
122.224.203.228
123.206.76.184
123.206.217.132
123.207.231.63
124.47.9.102
124.158.5.112
124.194.44.219
125.212.207.205
125.212.225.76
125.212.233.50
125.227.38.168
128.199.118.27
129.122.16.156
131.72.216.146
137.74.112.125
137.74.176.208
137.74.199.177
138.118.214.71
139.59.78.70
139.199.37.92
139.199.82.171
139.199.100.81
139.199.113.140
140.143.230.156
142.54.101.146
147.135.134.53
149.56.15.98
149.202.51.131
149.202.214.11
150.107.148.155
151.80.155.98
154.118.141.90
154.119.7.3
157.100.133.21
158.69.124.9
159.65.12.204
164.77.77.251
164.132.110.223
164.132.205.21
164.132.225.151
164.163.99.10
165.227.165.98
170.231.81.165
176.31.100.19
176.31.252.148
177.39.222.152
177.153.18.130
179.111.154.18
179.228.242.120
180.250.115.98
180.250.205.114
180.250.248.39
181.28.191.54
181.48.68.54
181.65.187.157
181.129.14.218
182.18.162.136
182.23.64.177
182.61.30.7
182.74.25.246
182.140.214.150
183.64.62.173
183.101.8.161
183.107.101.201
183.107.101.252
185.207.232.232
185.241.4.160
186.31.65.66
186.248.136.74
188.165.211.201
188.166.1.95
188.166.243.150
188.167.62.209
189.6.45.130
189.125.2.234
189.254.33.157
190.1.201.152
190.98.228.54
190.128.230.14
190.144.15.162
190.210.59.237
190.248.139.242
192.99.2.97
192.144.156.187
193.70.0.42
193.70.36.161
193.70.81.238
193.70.85.206
193.112.191.228
193.201.224.218
194.228.3.191
197.243.32.204
200.110.174.137
200.116.160.38
200.207.216.138
200.241.37.82
201.6.240.159
201.18.21.212
201.245.191.102
202.22.142.111
202.29.39.1
202.51.110.214
202.73.44.251
202.100.182.250
202.137.141.112
202.149.193.118
203.109.110.180
210.183.236.30
210.211.99.243
211.110.140.200
211.144.122.42
211.159.147.35
211.159.156.188
212.44.65.22
212.156.115.58
212.170.50.203
213.32.52.1
213.120.170.33
217.32.246.90
217.77.221.85
217.182.68.146
217.182.204.107
218.2.198.54
218.4.196.178
218.5.36.120
218.17.221.58
218.75.132.59
219.239.47.66
220.120.106.254
221.7.213.133
221.228.197.146
222.128.13.94
222.233.53.132
222.252.30.117
223.3.65.233

512
bi_default_2_30d.ipset Normal file
View File

@ -0,0 +1,512 @@
#
# bi_default_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# default with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/default/2?age=30d
# Source File Date: Sun Apr 21 04:20:50 UTC 2019
#
# Category : attacks
# Version : 286
#
# This File Date : Sun Apr 21 04:20:50 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 482 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_default_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.34.164.204
1.234.79.66
2.32.114.226
2.187.186.34
4.16.205.42
5.88.161.197
5.135.176.213
5.196.7.232
5.196.68.203
14.63.221.108
14.116.254.33
14.139.127.91
14.139.233.194
14.232.160.213
27.72.24.93
27.155.99.161
36.66.69.33
36.66.203.251
36.67.135.42
36.80.48.9
36.84.80.31
36.89.56.175
37.145.31.68
37.187.0.20
37.187.118.14
37.187.147.84
41.67.236.40
41.72.105.171
41.210.128.37
41.223.142.211
42.61.24.202
43.225.166.162
45.55.67.128
45.55.185.240
45.122.221.42
45.249.48.21
45.249.109.104
46.51.219.44
46.52.136.66
46.55.214.3
46.59.11.243
46.101.26.63
46.148.192.41
49.206.196.114
49.206.244.235
49.248.167.102
50.248.154.57
51.254.37.192
51.254.47.198
51.254.220.20
51.255.35.58
51.255.91.75
54.36.182.244
54.37.67.193
54.37.158.40
54.37.232.137
54.38.183.181
58.42.228.170
58.59.2.26
58.206.100.88
58.210.6.53
58.210.96.156
58.240.52.75
58.247.92.2
59.120.243.8
59.126.57.87
60.12.215.85
60.29.70.132
60.173.83.174
60.190.157.38
61.12.38.162
61.72.255.26
61.76.169.138
61.183.144.188
61.188.189.7
61.219.45.81
69.90.223.232
70.45.243.146
71.56.218.201
73.141.47.152
73.239.74.86
74.208.214.205
75.127.147.2
78.94.14.122
78.195.178.119
78.196.118.157
79.61.51.195
80.21.147.85
80.26.116.5
80.93.96.26
80.229.253.212
80.255.81.61
81.30.208.114
81.133.189.239
81.133.216.92
81.133.226.101
81.136.189.195
81.136.255.20
81.142.98.129
81.149.211.134
81.174.227.27
81.214.38.63
81.241.235.191
82.85.143.181
82.112.32.45
82.152.171.189
82.200.65.218
82.200.205.71
82.200.226.226
83.144.92.94
84.93.153.9
84.255.152.10
85.198.112.3
88.84.200.139
88.190.183.18
88.247.93.119
89.36.222.85
89.216.113.174
91.121.7.107
91.121.142.225
91.134.140.32
91.219.66.43
92.46.223.98
92.222.84.34
93.43.107.241
93.46.117.2
94.23.0.13
94.101.82.10
94.181.94.12
95.130.9.44
95.167.39.12
96.57.82.166
96.76.166.105
96.224.240.84
96.239.59.131
98.116.10.8
101.28.247.133
101.71.130.200
101.99.65.72
103.1.40.189
103.5.127.137
103.9.88.249
103.28.225.131
103.36.84.100
103.47.184.22
103.68.38.86
103.78.159.6
103.202.132.175
103.216.60.85
103.245.181.208
103.249.205.78
104.131.57.64
104.236.198.255
106.51.72.240
109.68.126.139
109.73.46.142
109.202.18.235
110.10.129.226
110.10.174.179
110.168.227.171
110.175.57.53
111.230.140.177
111.230.247.243
112.54.96.90
112.144.41.186
113.53.239.101
113.160.244.144
113.161.65.119
113.203.237.86
113.204.66.138
114.32.153.15
114.143.59.202
114.241.199.75
115.84.91.48
115.84.91.64
115.88.201.58
115.159.25.60
115.236.33.226
115.248.207.78
115.249.205.29
115.254.63.51
116.90.81.14
117.40.138.21
117.66.243.77
117.71.53.105
117.239.48.242
117.247.184.24
117.255.216.106
118.25.96.30
118.26.64.58
118.45.190.133
118.69.172.143
118.140.178.108
118.163.24.179
118.163.193.82
118.172.229.184
118.182.118.248
119.28.66.152
119.29.9.32
119.29.58.239
119.29.197.54
119.29.227.222
120.52.120.166
120.92.15.82
120.195.143.172
121.8.154.178
121.12.151.250
121.120.101.90
121.134.202.24
122.2.223.242
122.49.218.5
122.114.15.40
122.114.236.178
122.152.221.72
122.154.134.38
122.166.201.197
122.175.55.196
122.176.85.148
122.224.203.228
123.127.107.70
123.206.76.184
123.206.217.132
123.207.91.238
123.207.231.63
124.47.9.102
124.158.5.112
124.194.44.219
125.212.207.205
125.212.225.76
125.212.233.50
125.227.38.168
128.199.118.27
129.122.16.156
129.205.208.20
129.205.208.21
129.205.208.22
129.205.208.23
131.72.216.146
132.248.44.87
137.74.112.125
137.74.176.208
137.74.199.177
138.118.214.71
139.59.78.70
139.59.249.255
139.199.37.92
139.199.82.171
139.199.100.81
139.199.113.140
140.143.230.156
142.4.204.122
142.54.101.146
147.135.134.53
149.56.15.98
149.202.51.131
149.202.214.11
150.107.148.155
151.80.155.98
154.118.141.90
154.119.7.3
155.4.255.138
157.100.133.21
158.69.124.9
158.140.130.76
159.65.12.204
159.65.109.72
159.65.161.182
159.65.174.47
159.65.176.86
159.226.169.49
160.3.126.165
160.124.208.6
161.0.99.252
162.144.119.35
162.243.125.84
164.77.77.251
164.132.24.138
164.132.47.139
164.132.56.243
164.132.99.59
164.132.110.223
164.132.205.21
164.132.225.151
164.163.99.10
165.84.191.236
168.196.107.6
170.231.81.165
171.98.3.186
175.100.75.103
175.139.231.129
175.197.74.182
175.203.72.175
175.215.84.119
176.31.100.19
176.31.252.148
176.94.26.234
176.106.9.241
176.106.217.41
176.110.33.212
177.22.37.50
177.39.206.218
177.39.222.152
177.73.136.228
177.86.79.2
177.135.203.141
177.153.18.130
178.239.116.136
179.63.252.22
179.107.111.106
179.111.154.18
179.228.242.120
180.76.162.111
180.151.1.114
180.167.0.42
180.168.76.230
180.250.19.128
180.250.115.98
180.250.205.114
180.250.248.39
181.10.193.19
181.15.216.20
181.28.191.54
181.40.76.162
181.48.68.54
181.53.255.208
181.55.188.187
181.65.187.157
181.129.14.218
182.18.162.136
182.23.64.177
182.61.30.7
182.74.25.246
182.79.223.194
182.93.83.15
182.140.214.150
183.6.176.182
183.64.62.173
183.82.0.15
183.87.35.145
183.101.8.161
183.107.101.201
183.107.101.213
183.107.101.238
183.107.101.240
183.107.101.252
183.129.132.3
183.234.63.10
185.2.31.101
185.22.65.28
185.107.44.71
185.143.223.101
185.143.223.161
185.143.223.214
185.144.83.69
185.148.39.38
185.207.232.232
185.225.208.4
185.225.208.9
185.241.4.160
185.244.25.195
186.31.65.66
186.112.214.158
186.248.136.74
187.52.206.180
187.65.1.50
187.190.236.88
188.165.211.201
188.165.224.141
188.166.1.95
188.166.216.84
188.166.243.150
188.167.62.209
188.187.3.121
189.6.45.130
189.19.31.3
189.59.17.127
189.90.255.173
189.125.2.234
189.254.33.157
190.1.201.152
190.2.35.61
190.85.63.50
190.98.228.54
190.111.90.149
190.128.137.10
190.128.230.14
190.128.241.2
190.144.14.170
190.144.15.162
190.144.232.122
190.147.178.100
190.210.59.237
190.248.139.242
192.99.2.97
192.144.156.187
193.70.0.42
193.70.36.161
193.70.81.238
193.70.85.206
193.112.106.28
193.112.191.228
193.201.224.218
194.24.228.93
194.228.3.191
195.154.237.60
195.209.125.58
195.228.168.178
195.239.204.94
197.156.72.154
197.232.56.157
197.243.32.204
200.6.188.38
200.37.97.194
200.69.247.221
200.110.174.137
200.116.160.38
200.149.7.202
200.207.216.138
200.241.37.82
201.6.240.159
201.18.21.212
201.20.36.4
201.245.1.107
201.245.191.102
202.22.142.111
202.28.33.166
202.29.39.1
202.29.238.153
202.39.64.155
202.51.110.214
202.73.44.251
202.88.237.110
202.100.182.250
202.126.46.39
202.129.29.135
202.131.152.2
202.137.141.112
202.149.193.118
203.66.168.81
203.109.110.180
203.223.143.114
208.97.140.112
210.183.236.30
210.211.99.243
211.103.222.149
211.105.82.250
211.110.140.200
211.125.90.66
211.144.122.42
211.159.147.35
211.159.156.188
211.232.166.249
212.44.65.22
212.156.115.58
212.170.50.203
213.32.52.1
213.120.170.33
213.120.170.34
217.32.246.90
217.36.223.29
217.77.221.85
217.182.68.146
217.182.204.107
218.2.198.54
218.4.196.178
218.5.36.120
218.5.112.6
218.17.221.58
218.75.102.110
218.75.132.59
219.239.47.66
220.120.106.254
220.227.40.235
221.7.213.133
221.228.197.146
222.72.135.177
222.128.13.94
222.187.225.194
222.233.53.132
222.252.30.117
223.3.65.233
223.71.139.98

30
bi_dns_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_dns_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dns with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dns/0?age=1d
# Source File Date: Fri Apr 19 21:28:50 UTC 2019
#
# Category : attacks
# Version : 2964
#
# This File Date : Fri Apr 19 22:00:54 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dns_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

View File

@ -0,0 +1,69 @@
#
# bi_dovecot-pop3imap_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot-pop3imap with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot-pop3imap/0?age=1d
# Source File Date: Sun Apr 21 09:32:40 UTC 2019
#
# Category : attacks
# Version : 9865
#
# This File Date : Sun Apr 21 09:32:40 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 39 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.168.2.70
5.171.184.23
12.7.109.254
35.182.193.94
36.111.45.217
45.166.26.22
58.244.173.130
61.163.69.170
77.37.130.53
79.62.0.75
80.62.116.207
80.85.158.41
82.61.132.168
82.160.134.9
89.248.171.170
89.248.172.16
91.98.153.38
94.145.67.53
95.222.28.127
102.165.49.109
103.82.143.51
103.91.183.209
109.201.190.190
116.113.96.22
118.163.143.170
118.238.220.103
120.203.25.58
130.61.74.155
157.25.23.231
168.228.185.128
174.200.88.1
175.143.54.98
176.200.7.210
180.180.218.118
185.63.171.23
201.184.241.243
201.234.121.93
220.174.209.154
221.4.205.30

View File

@ -0,0 +1,952 @@
#
# bi_dovecot-pop3imap_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot-pop3imap with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot-pop3imap/2?age=30d
# Source File Date: Sat Apr 20 19:32:36 UTC 2019
#
# Category : attacks
# Version : 181
#
# This File Date : Sat Apr 20 19:32:36 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 922 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot-pop3imap_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.85.7.26
1.85.36.90
1.190.175.66
1.202.178.154
1.255.70.86
1.255.70.123
5.39.217.74
5.39.217.75
5.39.217.76
5.158.223.226
14.17.66.136
14.74.101.69
14.85.47.21
14.141.55.18
14.160.24.5
14.161.48.14
14.177.235.133
14.192.14.141
14.204.55.6
24.205.251.42
24.214.206.34
27.17.15.26
27.17.57.98
27.42.165.226
27.72.45.173
27.74.240.240
27.189.251.86
31.13.227.4
31.168.157.167
31.179.143.114
35.204.15.126
36.7.79.21
36.7.110.188
36.33.0.160
36.66.137.117
36.67.61.165
36.71.228.47
36.72.31.58
37.49.224.93
37.49.224.94
37.49.224.107
37.49.224.170
37.49.224.205
37.49.225.81
37.49.225.249
37.49.227.114
37.49.227.164
37.49.230.115
37.49.230.175
41.32.76.208
41.32.99.225
41.38.15.142
41.38.82.93
41.38.121.190
41.39.179.102
41.41.84.246
41.41.160.186
41.202.174.9
41.210.49.98
41.210.223.10
41.242.139.222
42.62.11.49
42.104.94.237
42.228.1.34
42.243.154.6
45.116.158.85
45.116.159.197
45.122.247.124
46.20.205.233
46.146.233.131
47.91.77.117
47.91.88.127
47.91.94.224
47.254.149.197
49.67.68.141
49.143.32.8
54.39.48.219
58.17.221.4
58.18.137.83
58.18.170.107
58.19.182.235
58.19.204.129
58.20.36.88
58.20.55.71
58.20.185.12
58.20.187.21
58.22.194.44
58.42.251.184
58.46.64.38
58.56.145.94
58.57.21.108
58.58.135.158
58.62.55.130
58.210.119.226
58.210.134.186
58.210.212.214
58.211.71.40
58.213.133.18
58.214.22.226
58.214.24.53
58.214.25.190
58.214.239.53
58.215.78.97
58.215.198.2
58.216.156.58
58.216.170.50
58.216.238.76
58.218.194.81
58.221.55.21
58.221.60.110
58.222.105.114
58.240.2.38
58.240.111.50
58.242.164.10
58.244.173.130
59.39.92.162
59.44.27.195
59.44.47.106
59.49.33.247
59.49.233.24
59.50.95.129
59.50.104.194
59.51.66.168
59.61.73.130
59.173.252.58
60.2.47.82
60.2.50.114
60.2.101.221
60.2.111.190
60.2.211.50
60.6.214.48
60.6.223.191
60.6.227.95
60.8.207.34
60.10.41.203
60.11.113.164
60.12.84.190
60.13.3.26
60.13.154.174
60.13.181.244
60.13.197.131
60.28.131.10
60.29.145.218
60.29.163.114
60.30.5.5
60.30.66.199
60.30.224.189
60.161.139.49
60.161.215.7
60.166.12.117
60.166.35.162
60.166.48.158
60.166.60.26
60.167.19.30
60.169.26.22
60.169.65.62
60.170.110.89
60.171.110.17
60.171.140.110
60.171.155.26
60.171.157.209
60.171.164.47
60.172.22.178
60.172.64.229
60.172.69.66
60.172.73.3
60.172.231.12
60.173.79.120
60.173.105.110
60.173.114.254
60.173.133.229
60.173.143.222
60.173.149.204
60.173.229.2
60.174.37.226
60.174.40.89
60.174.92.50
60.174.117.67
60.174.164.45
60.174.192.240
60.175.71.194
60.191.206.110
60.194.6.9
60.212.42.56
60.216.106.162
60.222.227.195
60.255.181.245
61.37.150.6
61.50.130.146
61.53.66.4
61.82.71.36
61.133.218.19
61.134.36.115
61.134.52.115
61.134.52.164
61.134.83.10
61.135.37.198
61.136.81.154
61.136.81.234
61.136.82.164
61.136.94.166
61.136.104.131
61.141.21.34
61.143.130.162
61.145.228.110
61.147.255.159
61.148.29.198
61.148.124.108
61.148.196.114
61.150.76.201
61.150.109.249
61.153.49.210
61.153.54.38
61.154.159.25
61.155.97.46
61.158.140.152
61.158.186.84
61.158.188.21
61.160.25.118
61.160.81.62
61.160.95.126
61.161.109.153
61.161.135.34
61.161.147.218
61.161.209.134
61.163.2.246
61.163.69.170
61.163.196.149
61.163.229.226
61.163.231.150
61.167.79.135
61.177.25.58
61.177.60.140
61.177.181.109
61.178.243.56
61.182.27.121
61.182.241.10
61.184.35.3
61.184.176.231
61.185.41.221
61.185.137.161
61.185.242.195
61.186.219.33
61.187.123.74
61.187.189.254
61.189.47.93
61.190.99.62
61.190.214.186
61.191.123.11
61.191.130.198
61.191.220.250
61.191.252.74
61.232.0.130
62.99.80.128
62.99.80.231
62.152.32.216
67.237.78.130
69.195.197.70
72.139.228.74
74.82.49.66
76.72.254.222
77.44.110.101
77.72.82.37
78.25.82.10
78.83.105.149
80.82.77.33
81.27.79.18
81.82.223.109
82.114.95.85
82.148.97.167
82.194.165.194
82.212.83.154
83.144.72.78
83.221.195.85
84.232.117.207
85.71.160.85
85.93.20.106
88.32.17.110
88.220.45.162
89.248.172.16
90.183.127.106
91.201.240.198
91.215.239.194
92.63.193.10
92.63.193.15
92.63.193.20
92.63.193.25
92.63.193.30
92.63.193.35
92.63.193.40
92.63.193.45
92.63.193.50
92.63.193.55
92.115.66.144
93.146.73.50
93.170.122.30
94.45.134.190
94.112.251.250
94.253.8.118
97.81.19.228
101.68.86.98
101.231.140.218
103.1.93.8
103.4.165.174
103.40.132.18
109.71.32.43
109.170.160.102
109.170.184.211
109.206.193.138
109.226.23.26
110.17.188.30
110.80.33.226
110.123.44.6
110.173.191.54
110.249.143.106
110.249.218.69
111.1.89.230
111.9.116.50
111.12.150.107
111.26.198.30
111.30.23.107
111.30.31.176
111.38.140.12
111.39.250.51
111.40.73.83
111.40.84.27
111.42.35.57
111.59.90.47
111.72.252.82
111.75.167.157
111.85.215.66
111.85.220.242
111.113.11.82
111.121.220.219
111.206.163.56
112.2.52.100
112.4.172.182
112.4.235.211
112.16.203.48
112.23.7.76
112.23.7.88
112.24.103.242
112.24.104.228
112.25.170.99
112.26.80.46
112.26.80.145
112.26.82.52
112.27.28.27
112.27.129.78
112.27.129.154
112.29.175.223
112.53.66.27
112.91.59.106
112.91.108.190
112.113.241.17
112.113.241.207
112.176.130.50
112.179.229.247
112.199.113.42
112.218.211.227
113.8.194.3
113.28.1.221
113.137.29.67
113.140.48.156
113.140.84.86
113.160.145.134
113.176.7.241
113.190.232.94
113.240.237.10
114.104.158.172
114.104.162.36
114.119.10.171
114.141.189.194
114.251.196.28
115.84.91.65
115.84.105.146
115.84.112.138
115.236.24.10
115.236.172.90
115.238.31.114
115.238.34.226
115.238.247.228
115.239.188.226
115.249.106.254
116.1.1.165
116.1.179.95
116.9.204.16
116.52.0.234
116.112.66.186
116.112.207.235
116.113.96.22
116.228.90.9
116.248.41.55
116.249.127.11
117.21.221.58
117.28.250.42
117.35.207.102
117.40.185.78
117.40.236.179
117.66.188.224
117.69.253.252
117.141.215.16
117.149.2.142
117.158.110.87
117.159.11.139
117.253.108.236
118.98.90.22
118.121.233.54
118.122.94.151
118.144.8.198
118.144.83.130
118.144.141.155
118.163.58.117
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
118.223.102.130
118.254.8.66
118.254.9.180
119.6.89.127
119.6.103.44
119.6.162.142
119.39.84.75
119.40.80.198
119.48.16.182
119.53.149.66
119.55.121.74
119.60.26.162
119.79.234.12
119.90.34.135
119.90.40.171
119.90.42.20
119.145.107.186
119.146.33.98
119.146.145.50
119.252.174.181
120.33.205.162
120.42.52.82
120.68.44.204
120.192.201.22
120.194.193.7
120.202.36.46
120.203.25.58
120.209.31.231
120.209.71.14
120.209.71.73
120.209.233.191
120.236.73.231
120.236.135.204
121.15.254.22
121.18.39.22
121.28.40.179
121.49.106.6
121.128.135.73
121.129.47.85
121.199.58.190
121.207.5.45
122.5.36.139
122.139.5.237
122.140.95.92
122.155.202.169
122.166.237.19
122.189.240.46
122.195.155.194
122.224.3.12
122.224.36.28
122.224.135.138
122.227.20.90
122.227.62.206
122.227.185.67
123.15.58.162
123.81.80.96
123.138.78.210
123.160.236.125
123.178.123.190
123.183.208.184
123.232.125.198
124.42.103.139
124.43.18.138
124.65.64.174
124.109.48.57
124.112.45.222
124.119.80.114
124.128.3.131
124.128.73.58
124.164.235.209
124.165.232.138
124.165.247.42
124.207.209.114
125.32.1.146
125.35.93.62
125.46.81.195
125.65.109.75
125.65.244.38
125.72.92.174
125.75.123.98
125.75.206.244
125.77.72.197
125.77.127.97
125.214.227.125
125.227.146.182
125.227.179.59
134.249.133.116
138.97.91.18
138.118.6.36
138.122.110.204
138.204.71.22
139.199.72.40
139.199.207.34
140.118.1.60
143.255.155.164
148.255.129.78
152.249.245.68
153.37.22.155
154.57.8.166
154.70.132.82
157.122.183.218
157.122.183.220
162.251.21.33
168.103.20.54
169.239.220.35
171.34.50.12
171.34.168.247
171.90.254.171
171.105.64.209
171.108.228.18
171.221.201.212
175.19.204.202
175.110.135.77
175.143.104.25
175.225.41.60
175.229.51.22
175.230.213.33
175.236.156.204
176.124.144.185
177.10.108.243
177.19.163.77
177.19.163.109
177.19.164.147
177.19.164.149
177.19.165.26
177.19.187.79
177.43.243.231
177.43.244.209
177.43.247.77
177.43.247.139
177.43.251.139
177.43.251.153
177.99.211.149
177.99.217.233
177.135.101.5
177.135.101.93
177.135.101.101
177.135.103.25
177.135.103.107
177.159.99.31
177.159.99.93
177.159.103.9
177.159.103.127
179.127.175.210
179.184.23.195
179.184.113.95
180.250.39.2
180.250.100.230
180.253.116.143
181.211.61.198
181.214.87.26
181.214.87.30
182.71.118.18
182.71.146.22
182.74.92.178
182.74.112.226
182.74.165.174
182.106.216.4
182.137.14.72
182.140.131.130
183.62.158.97
183.64.79.122
183.65.17.118
183.67.43.90
183.102.114.251
183.116.134.104
183.134.3.83
183.166.187.2
183.167.205.103
183.167.225.165
183.167.250.140
183.214.89.122
183.220.53.39
183.221.168.48
185.59.75.47
185.222.211.86
186.103.149.118
186.194.114.14
186.215.130.159
186.215.130.242
186.215.143.149
186.215.195.249
186.215.197.183
186.215.199.65
186.215.199.69
186.215.199.219
186.215.199.223
186.229.28.106
186.232.141.21
187.58.134.43
187.58.134.57
187.58.134.87
187.58.139.171
187.58.139.189
187.58.151.15
187.94.99.194
187.115.123.74
187.189.27.58
187.189.51.102
188.129.172.72
188.129.172.112
188.235.6.85
188.241.252.11
188.255.250.218
189.59.1.123
189.59.5.81
189.59.5.91
189.59.69.3
189.114.67.213
189.204.6.157
189.204.52.236
190.13.106.123
190.60.31.185
190.202.44.194
190.214.217.249
191.101.167.14
191.101.167.189
191.102.91.82
193.150.73.22
195.81.64.102
196.22.241.186
196.218.154.146
196.219.65.44
197.45.13.182
197.45.159.191
197.50.5.210
197.50.105.120
200.29.136.155
200.29.140.52
200.58.160.67
200.175.104.5
200.175.104.101
200.175.104.103
200.186.49.228
200.223.205.138
201.47.245.162
201.71.155.63
201.140.110.78
201.184.241.243
202.78.71.2
202.93.35.19
202.96.199.157
202.103.61.102
202.109.164.31
202.110.187.146
202.137.141.81
202.198.69.108
203.93.109.130
203.142.65.102
203.242.126.4
206.219.17.55
207.195.35.96
208.100.26.237
210.13.70.229
210.74.131.204
211.20.181.113
211.57.21.164
211.92.143.94
211.103.155.236
211.137.8.103
211.138.182.198
211.141.190.206
211.141.209.131
211.142.86.210
211.161.90.99
211.232.116.145
212.29.135.82
212.45.24.251
212.233.216.133
212.237.40.18
212.237.41.180
212.237.42.196
212.237.42.200
212.237.43.20
213.48.152.116
213.119.80.188
213.141.135.133
218.3.64.241
218.3.210.2
218.4.177.21
218.4.214.115
218.22.11.106
218.22.98.122
218.22.100.42
218.22.129.38
218.22.135.190
218.22.148.100
218.22.148.105
218.22.179.214
218.22.180.146
218.22.186.115
218.22.187.66
218.22.190.133
218.22.198.212
218.22.206.178
218.22.235.138
218.23.26.50
218.23.114.22
218.23.156.227
218.23.162.169
218.23.240.146
218.24.236.4
218.25.31.150
218.26.163.125
218.26.178.146
218.27.162.22
218.28.50.51
218.28.76.99
218.28.164.218
218.28.171.213
218.28.234.53
218.29.52.2
218.29.219.18
218.29.234.18
218.56.45.28
218.57.142.194
218.57.237.243
218.58.105.206
218.58.155.22
218.62.81.94
218.64.57.12
218.64.63.195
218.64.165.194
218.65.3.210
218.65.220.48
218.66.84.85
218.75.148.181
218.76.140.155
218.76.252.245
218.77.80.51
218.83.246.141
218.84.117.90
218.87.46.173
218.89.38.239
218.89.142.30
218.92.14.18
218.92.237.2
218.93.8.210
218.93.220.102
218.94.144.101
218.95.153.90
218.95.159.106
218.104.207.53
218.106.153.152
218.107.46.228
218.107.49.71
218.108.102.209
218.200.55.214
218.201.14.134
218.201.62.71
218.201.79.71
218.201.83.148
218.201.101.172
218.202.139.54
218.204.69.3
218.206.132.194
218.207.103.170
218.241.156.10
218.249.232.178
219.137.27.52
219.138.40.190
219.138.59.240
219.138.66.229
219.138.243.196
219.138.244.91
219.142.25.106
219.148.39.134
219.149.220.82
219.154.133.161
219.159.229.115
220.133.24.4
220.162.158.2
220.163.44.184
220.164.2.65
220.164.2.67
220.164.2.71
220.164.2.76
220.164.2.77
220.164.2.87
220.164.2.90
220.164.2.100
220.164.2.104
220.164.2.106
220.164.2.113
220.164.2.114
220.164.2.116
220.164.2.119
220.164.2.120
220.164.2.121
220.164.2.124
220.164.2.131
220.164.2.138
220.164.162.146
220.165.28.189
220.165.149.168
220.168.205.16
220.169.102.6
220.173.107.124
220.174.209.154
220.174.241.102
220.176.196.40
220.177.50.195
220.178.2.114
220.178.151.125
220.179.250.175
220.180.107.193
220.180.110.144
220.180.123.198
220.180.167.35
220.189.205.2
220.189.235.126
220.197.206.78
220.225.7.12
220.225.7.15
220.225.7.19
220.225.7.21
220.225.7.33
220.225.7.36
220.225.7.37
220.225.7.45
220.225.7.49
220.225.7.54
220.225.7.55
220.225.7.88
220.227.147.150
220.241.199.20
220.241.199.21
220.248.206.116
221.1.177.2
221.3.236.94
221.4.128.114
221.4.197.154
221.4.205.30
221.10.230.228
221.12.137.6
221.130.130.238
221.131.83.162
221.176.112.45
221.176.134.36
221.176.149.90
221.178.138.106
221.193.214.166
221.193.236.174
221.199.41.218
221.206.242.27
221.210.83.24
221.212.18.146
221.212.58.242
221.224.2.202
221.224.114.229
221.226.176.254
221.226.187.116
221.228.242.13
221.229.247.179
221.230.1.113
221.230.139.83
221.231.109.126
221.231.112.66
221.237.208.10
222.33.117.102
222.35.21.206
222.76.48.73
222.80.105.90
222.87.139.44
222.88.238.11
222.91.248.106
222.92.142.226
222.92.204.50
222.101.93.2
222.124.128.202
222.137.252.18
222.141.50.134
222.160.126.34
222.161.47.82
222.161.209.130
222.161.229.55
222.162.70.249
222.169.186.242
222.170.168.78
222.170.168.94
222.171.61.97
222.175.49.22
222.179.214.217
222.186.68.154
222.188.97.62
222.189.41.46
222.191.233.238
222.209.223.91
222.217.221.178
222.217.221.181
222.218.17.94
222.218.17.189
222.218.124.49
222.218.248.42
222.221.36.120
222.222.71.101
222.222.219.154
222.223.41.92
222.223.101.58
222.229.112.168
222.242.230.123
222.249.234.46
222.249.239.115
223.100.152.42
223.241.100.16

58
bi_dovecot_0_1d.ipset Normal file
View File

@ -0,0 +1,58 @@
#
# bi_dovecot_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/0?age=1d
# Source File Date: Sun Apr 21 09:32:40 UTC 2019
#
# Category : attacks
# Version : 11958
#
# This File Date : Sun Apr 21 09:32:40 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 28 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
45.227.253.99
60.246.2.156
75.144.67.33
77.89.68.6
78.35.150.211
79.62.0.75
87.133.178.179
89.248.171.170
102.165.49.54
103.99.2.5
103.99.2.73
103.207.37.40
103.231.139.127
103.231.139.146
103.231.139.184
103.231.139.248
118.238.220.103
166.137.177.243
166.137.178.210
166.171.251.85
166.177.251.251
174.207.19.93
175.143.54.98
185.211.245.198
185.222.209.71
188.146.231.120
208.100.133.61
211.72.89.101

46
bi_dovecot_1_7d.ipset Normal file
View File

@ -0,0 +1,46 @@
#
# bi_dovecot_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/1?age=7d
# Source File Date: Sun Apr 21 07:08:38 UTC 2019
#
# Category : attacks
# Version : 884
#
# This File Date : Sun Apr 21 07:08:38 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 16 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
37.49.224.175
37.49.224.181
60.166.60.26
66.85.178.210
66.240.219.146
82.188.133.50
103.207.37.40
124.129.30.246
155.12.54.14
175.236.156.204
198.20.70.114
202.198.69.108
211.91.180.242
218.255.251.242
222.120.247.207
222.170.168.78

200
bi_dovecot_2_30d.ipset Normal file
View File

@ -0,0 +1,200 @@
#
# bi_dovecot_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# dovecot with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/dovecot/2?age=30d
# Source File Date: Sat Apr 20 16:08:32 UTC 2019
#
# Category : attacks
# Version : 278
#
# This File Date : Sat Apr 20 16:08:32 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 170 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_dovecot_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.42.219.63
5.59.136.174
24.222.21.82
31.13.227.4
31.173.248.58
36.32.170.35
36.33.0.160
37.49.224.150
37.49.224.175
37.49.224.181
37.59.52.34
41.32.184.75
41.38.198.106
51.38.39.31
51.38.188.244
58.16.29.26
58.16.113.219
59.44.27.195
60.2.15.52
60.6.216.243
60.13.197.131
60.166.60.26
60.209.163.54
61.8.75.186
61.163.2.246
61.163.196.149
61.164.81.210
61.177.25.58
61.178.160.83
66.85.178.210
66.240.219.146
70.35.195.31
80.25.128.88
80.82.77.17
80.82.77.33
80.82.77.139
80.147.59.28
82.188.133.50
89.248.169.103
89.248.171.89
89.248.174.3
91.121.2.18
91.121.65.163
91.121.72.26
91.121.85.131
91.121.109.211
91.121.220.125
91.209.70.221
93.174.93.251
94.23.17.100
94.45.134.190
94.102.49.190
94.102.51.67
94.102.56.215
95.170.158.105
103.28.38.166
103.207.37.40
103.207.38.152
103.207.38.156
103.244.4.140
110.249.218.69
111.30.23.107
112.23.7.88
112.26.82.61
113.135.193.217
114.104.158.172
116.1.179.95
116.247.106.198
119.6.89.127
119.29.191.40
119.53.91.170
119.60.26.162
120.209.71.73
121.28.40.179
121.128.135.73
121.128.135.74
124.105.249.210
124.128.35.218
124.129.30.246
124.161.35.88
125.70.227.38
125.158.127.42
145.249.104.165
154.66.197.34
155.12.54.14
172.87.163.42
175.236.156.204
176.31.253.157
176.108.177.42
177.126.81.63
180.169.36.91
181.214.206.20
181.214.206.44
181.214.206.100
181.214.206.101
181.214.206.119
181.214.206.133
181.214.206.170
181.214.206.195
181.215.195.33
182.71.146.22
183.62.152.98
184.168.116.130
185.36.81.43
185.36.81.44
185.36.81.45
185.36.81.46
185.48.182.120
185.234.216.234
186.68.44.10
186.215.198.137
189.52.165.134
189.204.52.237
190.128.186.98
191.96.249.135
191.96.249.198
193.169.252.20
193.169.252.21
193.169.252.130
193.169.252.131
193.169.252.132
193.169.252.133
193.169.252.134
193.194.69.114
195.22.125.27
196.219.81.191
197.50.5.51
197.50.5.225
197.51.59.138
197.248.136.250
198.20.70.114
198.20.99.130
198.100.146.204
200.57.73.170
200.153.145.165
201.163.36.134
202.198.69.108
203.41.236.130
206.214.9.232
211.91.180.242
211.92.143.94
211.147.65.218
212.142.159.61
218.15.164.254
218.26.97.162
218.28.50.51
218.28.58.186
218.28.135.178
218.29.234.18
218.62.81.94
218.64.57.12
218.93.232.166
218.201.101.172
218.204.69.3
218.255.251.242
219.154.66.223
220.164.2.71
220.164.2.87
220.164.2.116
220.164.193.238
220.179.87.232
220.225.7.42
220.248.200.226
221.130.61.171
222.42.148.60
222.84.60.22
222.120.247.207
222.161.209.130
222.170.168.78
222.188.95.202

30
bi_drupal_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_drupal_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# drupal with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/drupal/0?age=1d
# Source File Date: Sat Apr 20 22:12:38 UTC 2019
#
# Category : attacks
# Version : 2540
#
# This File Date : Sat Apr 20 22:53:51 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_drupal_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

35
bi_exim_0_1d.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bi_exim_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# exim with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/exim/0?age=1d
# Source File Date: Sun Apr 21 09:56:15 UTC 2019
#
# Category : attacks
# Version : 4861
#
# This File Date : Sun Apr 21 09:56:15 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 5 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_exim_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.254.231.87
136.179.236.38
141.98.80.32
216.163.188.204
216.163.188.210

31
bi_exim_1_7d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_exim_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# exim with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/exim/1?age=7d
# Source File Date: Sun Apr 21 02:52:34 UTC 2019
#
# Category : attacks
# Version : 143
#
# This File Date : Sun Apr 21 02:52:34 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_exim_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
216.163.188.210

101
bi_ftp_0_1d.ipset Normal file
View File

@ -0,0 +1,101 @@
#
# bi_ftp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/0?age=1d
# Source File Date: Sun Apr 21 10:04:51 UTC 2019
#
# Category : attacks
# Version : 13441
#
# This File Date : Sun Apr 21 10:04:51 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 71 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.176.0.94
27.195.229.8
31.184.193.102
46.161.27.73
46.165.230.5
49.82.22.175
58.216.60.159
58.216.60.163
59.41.244.212
59.175.239.178
60.1.255.128
60.23.24.190
60.216.149.32
61.130.146.238
62.233.99.74
80.79.27.168
82.85.145.91
82.147.220.206
91.49.166.96
93.113.63.242
94.242.59.89
95.78.137.186
101.30.25.182
106.87.20.162
106.113.67.51
110.53.234.200
110.243.61.82
111.221.43.112
113.110.171.168
113.221.27.120
114.228.153.116
114.228.200.183
114.239.54.6
116.25.240.224
117.10.55.30
117.40.5.42
118.113.23.130
118.123.22.233
118.250.113.251
120.230.95.94
121.26.215.250
121.69.3.38
121.231.181.244
122.136.84.185
123.12.178.55
123.166.135.37
123.178.150.230
132.148.17.38
138.68.189.129
170.238.61.238
171.25.193.235
175.11.209.218
175.16.35.91
177.205.120.83
178.175.132.229
179.95.81.219
180.124.77.129
180.142.44.117
185.178.48.117
191.31.72.94
193.169.255.253
202.138.226.2
212.35.193.126
218.71.0.246
221.3.111.178
221.13.235.0
221.149.133.213
223.14.99.211
223.135.169.55
223.199.153.218
223.220.80.72

102
bi_ftp_1_7d.ipset Normal file
View File

@ -0,0 +1,102 @@
#
# bi_ftp_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/1?age=7d
# Source File Date: Sun Apr 21 08:28:18 UTC 2019
#
# Category : attacks
# Version : 940
#
# This File Date : Sun Apr 21 08:28:18 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 72 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.180.70.178
5.101.40.97
5.101.40.98
39.118.158.229
41.59.225.121
42.51.183.193
45.32.225.235
46.34.137.81
46.165.230.5
46.214.147.118
50.252.47.25
51.254.47.48
58.16.190.56
58.42.237.29
58.221.121.90
60.23.24.190
60.161.145.243
60.221.239.68
61.33.152.215
61.153.56.30
70.91.203.141
80.16.23.37
80.188.186.235
92.63.197.29
94.23.226.221
94.158.108.47
103.207.36.76
103.210.135.136
108.82.128.117
112.161.187.208
113.206.191.212
115.248.207.78
118.85.194.26
121.26.215.250
121.29.112.99
121.69.3.38
122.2.223.242
123.157.138.165
123.178.150.230
123.249.9.114
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
137.147.22.163
162.157.220.37
166.62.92.59
168.195.231.130
171.107.111.97
171.244.27.184
172.114.92.219
175.11.209.95
178.66.160.90
182.253.11.226
183.230.146.26
185.143.223.135
185.143.223.136
185.219.81.252
185.224.133.176
185.224.134.122
188.114.179.24
193.169.252.247
195.2.222.161
202.100.182.250
202.131.69.68
207.118.138.44
213.186.170.226
213.251.182.111
218.227.85.176
221.202.168.254
222.237.78.73
223.68.134.29

608
bi_ftp_2_30d.ipset Normal file
View File

@ -0,0 +1,608 @@
#
# bi_ftp_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# ftp with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/ftp/2?age=30d
# Source File Date: Sat Apr 20 15:40:31 UTC 2019
#
# Category : attacks
# Version : 258
#
# This File Date : Sat Apr 20 15:40:31 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 578 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_ftp_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.171.55.235
1.180.70.178
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
13.250.9.115
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.81.177
27.254.94.38
31.18.168.112
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
37.1.203.124
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.48.107.140
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
47.89.27.62
47.90.48.48
47.91.145.254
49.206.242.22
50.62.160.157
50.62.161.20
50.62.177.147
50.63.67.12
50.63.189.186
50.63.194.47
50.66.34.226
50.93.206.56
50.116.109.149
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.66.63.16
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.218.56.82
58.221.121.90
58.247.249.189
59.7.96.57
59.147.36.54
60.54.255.13
60.161.128.173
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
60.221.239.68
61.6.83.153
61.33.152.215
61.142.21.46
61.153.56.30
61.158.163.140
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
67.205.18.89
69.64.33.138
69.89.31.107
69.175.76.44
70.91.203.141
72.167.190.6
72.191.112.118
74.208.164.103
74.208.229.7
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.48.239.173
79.120.86.30
79.137.65.236
80.14.15.77
80.16.23.37
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.93.240.60
81.133.222.214
81.177.135.131
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.111.176.222
89.114.147.92
89.121.218.230
90.50.217.121
91.121.76.70
91.121.106.53
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.51.148.141
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.158.114.68
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.158.108.47
94.182.227.36
95.0.1.68
95.128.45.185
95.130.9.44
95.220.32.63
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.7.1.11
103.15.140.149
103.28.118.18
103.29.16.18
103.48.116.47
103.60.14.249
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.169.96.118
110.170.194.66
111.11.181.53
111.63.6.113
111.63.28.51
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.231.101.60
115.248.207.78
116.36.37.203
116.125.224.129
116.247.107.90
117.103.204.41
117.156.126.3
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.144.139.217
118.163.131.42
118.169.12.68
118.193.178.185
118.250.113.93
119.23.110.173
119.29.252.149
119.46.166.132
119.90.52.36
119.192.13.115
119.193.140.193
120.24.183.44
120.72.89.162
120.230.95.92
121.8.153.122
121.12.172.184
121.14.7.244
121.18.68.94
121.26.215.250
121.28.255.249
121.29.112.99
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.178.150.230
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.207.216.2
125.75.207.25
125.180.217.196
125.208.9.204
125.215.181.117
125.227.14.43
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
136.243.24.136
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
141.105.64.239
142.4.210.41
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
149.56.170.34
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.69.184.49
158.248.210.174
159.65.205.28
159.203.181.178
159.226.43.36
162.144.38.233
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
171.107.111.97
171.107.206.178
171.244.27.184
172.96.160.154
172.114.92.219
173.201.196.202
173.248.194.22
175.11.209.95
175.11.210.248
175.114.192.117
176.9.83.200
176.31.191.186
176.56.62.178
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.50.151.58
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.215.74.190
183.230.146.26
184.106.153.92
184.168.27.101
184.168.200.203
185.10.99.4
185.136.112.11
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.195.76.50
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.17.106.183
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.168.191
195.154.182.63
195.154.231.179
195.211.176.181
195.242.98.193
196.50.231.70
197.155.191.188
197.231.221.211
198.154.246.201
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.150.151.112
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
207.210.192.80
207.226.141.36
208.86.153.196
208.100.26.231
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.34.136.19
212.50.127.5
212.98.171.75
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.102
213.251.182.103
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
217.182.192.29
218.0.166.74
218.39.174.83
218.60.67.67
218.60.67.70
218.90.143.254
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
219.147.95.246
219.246.33.161
220.122.88.137
220.133.7.28
220.178.25.66
220.203.63.86
220.216.111.35
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.208.242.242
221.209.235.2
221.212.74.130
221.229.166.77
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.237.78.73
222.237.250.158
223.68.134.29
223.111.180.80
223.167.85.18
223.245.215.115

1235
bi_http_0_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

745
bi_http_1_7d.ipset Normal file
View File

@ -0,0 +1,745 @@
#
# bi_http_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# http with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/http/1?age=7d
# Source File Date: Sun Apr 21 04:20:53 UTC 2019
#
# Category : attacks
# Version : 1203
#
# This File Date : Sun Apr 21 04:20:53 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 715 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_http_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.255.70.86
1.255.70.114
5.2.211.92
5.8.10.202
5.199.130.188
14.177.235.133
23.129.64.102
23.229.73.68
23.254.138.189
24.120.10.18
27.17.15.26
27.42.165.226
31.13.227.4
35.0.127.52
36.7.110.188
36.67.120.85
37.58.150.203
37.187.129.166
38.100.21.63
39.108.58.198
41.32.99.6
41.33.229.210
41.39.71.154
41.39.153.11
41.39.153.87
41.128.185.155
41.210.49.98
43.227.254.4
45.55.186.234
46.37.172.95
46.148.17.90
46.165.230.5
46.227.197.73
50.30.47.135
50.62.177.193
51.15.43.205
51.15.49.134
51.15.224.0
51.255.81.102
52.48.76.238
54.36.189.105
58.17.221.4
58.19.204.129
58.20.36.88
58.20.55.71
58.20.108.148
58.20.185.12
58.20.187.21
58.56.145.94
58.58.135.158
58.59.14.195
58.62.55.130
58.125.192.201
58.140.108.2
58.143.207.2
58.211.169.50
58.214.24.53
58.215.13.154
58.221.72.202
58.240.2.38
58.240.111.50
58.242.164.10
58.244.173.130
58.244.188.78
58.246.5.122
59.125.2.63
60.2.15.52
60.2.50.114
60.2.101.221
60.6.214.48
60.6.216.243
60.6.223.191
60.6.227.95
60.8.207.34
60.11.113.164
60.13.197.131
60.28.131.10
60.30.66.199
60.30.224.189
60.161.139.49
60.166.48.158
60.169.26.22
60.172.43.228
60.172.231.12
60.174.37.226
60.174.118.80
60.174.192.240
60.191.38.77
60.191.52.254
60.191.206.110
60.209.163.54
60.216.106.162
60.216.116.178
60.222.227.195
60.223.252.6
60.250.29.229
61.37.150.6
61.50.130.146
61.53.66.4
61.134.52.164
61.136.81.154
61.136.81.234
61.136.82.164
61.136.94.166
61.136.104.131
61.148.196.114
61.150.76.201
61.153.54.38
61.153.215.122
61.158.140.152
61.158.186.84
61.161.147.218
61.161.209.134
61.163.36.24
61.163.69.170
61.163.196.149
61.163.229.226
61.163.231.150
61.164.81.210
61.167.79.135
61.177.25.58
61.177.181.109
61.178.160.83
61.180.38.132
61.182.27.121
61.182.82.34
61.184.35.3
61.185.137.161
61.185.139.72
61.186.136.36
61.186.219.33
61.187.123.74
61.189.47.93
61.190.16.210
61.191.130.198
61.191.220.250
61.219.67.188
61.232.0.130
62.99.80.170
62.176.7.182
62.210.37.82
64.90.40.114
64.113.32.29
65.19.167.132
66.109.30.139
66.240.236.119
66.249.79.5
66.249.79.8
66.249.79.9
66.249.79.10
66.249.79.12
66.249.79.14
66.249.79.16
66.249.79.18
66.249.79.29
66.249.79.64
66.249.79.95
66.249.79.116
66.249.79.126
66.249.79.128
66.249.79.132
66.249.79.149
66.249.79.151
66.249.79.237
67.21.36.3
71.6.146.186
71.6.167.142
74.208.216.211
74.208.244.107
77.37.208.110
77.247.181.162
77.247.181.165
78.83.105.149
80.67.172.162
80.82.77.139
80.127.116.96
80.147.59.28
82.130.202.35
82.208.65.46
85.174.224.42
87.98.227.4
88.32.17.110
89.31.57.5
89.234.157.254
91.183.149.230
91.200.12.9
91.200.12.12
91.205.173.48
91.210.144.219
91.210.145.65
91.225.77.71
91.226.102.34
91.233.156.93
92.243.31.212
94.23.248.69
94.46.149.17
94.46.169.5
94.102.49.193
94.102.49.198
94.156.119.230
94.190.76.207
94.230.208.147
94.230.208.148
95.105.171.133
97.74.6.168
97.74.228.245
101.100.185.41
101.231.140.218
103.21.142.12
103.53.230.75
103.194.242.158
104.128.144.131
104.238.80.144
107.77.106.84
108.168.247.250
109.201.133.100
110.17.188.30
110.80.33.226
110.249.212.46
111.1.89.230
111.26.198.30
111.40.73.83
111.40.84.27
111.40.93.65
111.43.111.140
111.59.53.130
111.85.215.66
111.225.204.158
111.230.59.86
112.4.172.182
112.4.235.211
112.16.203.48
112.16.214.182
112.23.7.76
112.23.7.88
112.24.103.242
112.24.104.228
112.26.80.46
112.26.80.145
112.26.82.61
112.26.122.164
112.27.128.13
112.27.129.154
112.27.130.127
112.78.10.32
112.91.58.238
112.91.59.106
112.113.241.17
112.175.232.147
113.8.194.3
113.140.84.86
113.160.133.240
113.162.84.112
113.204.147.26
114.32.181.215
114.35.243.41
114.103.180.148
114.108.150.159
114.215.99.132
114.215.142.49
114.215.154.125
114.215.164.201
115.28.17.58
115.28.28.62
115.28.43.234
115.28.71.161
115.28.76.22
115.28.111.201
115.28.145.231
115.28.154.44
115.28.212.181
115.28.229.143
115.28.240.215
115.28.245.132
115.29.32.55
115.29.76.145
115.84.112.138
115.159.99.54
115.159.147.138
115.236.24.10
115.238.247.228
116.113.86.246
116.113.96.22
116.228.90.9
116.248.41.55
117.28.250.42
117.141.112.147
117.141.215.16
117.149.2.142
117.159.84.142
118.24.63.246
118.89.31.212
118.121.38.89
118.121.233.54
118.144.8.198
118.163.58.117
118.163.97.19
118.163.135.17
118.163.135.18
118.163.143.170
119.6.89.127
119.10.114.92
119.23.12.170
119.23.220.191
119.27.178.206
119.29.4.85
119.29.5.68
119.29.82.97
119.39.84.75
119.153.112.90
119.204.177.120
120.24.60.115
120.24.190.242
120.27.6.97
120.27.31.148
120.27.35.11
120.27.37.74
120.27.100.100
120.27.103.132
120.27.107.165
120.27.114.224
120.29.140.188
120.35.12.153
120.76.114.201
120.76.121.20
120.76.132.64
120.76.146.29
120.76.176.146
120.192.201.22
120.194.7.10
120.194.193.7
120.194.212.234
120.202.36.46
120.203.25.58
120.209.31.231
120.209.71.14
120.209.71.73
120.209.164.118
120.209.233.191
120.236.135.204
121.28.40.179
121.42.13.194
121.42.50.93
121.42.52.27
121.42.54.54
121.42.138.121
121.42.143.123
121.42.152.155
121.42.154.116
121.42.205.30
121.59.9.73
121.128.135.73
122.193.106.54
122.224.3.12
122.225.238.98
122.226.136.90
122.227.20.90
122.228.165.38
123.7.54.235
123.15.58.162
123.57.254.142
123.206.197.121
123.206.212.37
123.207.5.43
123.232.125.198
123.234.215.242
123.249.50.125
124.42.103.139
124.65.64.174
124.66.133.106
124.128.25.147
124.128.73.58
124.207.57.146
124.207.209.114
125.17.39.90
125.75.206.244
125.77.72.197
125.77.127.97
125.227.146.182
125.227.179.59
128.199.223.220
134.249.141.24
138.197.22.180
138.197.46.208
139.59.66.225
139.129.14.230
139.129.40.112
139.129.130.253
140.143.90.193
142.4.26.198
145.239.91.37
151.80.10.50
153.37.22.155
162.247.74.27
163.172.160.182
167.114.166.13
169.239.220.35
171.8.76.24
171.221.255.5
175.198.214.201
175.230.213.33
176.10.99.200
176.10.104.240
176.53.120.134
177.19.164.147
177.19.164.149
177.19.165.26
177.19.181.169
177.19.187.79
177.43.247.237
177.43.251.153
177.99.211.149
177.99.217.233
177.135.98.161
177.135.101.5
177.135.101.93
177.135.103.25
177.135.103.107
177.159.99.31
177.159.99.89
177.159.122.251
178.32.147.150
178.73.215.171
178.75.3.120
180.76.15.6
180.76.15.7
180.76.15.10
180.76.15.16
180.76.15.22
180.76.15.23
180.76.15.28
180.76.15.29
180.76.15.139
180.76.15.148
180.76.15.153
180.76.15.158
180.76.15.162
180.76.15.163
180.169.58.42
181.48.9.82
182.71.45.122
182.71.206.138
182.75.117.122
182.106.216.4
182.137.14.72
182.176.139.38
182.176.139.142
182.190.3.182
182.190.4.60
182.190.4.68
182.190.4.84
182.223.115.219
182.254.129.82
183.62.158.97
183.64.166.163
183.220.53.39
183.224.81.214
185.84.180.48
185.85.190.132
185.85.191.196
185.85.191.201
185.85.238.244
185.85.239.110
185.86.13.213
185.86.93.2
185.86.93.20
185.86.93.25
185.86.93.30
185.86.93.33
185.86.93.34
185.86.93.40
185.86.93.50
185.86.93.55
185.86.93.57
185.86.164.98
185.86.164.99
185.86.164.100
185.86.164.101
185.86.164.102
185.86.164.103
185.86.164.106
185.86.164.107
185.86.164.108
185.86.164.109
185.86.164.110
185.86.167.4
185.99.36.170
185.100.87.190
185.100.87.191
185.100.87.207
185.100.87.245
185.100.87.247
185.100.87.248
185.100.87.249
185.100.87.250
185.107.47.171
185.119.81.11
185.119.81.50
185.129.148.167
185.165.168.229
185.220.100.253
185.220.101.3
185.220.101.6
185.220.101.13
185.220.101.26
185.220.101.30
185.220.101.44
185.220.101.45
185.220.101.46
185.220.102.6
185.220.102.7
185.234.217.207
186.194.114.14
186.201.194.58
186.215.130.159
186.215.130.242
186.215.143.149
186.215.195.249
186.215.197.15
186.215.197.183
186.215.199.65
186.215.199.69
186.232.136.240
186.232.141.156
187.58.134.43
187.58.134.57
187.58.139.171
187.115.123.74
188.32.19.9
188.165.141.43
188.166.188.97
189.59.5.81
189.59.69.3
189.114.67.213
189.114.140.70
189.204.6.157
189.204.52.236
189.204.52.237
189.206.125.171
190.13.106.62
190.13.106.123
190.13.106.220
190.56.70.131
190.109.164.74
190.202.44.194
190.210.9.41
190.210.182.93
192.42.116.13
192.42.116.15
192.99.232.154
192.160.102.164
192.160.102.170
192.187.108.186
193.106.30.99
193.112.48.249
193.201.224.220
193.201.224.225
193.227.179.18
194.150.113.94
195.22.100.5
196.218.157.4
196.219.96.108
196.219.154.248
197.44.136.0
197.45.117.177
197.231.221.211
197.248.136.250
198.20.70.114
198.20.103.178
199.127.226.150
200.29.136.155
200.175.104.101
201.140.110.78
201.183.237.8
201.184.241.243
202.78.71.2
202.92.7.103
202.93.35.19
202.137.141.81
202.162.29.215
203.41.236.130
203.93.109.130
203.242.126.4
207.244.70.35
208.43.30.58
208.100.26.229
208.100.26.230
208.100.26.231
208.100.26.232
209.29.221.147
209.59.190.100
210.16.189.4
210.57.216.56
210.72.142.7
211.20.181.113
211.75.13.207
211.92.143.94
211.137.8.103
211.141.155.131
211.141.209.131
211.161.90.99
211.181.72.238
211.232.116.144
212.109.17.68
212.142.226.93
213.23.12.149
213.58.202.70
213.156.100.220
216.189.15.251
216.239.90.19
216.244.66.239
217.64.195.204
217.79.6.115
218.22.129.38
218.22.135.190
218.23.156.227
218.23.162.169
218.24.236.4
218.26.97.162
218.26.163.125
218.28.50.51
218.28.58.186
218.28.171.213
218.28.234.53
218.29.52.2
218.29.219.18
218.56.102.14
218.57.142.194
218.57.237.243
218.58.105.206
218.64.57.12
218.64.77.62
218.64.165.194
218.69.91.88
218.75.148.181
218.77.80.51
218.87.254.235
218.90.162.234
218.92.229.178
218.94.144.101
218.104.133.243
218.104.234.173
218.107.46.228
218.189.15.187
218.200.61.170
218.201.62.71
218.201.79.71
218.201.83.148
218.201.101.172
218.204.69.3
218.204.70.20
218.206.210.194
218.249.232.178
219.138.59.240
219.148.39.134
219.149.30.61
219.149.220.82
219.154.66.223
219.154.133.161
219.159.70.68
220.124.240.66
220.164.2.88
220.164.2.99
220.164.2.111
220.164.2.114
220.164.2.120
220.164.193.238
220.165.28.189
220.169.102.6
220.174.209.154
220.178.107.242
220.225.7.42
220.227.147.150
221.1.177.2
221.3.236.94
221.4.205.30
221.7.133.28
221.12.137.6
221.130.130.238
221.131.86.182
221.176.112.45
221.176.134.36
221.176.176.126
221.178.194.144
221.199.41.218
221.212.99.106
221.224.25.26
221.228.242.13
221.230.139.83
221.231.109.126
222.35.21.206
222.42.148.60
222.92.142.226
222.101.93.2
222.141.50.134
222.160.126.34
222.161.47.82
222.161.209.130
222.171.61.97
222.172.14.115
222.173.242.10
222.185.255.227
222.187.41.10
222.188.95.202
222.189.186.67
222.191.233.238
222.218.248.42
222.222.219.154
222.223.101.58
222.229.112.168
222.242.226.99
223.68.185.218
223.100.12.172
223.100.152.42
223.105.4.250

1075
bi_http_2_30d.ipset Normal file

File diff suppressed because it is too large Load Diff

34
bi_imap_0_1d.ipset Normal file
View File

@ -0,0 +1,34 @@
#
# bi_imap_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# imap with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/imap/0?age=1d
# Source File Date: Sun Apr 21 08:28:20 UTC 2019
#
# Category : attacks
# Version : 3737
#
# This File Date : Sun Apr 21 08:28:20 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 4 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_imap_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
122.233.47.212
125.209.107.195
182.74.58.62
197.54.255.199

2176
bi_mail_0_1d.ipset Normal file

File diff suppressed because it is too large Load Diff

1438
bi_mail_1_7d.ipset Normal file

File diff suppressed because it is too large Load Diff

4950
bi_mail_2_30d.ipset Normal file

File diff suppressed because it is too large Load Diff

30
bi_named_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_named_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# named with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/named/0?age=1d
# Source File Date: Fri Apr 19 21:28:54 UTC 2019
#
# Category : attacks
# Version : 2962
#
# This File Date : Fri Apr 19 22:01:02 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_named_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

30
bi_owncloud_0_1d.ipset Normal file
View File

@ -0,0 +1,30 @@
#
# bi_owncloud_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# owncloud with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/owncloud/0?age=1d
# Source File Date: Mon Nov 5 08:01:27 UTC 2018
#
# Category : attacks
# Version : 30
#
# This File Date : Mon Nov 5 08:32:46 UTC 2018
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 0 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_owncloud_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#

View File

@ -0,0 +1,41 @@
#
# bi_plesk-postfix_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# plesk-postfix with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/plesk-postfix/0?age=1d
# Source File Date: Sun Apr 21 09:02:22 UTC 2019
#
# Category : attacks
# Version : 5024
#
# This File Date : Sun Apr 21 09:02:22 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 11 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_plesk-postfix_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
27.74.241.212
41.225.239.103
103.207.38.151
158.255.6.130
179.41.26.133
185.36.81.164
185.234.216.138
185.234.219.52
185.234.219.57
185.234.219.67
185.234.219.100

305
bi_postfix-sasl_0_1d.ipset Normal file
View File

@ -0,0 +1,305 @@
#
# bi_postfix-sasl_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix-sasl with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix-sasl/0?age=1d
# Source File Date: Sun Apr 21 10:05:06 UTC 2019
#
# Category : attacks
# Version : 13952
#
# This File Date : Sun Apr 21 10:05:06 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 275 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix-sasl_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.81.68.67
5.189.110.247
14.29.163.248
14.186.61.108
23.254.231.87
27.74.241.212
27.152.24.158
35.190.165.252
35.226.195.195
37.49.224.157
37.49.224.164
37.49.224.187
37.49.224.202
37.49.225.26
37.49.225.46
37.49.225.147
37.49.225.232
37.49.227.16
37.49.227.194
37.49.230.111
37.49.230.133
37.49.230.144
37.49.230.152
37.72.209.22
37.114.163.100
39.50.76.240
41.225.239.103
42.231.48.144
45.125.65.96
45.125.66.37
45.125.66.56
45.125.66.61
45.125.66.62
45.125.66.64
45.125.66.67
45.125.66.68
45.125.66.70
45.125.66.73
45.125.66.79
45.125.66.80
45.125.66.83
45.125.66.84
45.125.66.85
45.125.66.86
45.125.66.95
45.125.66.100
45.125.66.106
45.125.66.109
45.125.66.122
45.125.66.123
45.125.66.133
45.125.66.137
45.125.66.139
45.125.66.144
45.125.66.152
45.125.66.153
45.125.66.154
45.125.66.156
45.125.66.157
45.125.66.161
45.125.66.183
45.125.66.184
45.125.66.190
45.125.66.191
45.125.66.192
45.125.66.193
45.125.66.194
45.125.66.204
45.125.66.216
45.125.66.218
45.125.66.232
45.125.66.233
45.125.66.234
45.125.66.251
45.125.66.253
45.227.253.99
49.70.106.44
49.86.180.233
50.224.110.50
51.77.74.175
51.254.58.226
54.39.50.217
58.217.78.10
59.95.215.176
66.70.190.18
68.183.12.252
68.183.38.61
68.183.216.175
68.183.223.36
69.75.91.250
79.10.53.113
89.179.112.50
89.214.61.255
89.248.172.85
91.126.179.191
91.212.150.81
93.157.63.6
93.157.63.7
93.157.63.8
93.157.63.9
93.157.63.30
95.85.59.22
102.165.35.178
102.165.49.54
102.165.50.142
103.99.0.192
103.99.2.3
103.99.2.4
103.99.2.73
103.114.104.69
103.114.104.175
103.125.190.83
103.133.105.5
103.207.37.40
103.207.37.50
103.207.38.151
103.231.139.127
103.231.139.146
103.231.139.184
103.231.139.248
103.233.114.117
104.236.158.58
104.236.248.209
104.248.33.189
104.248.61.201
104.248.80.250
104.248.89.235
104.248.178.255
107.173.59.123
110.78.171.175
112.196.77.202
113.123.0.248
113.195.167.208
114.236.34.114
117.28.5.56
117.205.137.51
118.192.10.92
118.254.20.221
119.24.214.123
120.33.122.43
120.43.229.14
121.234.30.8
124.72.140.28
125.78.166.113
125.209.107.195
129.150.112.231
136.232.10.146
138.68.8.165
138.197.35.188
139.59.224.234
141.98.10.32
141.98.10.33
141.98.10.34
141.98.10.40
141.98.10.41
141.98.10.52
141.98.10.53
141.98.80.32
142.93.36.241
142.93.83.223
142.93.108.45
142.93.144.42
142.93.200.146
142.93.228.232
144.217.71.173
145.249.104.111
151.80.162.216
151.80.238.201
152.254.228.7
156.218.249.54
157.230.16.196
158.69.207.104
158.255.6.130
158.255.6.232
159.65.230.184
159.89.229.129
159.203.32.194
159.203.36.200
159.203.116.103
165.0.56.182
168.63.44.201
170.254.229.27
171.8.76.24
171.100.8.254
173.212.202.56
174.138.63.237
175.139.231.129
176.58.227.197
176.107.130.72
177.37.166.119
177.189.204.86
178.62.66.223
178.128.75.233
178.128.235.120
178.128.236.47
178.128.237.175
178.153.220.208
179.41.26.133
179.52.38.161
180.117.100.58
180.190.187.80
182.74.58.62
182.108.45.218
185.36.81.145
185.36.81.165
185.36.81.166
185.36.81.175
185.36.81.180
185.36.81.182
185.81.157.7
185.211.245.198
185.222.209.71
185.228.80.31
185.228.80.32
185.228.80.35
185.228.80.47
185.234.216.159
185.234.217.156
185.234.217.161
185.234.217.185
185.234.217.186
185.234.217.187
185.234.217.188
185.234.217.220
185.234.217.221
185.234.217.222
185.234.217.223
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
185.234.218.148
185.234.218.156
185.234.219.51
185.234.219.54
185.234.219.61
185.234.219.67
185.254.122.31
187.84.232.204
187.170.186.212
188.165.219.27
188.166.39.232
188.166.72.93
190.60.219.108
190.95.204.74
190.149.177.56
190.153.220.42
191.101.5.128
192.95.56.86
192.99.175.91
193.169.254.60
193.169.254.61
193.169.254.62
193.169.254.63
193.169.254.66
193.169.254.67
193.169.254.68
193.169.254.69
195.178.50.222
197.39.140.30
197.54.255.199
198.44.164.31
201.37.145.117
201.149.20.160
202.22.144.210
203.2.115.115
209.14.0.42
209.97.142.78
211.72.92.124
217.79.179.118
220.177.175.15
220.227.40.235
221.231.27.167
222.77.10.170
222.217.148.198

936
bi_postfix-sasl_1_7d.ipset Normal file
View File

@ -0,0 +1,936 @@
#
# bi_postfix-sasl_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix-sasl with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix-sasl/1?age=7d
# Source File Date: Sun Apr 21 07:20:39 UTC 2019
#
# Category : attacks
# Version : 923
#
# This File Date : Sun Apr 21 07:20:39 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 906 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix-sasl_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.193.99.198
2.90.138.255
2.204.28.183
5.11.46.206
5.19.138.32
5.101.40.66
5.135.51.115
5.153.139.226
5.157.49.101
5.196.175.185
5.202.74.4
5.202.77.20
13.65.212.60
13.85.29.183
14.117.177.26
14.117.179.114
14.169.14.56
14.169.22.9
14.169.132.48
14.176.86.64
14.186.3.65
14.187.126.146
14.231.25.96
23.97.147.249
23.227.201.82
27.74.241.212
27.118.30.52
27.131.48.4
27.131.48.6
27.209.168.30
27.209.168.252
27.209.170.92
27.209.171.18
27.209.172.80
31.168.198.79
31.186.167.106
31.193.129.23
31.214.243.20
36.56.146.248
37.38.127.99
37.46.76.156
37.48.72.233
37.48.92.78
37.49.224.73
37.49.224.88
37.49.224.96
37.49.224.102
37.49.224.103
37.49.224.110
37.49.224.119
37.49.224.122
37.49.224.124
37.49.224.125
37.49.224.127
37.49.224.144
37.49.224.146
37.49.224.148
37.49.224.149
37.49.224.150
37.49.224.164
37.49.224.172
37.49.224.179
37.49.224.183
37.49.224.186
37.49.224.187
37.49.224.190
37.49.224.199
37.49.224.200
37.49.224.201
37.49.224.202
37.49.224.215
37.49.224.235
37.49.224.245
37.49.225.9
37.49.225.21
37.49.225.46
37.49.225.47
37.49.225.80
37.49.225.82
37.49.225.83
37.49.225.88
37.49.225.90
37.49.225.159
37.49.225.166
37.49.225.184
37.49.225.186
37.49.225.195
37.49.225.199
37.49.225.207
37.49.225.250
37.49.227.16
37.49.227.92
37.49.227.94
37.49.227.101
37.49.227.106
37.49.227.115
37.49.227.117
37.49.227.119
37.49.227.130
37.49.227.136
37.49.227.152
37.49.227.155
37.49.227.157
37.49.227.159
37.49.227.179
37.49.227.185
37.49.227.190
37.49.227.194
37.49.227.204
37.49.227.212
37.49.227.214
37.49.227.221
37.49.227.227
37.49.230.112
37.49.230.133
37.49.230.138
37.49.230.144
37.49.230.148
37.49.230.152
37.59.52.34
37.75.143.224
37.128.225.21
37.130.115.221
39.109.112.58
40.124.41.11
41.0.39.228
41.82.3.170
41.82.3.202
41.86.98.36
41.139.175.245
41.188.151.161
41.188.172.102
41.208.217.73
41.218.211.11
41.222.141.89
41.228.17.239
42.59.116.167
42.115.30.67
43.245.204.117
43.249.39.177
45.5.239.3
45.58.124.246
45.64.178.251
45.119.8.12
45.123.24.10
45.126.211.200
45.225.172.62
46.49.139.2
46.80.25.45
46.105.179.127
46.148.27.63
46.148.27.88
46.148.27.95
46.149.191.194
46.185.138.26
46.225.129.170
46.225.129.243
46.236.27.24
47.40.120.17
47.206.105.100
49.65.160.21
49.65.160.155
49.71.81.154
49.72.65.25
49.75.189.122
49.76.10.216
49.76.11.33
49.76.11.165
49.76.87.136
49.76.124.170
49.76.204.220
49.76.204.236
50.192.28.157
51.15.152.98
51.38.39.31
51.144.121.104
51.218.216.243
51.254.49.230
52.151.11.80
52.191.196.49
54.39.78.188
58.52.154.252
58.215.194.74
58.219.29.26
58.219.29.54
58.219.29.152
58.219.90.106
58.221.44.243
58.221.46.12
58.221.46.72
58.221.49.91
58.221.55.194
58.221.55.242
58.221.58.248
58.221.71.10
58.242.100.10
60.172.168.119
60.177.226.208
60.177.227.42
60.184.119.147
60.187.189.73
60.187.195.143
60.190.223.221
60.215.21.63
60.217.58.177
61.39.41.147
61.147.46.177
61.160.25.118
61.162.75.142
62.81.86.6
62.206.119.116
64.110.238.35
64.137.220.223
66.70.173.25
66.70.204.141
66.70.246.109
66.70.253.4
68.168.223.247
70.150.124.66
71.10.113.13
72.68.69.32
74.122.192.115
74.143.230.206
74.208.128.234
74.208.175.154
77.81.165.144
77.240.90.238
78.25.64.170
78.110.162.10
78.129.252.20
78.131.87.207
78.156.42.133
79.61.85.97
79.77.43.225
79.135.164.130
79.147.41.31
79.173.83.7
80.11.144.53
80.13.191.206
80.34.97.56
80.82.64.98
80.82.68.13
80.82.77.17
80.139.225.174
80.139.226.168
80.139.229.116
80.139.238.34
80.139.239.150
80.147.168.27
80.211.144.224
80.211.164.18
80.211.178.40
80.252.65.176
81.2.252.215
81.23.6.101
81.67.110.95
81.174.163.117
82.33.127.202
82.209.231.170
83.215.177.188
84.21.124.213
84.45.18.215
84.53.192.243
84.95.237.68
84.241.56.109
85.88.19.159
85.187.183.180
86.43.89.238
86.89.65.50
86.125.101.140
87.109.202.4
87.138.192.79
87.169.112.72
87.169.115.171
87.169.124.233
87.169.125.240
87.226.179.121
87.243.7.183
87.252.224.6
88.26.202.21
88.99.228.173
88.99.253.197
88.248.248.44
88.255.117.2
89.16.96.70
89.34.97.115
89.43.194.86
89.46.78.36
89.248.160.156
89.248.167.159
89.248.169.103
89.248.171.89
89.248.171.134
89.248.174.3
89.252.188.82
89.253.223.49
90.63.242.90
90.84.44.220
90.84.243.216
91.18.24.73
91.109.118.76
91.121.0.5
91.121.2.18
91.121.65.163
91.121.72.26
91.121.85.131
91.121.88.223
91.121.109.83
91.121.109.211
91.121.210.37
91.121.220.125
91.138.206.3
91.142.222.23
91.187.39.238
91.209.70.221
91.225.163.76
91.234.99.215
91.234.99.217
92.63.193.124
93.88.76.73
93.107.249.182
93.115.156.16
93.174.93.46
93.174.93.251
93.175.29.178
94.23.77.107
94.23.196.177
94.48.27.187
94.97.124.211
94.102.51.67
94.102.56.215
94.102.56.235
94.138.127.133
94.177.241.124
95.60.155.188
95.110.227.5
95.111.109.119
95.168.96.77
95.188.85.32
95.218.155.2
96.92.29.201
97.80.15.138
101.1.27.158
101.96.122.43
101.99.3.211
103.1.209.63
103.3.175.139
103.28.37.37
103.35.64.58
103.89.88.79
103.89.89.27
103.89.89.50
103.89.89.116
103.89.89.229
103.89.90.83
103.89.91.31
103.99.2.4
103.99.2.5
103.99.2.7
103.99.2.134
103.99.2.158
103.99.3.5
103.100.211.66
103.103.2.107
103.108.220.67
103.109.75.2
103.114.104.175
103.194.170.15
103.197.105.222
103.207.36.63
103.207.36.85
103.207.36.244
103.207.37.40
103.207.37.84
103.207.37.173
103.207.38.151
103.207.38.152
103.207.38.154
103.207.38.155
103.207.38.156
103.207.38.157
103.207.38.163
103.207.39.104
103.207.39.140
103.215.210.4
103.215.211.106
103.230.85.157
103.231.188.46
103.255.6.117
104.168.132.140
104.168.138.82
104.193.9.10
106.6.131.215
109.224.212.230
110.83.135.192
110.83.135.237
110.83.135.242
110.88.28.51
110.143.75.7
111.30.31.176
111.93.56.215
111.224.84.39
112.120.84.231
112.169.85.202
112.245.147.235
112.245.197.133
113.117.104.84
113.117.106.19
113.121.38.144
113.121.241.117
113.124.219.158
113.161.37.238
113.161.81.98
113.161.227.134
113.171.23.47
113.172.158.213
113.176.64.112
113.190.129.123
113.196.105.155
113.240.223.157
114.92.86.206
114.99.30.159
114.103.65.97
114.106.135.167
114.216.88.147
114.223.61.184
114.223.61.200
114.223.62.208
114.223.63.3
114.223.63.44
114.223.63.169
114.223.63.230
114.223.218.14
114.223.218.66
114.224.29.32
114.225.55.158
114.226.128.46
114.230.31.85
114.238.129.125
114.238.216.193
114.239.0.29
115.72.217.137
115.144.72.8
115.144.72.17
115.193.107.59
115.214.108.128
115.231.212.82
116.17.236.124
116.17.236.144
116.17.236.251
117.4.185.4
117.24.36.178
117.24.38.119
117.24.39.194
117.68.195.181
117.68.195.240
117.80.235.93
117.84.114.163
117.84.115.120
117.84.210.104
117.84.210.153
117.85.56.52
117.85.57.31
117.85.57.233
117.85.59.83
117.90.0.36
117.94.80.200
117.94.81.113
117.94.81.198
117.94.91.150
118.68.169.82
118.69.170.173
118.107.130.162
118.185.38.37
118.201.203.86
118.255.176.7
119.205.232.227
120.198.126.162
121.122.48.1
121.129.20.140
121.225.26.103
121.226.100.112
121.235.194.12
121.235.194.69
121.235.194.226
121.235.194.253
121.237.139.73
121.237.142.52
121.237.142.55
121.237.142.126
121.237.142.136
121.237.143.216
122.116.29.1
122.147.191.200
123.16.13.136
123.16.242.213
123.24.205.255
123.103.254.253
123.133.189.96
123.150.47.194
124.29.246.106
124.135.249.125
125.21.179.210
125.35.210.208
125.106.224.229
125.115.130.90
125.115.134.128
125.215.243.129
129.158.103.217
129.208.179.138
138.204.70.239
138.204.70.248
139.196.27.35
140.250.90.151
142.0.37.170
142.0.37.172
142.0.37.178
142.0.38.154
142.0.38.162
142.11.193.231
142.44.131.18
142.44.151.114
142.44.156.241
142.44.181.238
142.44.181.251
142.44.205.225
142.44.207.48
142.44.207.49
143.255.153.148
144.0.94.211
144.217.38.193
144.217.178.164
144.255.30.144
145.102.1.250
145.128.197.156
149.56.66.210
149.56.73.72
149.56.82.194
149.56.166.230
149.56.254.112
149.56.254.120
149.107.14.92
154.73.182.16
155.94.169.123
158.140.140.146
158.255.6.232
159.0.221.62
159.0.231.107
159.65.175.241
159.89.4.2
159.89.100.11
159.89.181.102
160.0.225.153
160.0.225.156
160.19.51.136
161.132.201.90
162.248.74.241
163.47.147.230
164.39.218.210
166.148.218.10
167.99.3.252
167.99.73.205
167.99.83.139
167.99.171.211
167.114.22.102
167.114.24.233
167.114.161.24
167.114.176.165
168.167.91.81
168.187.107.74
170.79.33.148
170.79.33.162
170.246.237.66
171.80.157.197
171.255.209.169
173.242.120.168
173.242.125.71
173.242.127.214
175.7.196.134
175.100.101.96
175.139.184.225
176.31.253.157
176.35.174.123
176.61.143.57
176.95.137.96
176.107.131.172
176.108.177.42
176.121.9.21
176.124.144.185
177.4.73.183
177.38.190.22
177.44.25.0
177.44.28.176
177.103.201.177
177.130.160.237
177.135.106.242
177.221.99.93
177.221.110.166
177.223.68.8
178.15.0.169
178.35.191.250
178.49.148.100
178.124.207.132
178.141.251.45
178.216.48.45
178.216.52.110
178.216.52.118
178.216.52.160
178.216.52.168
178.254.135.202
179.228.162.193
180.87.34.76
180.100.237.90
180.113.66.252
180.113.67.216
180.114.150.56
180.114.150.60
180.114.151.107
180.114.168.114
180.119.65.131
180.121.129.1
180.232.1.15
181.31.213.51
181.39.91.50
181.39.164.114
181.40.122.122
181.49.39.70
181.49.122.162
181.60.254.53
181.115.71.28
181.214.87.223
181.214.206.20
181.214.206.30
181.214.206.44
181.214.206.45
181.214.206.100
181.214.206.101
181.214.206.116
181.214.206.118
181.214.206.119
181.214.206.133
181.214.206.148
181.214.206.170
181.214.206.189
181.214.206.195
181.215.195.33
181.215.195.230
181.215.195.231
182.42.244.13
182.42.244.60
182.42.244.151
182.72.153.162
182.75.206.218
182.135.184.62
182.176.115.31
182.176.158.114
183.61.244.100
183.111.224.65
183.128.34.132
183.150.163.60
183.159.82.219
183.159.87.75
183.165.34.135
184.71.152.86
185.3.134.108
185.8.0.250
185.24.233.252
185.36.81.44
185.36.81.46
185.58.17.122
185.67.178.114
185.85.205.22
185.94.194.4
185.98.87.212
185.118.167.220
185.121.184.21
185.165.31.136
185.165.31.148
185.165.31.150
185.169.229.244
185.189.112.187
185.206.224.149
185.221.172.140
185.222.56.148
185.228.80.7
185.228.80.18
185.228.80.32
185.228.80.34
185.228.80.35
185.228.80.39
185.228.80.42
185.228.80.45
185.228.80.47
185.228.80.48
185.228.80.50
185.228.80.59
185.232.65.140
185.234.216.75
185.234.216.77
185.234.216.114
185.234.216.134
185.234.216.139
185.234.216.141
185.234.216.146
185.234.216.148
185.234.216.174
185.234.216.186
185.234.216.187
185.234.216.188
185.234.216.189
185.234.216.191
185.234.216.192
185.234.216.204
185.234.216.235
185.234.217.39
185.234.217.61
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
185.234.218.156
185.234.218.177
185.234.218.204
185.234.218.220
185.239.226.223
186.31.81.98
186.47.19.146
186.96.110.70
186.101.125.43
186.101.223.230
186.148.172.16
186.178.74.22
186.202.179.15
186.230.29.98
186.248.167.118
187.55.179.130
187.85.143.82
187.109.55.156
187.111.52.222
187.111.53.22
187.111.54.162
187.111.57.171
187.111.59.7
187.111.63.34
187.111.63.38
187.167.193.217
187.176.191.6
187.180.4.78
188.39.105.186
188.165.219.27
188.165.221.36
188.165.221.69
188.165.237.186
188.166.86.31
188.166.164.162
189.51.104.238
189.51.111.67
189.124.0.216
189.210.181.3
189.212.113.83
189.212.124.191
189.212.125.71
190.5.247.2
190.25.46.42
190.26.115.140
190.58.253.76
190.58.253.89
190.64.146.226
190.85.18.114
190.85.21.242
190.85.21.244
190.107.182.46
190.111.24.194
190.128.227.82
190.145.14.166
190.145.82.98
190.145.168.138
190.158.227.102
190.213.10.158
190.248.150.194
191.37.205.212
191.53.19.122
191.53.19.175
191.53.248.15
191.96.249.13
191.96.249.171
191.96.249.237
191.240.74.110
191.240.88.196
192.69.90.220
192.95.14.128
192.95.42.91
192.99.7.175
192.99.8.171
192.99.25.136
192.99.175.91
192.99.237.135
192.144.166.178
192.163.226.125
192.169.219.245
193.104.83.134
193.160.226.190
193.165.55.126
193.169.252.21
193.227.51.79
195.22.125.28
195.22.126.39
195.86.58.149
195.95.151.251
195.201.135.203
196.25.105.154
196.27.85.223
196.28.236.73
196.192.99.9
196.192.99.109
196.192.99.110
196.196.81.109
196.196.85.3
196.196.190.10
196.196.190.108
196.202.170.22
196.203.109.154
197.50.35.112
197.184.45.138
197.242.66.181
197.249.5.116
197.253.124.164
198.23.59.118
198.38.85.62
198.50.180.177
198.53.60.171
199.168.137.187
199.168.137.188
199.168.137.195
199.168.141.61
199.180.117.78
200.6.178.132
200.24.70.79
200.60.73.67
200.95.179.28
200.105.154.194
200.111.232.74
200.150.79.84
200.179.121.1
200.187.95.232
201.20.96.82
201.33.193.166
201.162.182.30
201.162.182.66
201.183.239.5
201.187.101.222
201.235.166.197
202.77.50.129
202.146.85.2
202.163.116.106
202.221.41.43
203.19.70.166
203.78.141.162
203.78.142.95
203.81.77.253
203.196.142.226
203.215.33.212
204.44.78.240
206.189.25.85
206.189.114.59
207.252.77.133
209.222.111.174
210.245.34.242
212.34.242.82
212.48.75.147
212.235.19.201
213.135.172.220
213.136.105.50
213.136.168.209
213.137.8.214
213.163.44.99
213.238.168.21
213.238.168.112
213.255.195.146
216.108.232.48
216.170.114.26
217.64.111.234
217.171.94.66
217.217.179.17
218.22.100.42
218.93.124.122
218.103.119.185
218.255.245.126
219.235.4.66
220.135.212.159
221.227.104.97
221.227.105.220
221.227.107.123
221.227.108.76
221.227.108.250
221.227.111.77
221.232.193.90
222.94.144.183
222.122.31.132
222.127.71.60
222.191.176.24
222.191.176.110
222.191.176.175
222.191.177.231
222.191.178.99
222.191.178.151

983
bi_postfix-sasl_2_30d.ipset Normal file
View File

@ -0,0 +1,983 @@
#
# bi_postfix-sasl_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix-sasl with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix-sasl/2?age=30d
# Source File Date: Sun Apr 21 04:20:55 UTC 2019
#
# Category : attacks
# Version : 278
#
# This File Date : Sun Apr 21 04:20:55 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 953 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix-sasl_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
2.42.219.63
2.155.188.142
5.11.46.206
5.19.138.32
5.101.0.34
5.101.40.66
5.153.139.226
5.157.49.101
5.196.175.185
5.202.74.4
5.202.77.20
13.65.212.60
13.71.156.59
13.85.29.183
14.169.14.56
14.169.22.9
23.97.147.249
23.254.132.158
23.254.165.103
24.232.45.46
27.74.241.212
27.118.30.52
27.131.48.6
31.168.198.79
31.186.167.106
31.214.243.20
31.221.109.115
37.38.127.99
37.46.76.156
37.48.72.233
37.48.92.78
37.49.224.73
37.49.224.88
37.49.224.96
37.49.224.102
37.49.224.103
37.49.224.110
37.49.224.119
37.49.224.122
37.49.224.124
37.49.224.125
37.49.224.127
37.49.224.134
37.49.224.144
37.49.224.145
37.49.224.146
37.49.224.148
37.49.224.149
37.49.224.150
37.49.224.153
37.49.224.155
37.49.224.159
37.49.224.162
37.49.224.164
37.49.224.172
37.49.224.174
37.49.224.175
37.49.224.179
37.49.224.181
37.49.224.183
37.49.224.186
37.49.224.187
37.49.224.190
37.49.224.199
37.49.224.200
37.49.224.201
37.49.224.202
37.49.224.215
37.49.224.229
37.49.224.235
37.49.224.245
37.49.225.9
37.49.225.10
37.49.225.21
37.49.225.47
37.49.225.80
37.49.225.82
37.49.225.83
37.49.225.88
37.49.225.90
37.49.225.159
37.49.225.166
37.49.225.167
37.49.225.181
37.49.225.184
37.49.225.186
37.49.225.195
37.49.225.199
37.49.225.207
37.49.225.231
37.49.225.250
37.49.227.11
37.49.227.16
37.49.227.92
37.49.227.94
37.49.227.101
37.49.227.106
37.49.227.115
37.49.227.116
37.49.227.117
37.49.227.119
37.49.227.130
37.49.227.132
37.49.227.136
37.49.227.144
37.49.227.150
37.49.227.152
37.49.227.155
37.49.227.157
37.49.227.159
37.49.227.167
37.49.227.168
37.49.227.185
37.49.227.190
37.49.227.194
37.49.227.203
37.49.227.204
37.49.227.212
37.49.227.213
37.49.227.214
37.49.227.221
37.49.227.227
37.49.227.254
37.49.230.14
37.49.230.133
37.49.230.138
37.49.230.148
37.49.230.179
37.59.52.34
37.75.143.224
37.128.225.21
37.130.115.221
39.109.112.58
40.124.41.11
41.0.39.228
41.77.72.234
41.86.98.36
41.139.175.245
41.188.151.161
41.188.172.102
41.189.67.78
41.208.217.73
41.221.192.242
41.222.141.89
41.228.17.239
43.245.204.117
45.58.124.246
45.64.178.251
45.119.8.12
45.123.24.10
45.126.211.200
46.29.248.90
46.49.139.2
46.49.139.6
46.80.25.45
46.85.99.57
46.85.100.127
46.85.108.110
46.85.108.183
46.85.111.56
46.105.179.127
46.148.27.16
46.148.27.56
46.148.27.59
46.148.27.63
46.148.27.95
46.185.138.26
46.225.129.170
46.225.129.243
46.236.27.24
46.244.161.198
46.244.196.76
46.244.197.101
46.244.201.24
46.244.214.118
47.40.120.17
47.206.105.100
49.65.160.155
49.76.204.236
50.192.28.157
51.15.152.98
51.38.39.31
51.38.101.160
51.38.188.244
51.52.120.19
51.144.121.104
51.218.216.243
51.254.49.230
52.151.11.80
52.191.196.49
54.39.78.188
58.219.29.26
58.220.197.198
58.221.44.243
58.221.46.12
58.221.46.72
58.221.49.91
58.221.55.194
58.221.55.242
58.221.58.248
58.221.71.10
58.242.100.10
59.120.188.248
60.31.214.44
60.173.35.153
60.184.119.147
60.190.223.221
60.217.58.177
61.160.25.118
61.160.90.214
62.81.86.6
62.206.119.116
62.210.139.92
62.210.181.138
62.220.123.220
64.110.238.35
64.137.220.223
66.70.173.25
66.70.204.141
66.70.246.109
66.70.253.4
68.168.223.247
70.150.124.66
71.10.113.13
71.43.192.210
71.46.241.18
72.68.69.32
74.122.192.115
74.143.230.206
74.208.128.234
74.208.175.154
74.208.214.48
74.218.246.226
75.144.252.251
75.145.110.227
77.81.165.144
77.240.90.238
78.25.64.170
78.89.186.118
78.107.85.148
78.129.252.20
78.131.87.207
79.61.85.97
79.62.230.220
79.77.43.225
79.135.164.130
79.147.41.31
79.156.33.46
79.159.135.107
79.173.83.7
80.11.144.53
80.13.191.206
80.34.97.56
80.82.64.98
80.82.67.118
80.82.68.13
80.82.77.13
80.82.77.17
80.82.77.40
80.89.128.150
80.139.226.168
80.139.229.116
80.139.238.34
80.139.239.150
80.147.168.27
80.211.144.224
80.211.178.40
80.252.65.176
81.2.252.215
81.23.6.101
81.67.110.95
81.133.172.203
81.174.163.117
82.33.127.202
82.48.165.17
82.78.94.132
82.202.163.206
82.202.163.221
82.202.163.223
82.202.167.197
82.202.167.213
82.209.231.170
82.223.53.162
83.32.143.170
83.43.39.110
83.171.146.151
83.215.177.188
84.45.18.215
84.53.192.243
84.95.237.68
84.241.54.127
84.241.56.109
85.57.208.58
85.88.19.159
85.187.183.180
86.43.89.238
87.109.202.4
87.138.192.79
87.139.213.6
87.169.112.72
87.169.115.171
87.169.124.233
87.169.125.240
87.226.179.121
87.243.7.183
87.252.224.6
88.26.202.21
88.99.145.142
88.99.228.173
88.99.253.197
88.255.117.2
89.34.97.115
89.40.123.60
89.40.123.62
89.40.123.74
89.40.123.83
89.43.194.86
89.248.160.156
89.248.167.159
89.248.168.55
89.248.169.103
89.248.171.89
89.248.171.134
89.248.174.3
89.252.188.82
89.253.223.49
90.63.242.90
90.84.44.220
90.84.243.216
91.18.19.92
91.18.24.73
91.18.25.105
91.18.28.94
91.121.0.5
91.121.2.18
91.121.65.163
91.121.72.26
91.121.85.131
91.121.88.223
91.121.109.83
91.121.109.211
91.121.210.37
91.121.210.82
91.121.220.125
91.138.206.3
91.142.222.23
91.200.12.195
91.200.14.75
91.209.70.221
91.212.89.226
91.225.163.76
91.234.99.210
91.234.99.215
91.234.99.217
92.63.110.164
92.63.193.124
93.88.76.73
93.107.249.182
93.115.156.16
93.174.93.46
93.174.93.251
93.175.29.178
94.23.77.107
94.23.196.177
94.23.252.94
94.48.27.187
94.97.124.211
94.102.51.67
94.102.55.26
94.102.56.215
94.102.56.235
94.177.189.47
94.177.230.169
94.177.241.124
94.177.244.201
95.60.155.188
95.86.27.235
95.110.227.5
95.111.109.119
95.168.96.77
95.188.85.32
95.211.211.232
95.216.23.126
95.218.155.2
95.240.187.138
97.80.15.138
101.1.27.158
101.96.116.82
101.96.122.43
101.99.3.211
103.1.209.63
103.3.175.139
103.23.135.56
103.28.37.37
103.35.64.58
103.46.192.232
103.89.88.79
103.89.89.27
103.89.89.50
103.89.89.116
103.89.89.184
103.89.89.229
103.89.90.83
103.89.91.31
103.99.2.4
103.99.2.5
103.99.2.7
103.99.2.134
103.99.2.158
103.99.3.5
103.100.211.66
103.102.147.80
103.103.2.107
103.108.220.67
103.109.75.2
103.114.104.175
103.194.170.15
103.207.36.63
103.207.36.85
103.207.36.244
103.207.37.40
103.207.37.84
103.207.37.173
103.207.38.151
103.207.38.152
103.207.38.153
103.207.38.154
103.207.38.155
103.207.38.156
103.207.38.157
103.207.38.163
103.207.39.104
103.207.39.140
103.215.211.106
103.230.85.157
103.255.5.117
103.255.6.117
104.168.132.140
104.168.138.82
104.168.140.152
104.168.140.209
104.168.152.83
104.193.9.10
104.245.97.53
104.245.103.169
107.144.93.226
109.224.212.230
110.143.75.7
111.30.31.176
111.93.56.215
112.169.85.202
113.117.104.84
113.121.242.242
113.161.37.238
113.161.81.98
113.161.227.134
113.171.23.47
113.172.158.213
113.176.64.112
113.190.129.123
113.196.105.155
113.200.102.90
113.240.223.157
114.92.86.206
114.99.14.217
114.103.65.97
114.223.134.221
115.84.91.141
115.144.72.8
115.144.72.17
115.231.212.82
117.6.94.155
117.68.195.181
117.102.194.171
118.68.169.82
118.69.170.173
118.107.130.162
118.185.38.37
118.201.203.86
119.205.232.227
120.198.126.162
121.122.48.1
121.129.20.140
121.235.194.12
121.237.142.126
122.116.29.1
122.147.191.200
123.16.13.136
123.24.205.255
123.56.211.204
123.103.15.226
123.103.254.253
123.150.47.194
123.195.250.35
123.231.14.94
124.13.44.145
124.29.246.106
124.135.249.125
124.202.246.214
125.21.1.155
125.21.179.210
125.35.210.208
125.115.134.128
125.215.243.129
129.158.103.217
129.208.179.138
138.197.72.166
139.196.27.35
141.0.155.156
142.0.37.170
142.0.44.88
142.11.193.231
142.44.131.18
142.44.151.114
142.44.156.241
142.44.181.238
142.44.181.251
142.44.207.48
142.44.207.49
142.147.97.145
143.255.153.148
144.217.38.193
144.217.178.164
144.217.213.131
145.102.1.250
145.128.197.156
145.239.131.38
145.249.104.20
145.249.104.37
145.249.104.70
145.249.104.245
145.249.105.24
145.249.105.67
145.249.105.154
145.249.105.210
145.249.106.12
145.249.106.69
145.249.106.78
145.249.107.19
145.249.107.105
145.249.107.134
145.249.107.135
145.249.107.169
149.56.66.210
149.56.73.72
149.56.82.194
149.56.166.230
149.56.177.100
149.56.254.112
149.56.254.120
151.80.84.11
154.48.234.10
154.66.197.34
154.70.200.213
154.70.200.217
154.70.200.219
154.73.182.16
155.94.169.123
158.140.140.146
158.255.0.36
159.0.221.62
159.0.231.107
159.65.175.241
159.65.202.223
159.69.31.51
159.89.4.2
159.89.100.11
159.89.181.102
160.19.51.136
161.132.201.90
162.243.11.202
162.248.74.241
163.47.147.230
163.118.239.230
164.39.218.210
166.148.218.10
167.99.3.252
167.99.73.205
167.114.22.102
167.114.24.233
167.114.161.24
167.114.176.165
167.249.210.69
168.167.91.81
168.187.107.74
170.79.33.162
173.163.32.201
173.242.120.168
173.242.120.217
173.242.127.214
175.100.101.96
175.139.184.225
176.31.253.157
176.35.174.123
176.53.44.203
176.61.143.57
176.95.137.96
176.107.131.172
176.108.177.42
176.121.9.21
176.124.144.185
177.4.73.183
177.43.91.222
177.103.201.177
177.126.170.47
177.135.106.242
178.15.0.169
178.33.82.20
178.33.82.21
178.35.191.250
178.49.148.100
178.124.188.173
178.124.207.132
178.141.251.45
178.216.48.45
178.216.52.27
178.216.52.110
178.216.52.118
178.216.52.168
179.228.162.193
180.87.34.76
180.114.150.60
180.178.172.210
180.232.1.15
181.28.47.151
181.31.213.51
181.39.91.50
181.39.164.114
181.40.122.122
181.49.39.70
181.49.122.162
181.60.254.53
181.115.71.28
181.121.0.254
181.167.70.20
181.167.202.102
181.214.87.223
181.214.206.20
181.214.206.30
181.214.206.44
181.214.206.45
181.214.206.100
181.214.206.101
181.214.206.116
181.214.206.118
181.214.206.119
181.214.206.133
181.214.206.148
181.214.206.170
181.214.206.189
181.214.206.195
181.215.195.25
181.215.195.28
181.215.195.33
181.215.195.230
181.215.195.231
181.215.195.243
182.42.244.51
182.72.153.162
182.176.115.31
182.176.158.114
183.61.244.100
183.111.224.65
184.67.236.18
184.71.152.86
185.3.134.108
185.8.0.250
185.36.81.44
185.36.81.46
185.58.17.122
185.67.178.114
185.81.157.118
185.94.194.4
185.98.87.212
185.101.94.123
185.110.132.162
185.118.167.220
185.121.184.21
185.145.131.135
185.165.31.136
185.165.31.150
185.169.229.244
185.183.21.205
185.189.112.187
185.206.224.149
185.221.172.140
185.221.200.23
185.222.56.148
185.228.80.7
185.228.80.18
185.228.80.32
185.228.80.35
185.228.80.39
185.228.80.45
185.228.80.47
185.228.80.50
185.228.80.58
185.228.80.59
185.232.65.140
185.234.216.75
185.234.216.77
185.234.216.114
185.234.216.121
185.234.216.134
185.234.216.139
185.234.216.141
185.234.216.146
185.234.216.148
185.234.216.157
185.234.216.170
185.234.216.174
185.234.216.183
185.234.216.186
185.234.216.187
185.234.216.188
185.234.216.189
185.234.216.190
185.234.216.191
185.234.216.192
185.234.216.195
185.234.216.204
185.234.216.217
185.234.216.221
185.234.216.225
185.234.216.235
185.234.217.39
185.234.217.41
185.234.217.60
185.234.217.61
185.234.217.62
185.234.217.64
185.234.217.231
185.234.218.35
185.234.218.36
185.234.218.37
185.234.218.38
185.234.218.132
185.234.218.134
185.234.218.156
185.234.218.157
185.234.218.177
185.234.218.220
185.238.45.210
185.239.226.223
185.245.99.6
186.31.81.98
186.47.19.146
186.96.110.70
186.101.125.43
186.101.223.230
186.148.172.16
186.202.179.15
186.230.29.98
186.248.167.118
187.52.153.24
187.55.179.130
187.64.214.204
187.102.182.123
187.167.193.217
187.176.191.6
187.180.4.78
188.39.105.186
188.126.223.106
188.165.219.27
188.165.221.36
188.165.221.69
188.165.237.186
188.166.51.197
188.166.86.31
188.166.164.162
188.195.110.239
188.247.136.124
189.210.181.3
189.212.113.83
189.212.124.191
189.212.125.71
190.5.247.2
190.25.46.42
190.26.115.140
190.58.253.75
190.58.253.76
190.58.253.89
190.63.137.83
190.64.146.226
190.85.18.114
190.85.21.244
190.107.182.46
190.111.24.194
190.128.186.98
190.128.227.82
190.145.14.166
190.145.82.98
190.158.227.102
190.171.233.75
190.210.230.143
190.213.10.158
190.220.147.114
190.223.59.18
190.248.136.226
190.248.150.194
191.96.249.13
191.96.249.33
191.96.249.66
191.96.249.114
191.96.249.116
191.96.249.122
191.96.249.126
191.96.249.128
191.96.249.129
191.96.249.130
191.96.249.135
191.96.249.137
191.96.249.152
191.96.249.171
191.96.249.185
191.96.249.198
191.96.249.203
191.96.249.237
191.240.148.42
192.40.242.139
192.69.90.220
192.95.14.128
192.95.42.91
192.99.7.175
192.99.8.171
192.99.25.136
192.163.226.125
193.70.103.232
193.104.83.134
193.107.245.238
193.160.226.190
193.165.55.126
193.169.252.20
193.169.252.21
193.173.209.145
193.227.51.79
195.22.125.26
195.22.125.27
195.22.125.28
195.22.126.39
195.24.65.25
195.68.126.157
195.86.58.149
195.95.151.251
195.143.228.107
195.201.135.203
196.25.105.154
196.27.85.223
196.27.108.166
196.28.236.73
196.192.99.9
196.192.99.109
196.192.99.110
196.196.81.109
196.196.85.3
196.196.190.10
196.202.170.22
196.203.109.154
196.203.109.159
197.50.35.112
197.184.45.138
197.219.154.162
197.242.66.181
197.249.5.116
197.253.124.164
198.23.59.118
198.38.85.62
198.50.180.177
198.53.60.171
199.168.137.195
199.168.141.61
199.180.117.78
200.6.178.132
200.57.73.170
200.60.36.35
200.60.73.67
200.60.109.43
200.95.179.28
200.105.154.194
200.111.232.74
200.150.79.84
200.179.121.1
200.187.95.232
201.20.96.82
201.33.193.166
201.162.182.30
201.162.182.66
201.183.238.160
201.183.239.5
201.187.101.222
201.235.166.197
202.77.50.129
202.91.70.30
202.126.38.220
202.158.64.238
202.163.116.106
202.198.69.108
202.221.41.43
203.19.70.166
203.78.141.162
203.78.142.95
203.81.77.253
203.196.142.226
203.210.197.25
203.210.197.58
203.210.197.66
203.215.33.212
206.189.7.224
206.189.25.85
206.189.114.59
207.252.77.133
209.85.217.170
209.85.217.171
209.85.217.173
209.85.217.174
209.85.217.177
209.85.217.180
209.85.217.182
209.121.137.116
209.133.98.231
209.222.111.174
210.245.34.242
212.34.242.82
212.48.75.147
212.235.19.201
213.74.135.58
213.135.172.220
213.136.105.50
213.136.168.209
213.137.8.214
213.163.44.99
213.238.168.21
213.238.168.112
213.255.195.146
216.108.232.48
217.61.20.64
217.61.20.170
217.64.111.234
217.69.9.166
217.108.216.252
217.217.179.17
218.22.100.42
218.93.124.122
218.103.21.130
218.103.119.185
218.255.245.126
219.76.239.210
219.235.4.66
220.135.212.159
222.74.25.221
222.117.106.134
222.122.31.132
222.127.71.60

920
bi_postfix_0_1d.ipset Normal file
View File

@ -0,0 +1,920 @@
#
# bi_postfix_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix/0?age=1d
# Source File Date: Sun Apr 21 10:05:05 UTC 2019
#
# Category : attacks
# Version : 14037
#
# This File Date : Sun Apr 21 10:05:05 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 890 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.53.53.173
1.53.137.220
1.212.181.131
2.187.117.72
2.190.72.195
5.153.139.226
5.189.110.247
5.206.237.242
5.228.232.101
5.251.239.226
12.7.109.254
12.18.233.77
12.227.46.80
12.249.121.70
14.102.76.10
14.102.115.234
14.102.152.213
14.163.247.104
14.176.112.132
14.182.244.89
14.186.84.131
14.190.111.148
23.90.51.139
23.94.78.27
23.94.78.31
23.129.64.102
23.254.231.87
24.100.121.248
24.104.76.70
24.217.98.117
24.227.198.82
27.7.251.104
27.74.241.212
27.97.18.73
27.254.136.30
27.255.79.137
31.23.59.186
31.25.136.11
31.42.41.11
31.43.63.70
31.47.189.14
31.131.195.38
31.145.137.139
31.173.13.190
31.173.249.132
36.37.99.37
36.78.210.176
36.90.35.252
37.44.215.20
37.49.224.63
37.49.224.119
37.49.225.26
37.49.225.156
37.49.225.208
37.49.230.133
37.57.40.167
37.57.50.130
37.57.103.113
37.60.53.221
37.60.61.221
37.60.61.222
37.112.63.145
37.114.154.5
37.200.77.123
37.212.14.36
38.113.162.153
40.74.134.222
41.39.239.19
41.60.238.196
41.139.138.98
41.160.85.162
41.160.225.174
41.170.9.236
41.180.98.70
41.215.19.42
41.215.37.230
41.215.51.114
41.215.62.18
41.215.81.170
41.217.242.25
41.223.235.252
41.225.239.103
41.230.30.1
42.113.134.63
42.231.163.209
45.4.255.58
45.5.208.6
45.118.61.6
45.121.41.5
45.125.65.84
45.125.65.96
45.125.66.83
45.125.66.123
45.125.66.139
45.125.66.193
45.125.66.221
45.160.141.33
45.227.156.105
45.227.253.99
45.233.79.10
46.10.229.248
46.56.225.169
46.99.142.30
46.146.214.111
46.169.103.95
46.219.104.160
46.240.132.26
49.77.0.98
49.81.38.252
49.81.95.121
49.88.160.235
50.30.27.66
50.115.123.135
50.207.130.198
50.250.75.153
51.68.62.19
51.68.141.245
51.77.74.174
54.39.165.91
58.49.116.78
59.145.160.178
60.18.171.19
60.19.239.120
60.211.29.81
60.216.101.46
61.19.40.50
61.32.61.77
61.141.21.34
62.28.230.50
62.76.5.112
62.162.195.217
62.213.32.250
62.217.133.188
63.80.185.233
64.20.171.19
64.44.42.20
65.36.62.211
66.70.150.151
66.76.58.60
66.167.205.6
67.209.127.102
68.183.38.61
68.183.223.36
68.186.33.98
68.188.34.106
70.126.43.102
70.183.218.36
71.6.147.254
71.6.199.23
71.180.95.32
71.183.100.76
71.205.124.253
72.43.17.222
72.87.113.190
72.178.102.115
74.83.246.125
75.109.220.161
75.148.56.218
77.40.25.78
77.40.61.122
77.40.61.254
77.40.65.35
77.68.12.227
77.74.27.169
77.76.134.120
77.77.208.166
77.87.101.129
77.92.3.123
77.94.125.54
77.233.10.37
77.244.26.125
77.247.88.10
78.9.51.10
78.36.201.117
78.36.202.9
78.39.64.240
78.85.40.181
78.108.245.211
78.108.246.50
78.131.58.176
78.140.11.50
78.140.12.146
78.189.64.42
79.101.33.118
79.171.13.182
79.174.186.168
80.48.183.166
80.68.2.74
80.68.2.100
80.69.59.70
80.73.13.219
80.73.91.50
80.229.28.86
81.16.10.254
81.17.81.34
81.26.130.121
81.28.111.153
81.28.111.158
81.91.189.113
81.161.61.88
81.177.73.25
82.81.10.117
82.96.184.33
82.114.82.90
82.114.90.90
82.117.234.189
82.117.247.58
82.142.70.242
82.166.152.154
82.199.118.18
82.221.141.111
83.16.228.254
83.147.127.152
83.147.153.226
83.171.112.153
84.43.207.20
84.47.162.66
84.51.56.123
84.52.98.186
84.54.76.203
85.93.8.5
85.93.8.30
85.93.8.55
85.93.8.79
85.93.8.80
85.93.8.104
85.93.8.105
85.93.8.129
85.93.8.130
85.93.8.154
85.93.8.155
85.93.8.179
85.93.8.204
85.93.8.229
85.93.8.254
85.99.227.200
85.112.57.29
85.113.38.162
85.117.60.118
85.174.227.52
85.185.67.215
85.187.224.90
85.194.250.138
85.206.57.202
85.217.192.39
85.223.142.100
85.234.121.74
85.237.46.168
85.238.105.35
86.62.118.243
87.8.146.62
87.103.174.109
87.120.179.74
87.228.190.114
88.84.222.208
89.28.32.203
89.34.202.240
89.34.208.216
89.42.80.100
89.46.235.200
89.47.38.196
89.109.33.36
89.133.180.22
89.144.63.135
89.144.63.137
89.151.179.52
89.185.74.232
89.212.90.179
89.215.177.55
89.216.23.40
89.216.56.5
89.216.105.145
89.232.107.230
89.234.211.102
90.71.49.120
90.177.99.111
90.178.41.140
90.179.167.133
90.183.152.178
90.188.252.215
91.98.73.85
91.98.101.44
91.98.124.6
91.112.99.78
91.139.1.158
91.144.142.125
91.185.236.157
91.191.223.195
91.191.223.207
91.192.25.35
91.192.25.158
91.197.189.62
91.200.125.75
91.202.164.29
91.205.51.128
91.226.5.159
91.237.121.11
91.238.223.41
91.243.97.111
91.247.250.215
91.250.48.221
92.39.56.15
92.50.59.98
92.55.29.165
92.243.101.66
92.243.126.25
92.247.169.43
92.255.195.228
93.33.234.116
93.90.188.155
93.114.159.250
93.115.250.12
93.115.250.17
93.115.250.31
93.118.183.85
93.179.69.53
93.179.69.60
94.45.155.45
94.102.224.100
94.127.217.66
94.153.129.130
94.177.232.25
94.183.107.111
94.228.4.249
94.228.18.58
94.236.154.87
95.67.48.174
95.79.44.89
95.87.38.9
95.105.89.222
95.141.227.248
95.165.160.46
95.170.115.154
95.181.45.234
95.189.78.25
95.189.103.132
96.9.76.51
96.77.77.53
98.159.216.230
102.130.64.30
102.165.49.54
102.165.50.142
102.165.126.110
103.7.114.78
103.11.98.106
103.15.141.174
103.21.53.78
103.25.155.85
103.26.246.242
103.28.59.131
103.30.85.165
103.31.157.206
103.43.46.236
103.44.13.246
103.48.181.189
103.54.93.226
103.57.80.67
103.57.121.22
103.58.16.170
103.60.181.150
103.61.198.234
103.69.20.36
103.69.20.43
103.69.20.46
103.75.161.38
103.80.237.162
103.88.76.122
103.88.76.218
103.89.85.29
103.95.98.74
103.99.2.5
103.99.2.73
103.102.239.94
103.106.100.90
103.106.192.110
103.106.243.227
103.107.60.34
103.107.84.66
103.109.78.147
103.130.114.6
103.193.197.26
103.194.91.108
103.194.91.250
103.194.240.54
103.195.37.101
103.206.229.82
103.207.38.151
103.214.219.250
103.220.31.210
103.221.254.12
103.229.87.2
103.231.139.127
103.231.139.146
103.231.139.184
103.231.139.248
103.235.67.226
103.243.82.234
103.244.205.42
103.251.83.14
103.254.94.91
104.152.52.28
104.255.101.208
105.27.170.82
105.112.11.179
106.240.86.211
106.242.20.219
108.29.77.74
108.58.3.130
109.0.64.165
109.71.181.170
109.75.36.93
109.75.46.23
109.86.244.225
109.87.78.144
109.87.193.159
109.92.223.46
109.172.77.218
109.188.79.159
109.188.134.174
109.205.166.71
109.229.45.146
109.233.212.105
109.236.86.17
109.237.92.138
109.245.220.205
109.252.84.170
110.44.112.166
110.44.117.97
110.74.143.218
110.232.78.221
111.118.138.133
112.78.39.52
113.162.90.76
114.5.22.162
114.6.94.94
114.31.5.34
114.110.21.54
114.199.116.195
114.234.253.126
114.237.109.9
114.237.109.19
114.237.109.89
114.237.109.152
114.237.109.233
114.237.109.234
114.237.109.243
114.237.154.87
114.237.154.193
114.237.188.25
114.237.188.161
114.237.188.163
114.237.188.192
114.237.188.216
114.237.188.223
115.42.64.24
115.79.87.203
115.79.137.99
115.92.118.52
115.160.181.150
115.178.220.3
115.216.57.27
116.50.29.50
116.86.116.229
116.193.223.98
116.212.157.83
116.226.75.78
116.239.4.114
117.92.202.54
118.23.157.162
118.179.75.105
118.179.206.10
119.10.177.90
119.42.152.181
119.148.41.174
120.76.158.55
120.188.65.144
120.230.79.28
120.236.191.241
121.66.154.171
121.101.186.242
121.134.174.236
121.226.187.47
121.233.34.145
122.248.103.64
124.202.246.214
125.212.176.107
130.193.112.146
130.193.131.2
130.255.12.24
131.108.6.118
134.73.7.214
134.73.7.219
134.73.7.223
134.73.7.224
134.73.7.228
134.73.7.233
134.73.7.253
134.196.22.238
134.209.231.237
134.209.235.68
134.209.235.99
134.209.240.26
138.36.158.185
138.117.108.124
139.28.218.156
139.47.139.21
139.99.149.166
141.98.80.32
142.11.215.80
143.0.177.198
143.208.186.37
151.14.93.62
151.236.59.178
154.66.193.57
154.72.199.38
156.212.19.7
157.25.23.231
157.50.93.99
158.181.19.142
158.181.40.90
159.224.220.63
160.238.160.4
160.238.161.1
162.144.40.101
162.243.144.82
163.47.146.118
163.121.250.2
165.0.56.182
165.90.60.73
165.255.163.244
167.250.177.27
168.90.91.22
168.181.110.74
168.196.13.2
168.196.14.3
168.196.15.193
168.197.28.232
168.228.8.1
169.239.166.77
170.0.124.31
170.0.124.67
170.0.124.84
170.0.124.92
170.0.124.151
170.0.124.153
170.0.124.163
170.0.124.176
170.0.125.54
170.0.125.189
170.0.125.195
170.0.125.212
170.0.126.188
170.0.126.219
170.78.24.79
170.79.89.154
170.83.119.227
170.83.156.22
170.231.148.172
170.233.112.142
170.239.248.153
170.244.4.14
171.22.148.216
174.127.155.118
175.146.103.227
175.147.98.95
176.94.26.234
176.105.202.158
176.118.48.118
176.118.48.226
176.123.217.179
176.197.0.22
176.197.2.130
176.197.13.34
176.214.81.78
176.214.81.150
176.235.187.147
177.8.241.22
177.8.244.50
177.11.17.230
177.11.65.94
177.11.244.4
177.12.87.202
177.20.180.26
177.21.220.211
177.21.222.195
177.23.138.252
177.23.162.2
177.23.163.103
177.23.167.82
177.23.184.46
177.36.6.252
177.37.167.201
177.38.33.42
177.38.196.70
177.39.83.210
177.44.18.114
177.53.45.39
177.54.130.150
177.54.224.245
177.66.195.82
177.67.9.13
177.68.143.100
177.72.68.154
177.72.82.8
177.73.8.42
177.73.20.50
177.73.47.11
177.73.248.13
177.75.69.142
177.75.158.104
177.86.181.210
177.87.108.93
177.87.160.86
177.87.215.206
177.101.4.238
177.101.191.117
177.107.188.177
177.107.188.182
177.125.108.34
177.126.212.100
177.126.213.2
177.126.214.89
177.128.220.122
177.129.89.33
177.129.202.92
177.129.210.202
177.136.38.6
177.154.46.64
177.155.134.38
177.159.121.130
177.190.145.203
177.190.147.38
177.200.189.250
177.202.118.44
177.234.0.218
177.244.28.18
177.250.0.13
178.20.41.83
178.69.12.30
178.150.237.198
178.151.24.64
178.151.241.122
178.161.255.124
178.217.119.219
178.218.104.8
178.219.171.43
179.108.251.86
179.124.11.128
179.127.152.6
179.189.253.122
180.105.249.221
180.211.183.30
181.47.89.101
181.48.154.98
181.112.164.66
181.143.94.58
181.163.5.239
181.174.104.196
181.209.77.162
182.16.167.82
182.16.175.158
182.23.1.226
182.72.118.214
182.160.104.186
182.160.115.98
183.13.206.71
183.87.140.42
183.182.117.235
185.8.151.64
185.14.148.75
185.26.226.241
185.34.16.106
185.51.92.84
185.55.243.135
185.55.243.137
185.64.53.67
185.71.81.185
185.105.184.202
185.125.31.7
185.126.14.88
185.132.228.230
185.136.150.22
185.139.56.133
185.149.232.23
185.149.232.36
185.149.232.49
185.149.232.62
185.149.232.75
185.149.232.101
185.149.232.114
185.149.233.26
185.149.233.91
185.149.233.130
185.149.233.143
185.149.233.156
185.149.233.169
185.149.233.220
185.149.233.233
185.149.233.246
185.149.235.11
185.149.235.36
185.149.235.49
185.149.235.62
185.149.235.75
185.149.235.88
185.149.235.101
185.149.235.114
185.150.234.65
185.153.45.29
185.168.225.78
185.170.210.103
185.186.81.250
185.212.203.203
185.222.209.71
185.229.243.12
185.229.243.36
185.229.243.37
185.229.243.61
185.229.243.62
185.229.243.87
185.229.243.109
185.229.243.159
185.229.243.160
185.229.243.185
185.229.243.209
185.229.243.210
186.10.74.162
186.22.42.252
186.67.85.251
186.72.74.70
186.74.221.210
186.96.125.115
186.141.200.79
186.193.20.50
186.208.231.11
186.211.160.178
186.215.100.50
186.248.105.222
186.248.108.110
186.248.171.31
187.4.112.242
187.19.203.194
187.84.82.161
187.84.146.178
187.162.191.119
187.178.238.177
187.254.107.227
188.136.243.142
188.166.38.216
188.170.189.74
188.187.54.43
188.235.61.20
188.235.61.25
188.240.196.66
188.253.235.248
189.45.192.4
189.84.121.202
189.91.5.77
189.201.217.106
189.203.198.178
190.5.48.152
190.5.252.161
190.7.253.138
190.13.191.74
190.53.190.64
190.63.144.26
190.90.217.151
190.105.213.119
190.105.213.165
190.131.220.130
190.147.108.64
190.152.210.179
190.186.33.237
190.216.64.2
191.37.183.146
191.53.112.170
191.53.198.60
191.241.32.23
191.242.127.6
191.242.211.1
192.207.205.172
193.34.161.137
193.194.69.114
194.24.160.160
194.24.160.165
194.44.94.103
194.44.160.246
194.135.214.150
194.183.183.159
194.186.252.74
195.9.148.150
195.54.42.51
195.68.129.146
195.211.84.104
195.228.8.8
195.234.7.47
196.15.168.146
196.188.12.239
197.3.83.123
197.39.140.60
197.155.32.6
197.220.225.18
197.221.89.66
197.221.90.54
197.224.58.141
197.254.7.198
198.144.108.117
200.6.175.10
200.24.71.3
200.30.165.202
200.53.19.204
200.77.186.170
200.77.186.219
200.162.162.119
200.175.214.225
200.220.201.101
201.20.88.130
201.37.145.117
201.65.121.66
201.87.233.110
201.148.100.198
201.150.34.82
201.158.105.124
201.158.105.157
201.158.106.70
201.158.106.71
201.182.144.6
201.220.84.190
201.222.28.106
201.222.29.86
201.234.81.181
202.29.217.234
202.40.186.226
202.43.112.243
202.53.165.218
202.57.46.242
202.75.101.142
202.75.103.14
202.137.15.13
202.144.145.246
202.152.82.202
202.169.248.149
202.191.121.12
202.191.123.225
203.150.193.46
203.173.94.2
203.192.208.79
206.214.143.120
208.77.130.238
209.95.143.254
210.57.215.142
210.245.34.51
210.245.51.2
210.245.51.19
212.0.137.190
212.0.149.81
212.14.243.42
212.19.23.214
212.33.242.79
212.42.99.22
212.42.99.32
212.50.15.18
212.107.236.22
212.109.39.180
212.116.119.146
212.156.86.130
212.156.86.226
212.220.204.238
212.252.63.228
212.252.63.236
213.32.254.240
213.80.166.5
213.91.179.89
213.123.127.43
213.153.177.98
213.163.113.133
213.172.91.53
213.230.111.100
213.234.119.4
216.183.62.70
217.15.233.238
217.17.103.203
217.20.183.149
217.27.218.60
217.64.109.231
217.73.143.80
217.77.221.209
219.154.17.117
220.233.171.191
222.165.223.138

309
bi_postfix_1_7d.ipset Normal file
View File

@ -0,0 +1,309 @@
#
# bi_postfix_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix/1?age=7d
# Source File Date: Sun Apr 21 04:20:54 UTC 2019
#
# Category : attacks
# Version : 1229
#
# This File Date : Sun Apr 21 04:20:54 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 279 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.55.179.28
2.236.143.94
5.190.168.219
14.102.76.10
14.161.33.130
14.161.35.9
23.129.64.101
23.129.64.102
23.254.215.28
27.147.225.202
31.171.108.131
36.37.180.59
36.66.253.181
37.49.224.78
37.49.224.117
37.49.224.119
37.49.224.158
37.49.224.165
37.49.224.194
37.49.224.195
37.49.225.21
37.49.225.156
37.49.227.16
37.49.227.133
37.49.227.150
37.49.227.151
37.49.230.120
37.49.230.133
37.216.232.150
37.216.243.226
41.73.234.195
41.79.38.130
45.121.41.5
46.225.243.146
58.186.48.241
58.215.194.74
61.41.9.213
61.141.21.34
61.234.37.3
62.0.73.123
66.220.144.143
66.220.144.145
66.220.155.135
66.220.155.138
66.220.155.145
66.220.155.151
66.220.155.153
66.220.155.155
66.220.155.156
66.220.155.158
67.17.249.195
69.171.232.131
69.171.232.135
69.171.232.143
71.6.146.186
71.166.170.210
74.192.226.101
78.38.116.131
78.83.242.229
78.133.163.190
79.187.109.200
79.188.251.33
80.12.242.123
80.12.242.124
80.12.242.125
80.12.242.126
80.12.242.127
80.12.242.128
80.12.242.129
80.12.242.130
80.12.242.131
80.12.242.132
80.12.242.133
80.78.73.99
82.147.116.201
83.169.208.218
85.18.95.66
85.18.95.67
85.18.95.68
85.48.100.174
85.109.70.157
85.113.38.162
85.206.163.4
87.121.77.67
88.84.222.208
88.204.214.122
89.34.202.240
89.205.125.254
91.140.88.197
92.247.169.43
93.42.137.151
93.149.244.66
93.170.122.30
94.23.196.177
94.45.134.190
94.74.133.78
94.152.193.17
94.152.193.235
95.107.6.3
95.165.164.170
101.99.33.78
101.255.64.58
103.8.195.34
103.11.97.174
103.15.141.174
103.47.153.102
103.57.184.14
103.71.40.30
103.74.71.86
103.77.188.2
103.83.179.26
103.99.2.5
103.204.220.18
103.207.37.40
103.207.38.151
103.211.39.80
103.221.254.70
103.240.250.194
103.242.125.243
103.242.216.198
103.247.100.19
103.251.83.14
103.255.4.18
103.255.5.117
105.66.10.9
105.235.237.10
112.27.129.78
113.160.113.45
113.161.180.135
114.7.162.6
114.119.40.107
114.237.154.41
114.237.154.105
114.237.154.126
114.237.154.151
114.237.154.168
114.237.154.230
114.237.154.238
114.237.155.166
114.237.155.215
114.237.155.227
115.127.13.130
117.4.90.95
117.4.101.26
117.4.136.11
117.58.243.244
117.92.164.34
117.92.164.43
117.92.164.62
117.92.164.160
117.92.165.52
117.92.165.89
117.92.165.132
117.92.165.138
117.92.165.201
117.92.165.242
117.92.202.54
117.92.202.73
117.92.202.220
118.70.212.171
119.18.153.78
119.18.159.146
120.50.6.146
122.180.253.6
123.125.50.110
123.125.50.111
123.125.50.112
123.125.50.132
123.125.50.133
123.125.50.135
123.125.50.138
124.155.113.32
138.0.204.122
138.97.236.2
145.255.168.37
151.237.113.8
153.149.230.22
153.149.230.28
153.149.233.33
153.149.236.19
153.149.236.32
163.121.250.2
167.89.6.173
167.89.100.167
167.89.100.250
169.255.6.26
170.244.20.65
176.53.2.122
177.38.33.42
177.67.7.58
177.94.222.194
177.124.77.130
177.126.81.63
177.136.40.102
178.33.238.210
178.151.241.122
179.185.66.242
180.114.169.3
180.211.170.78
180.211.183.30
181.56.9.161
181.118.196.2
181.174.104.196
182.72.118.214
183.87.140.42
183.182.112.12
183.182.121.28
183.249.243.68
185.3.229.125
185.36.81.182
185.111.183.109
185.185.173.34
186.179.100.207
187.63.72.66
187.102.71.1
187.188.242.182
189.52.165.134
189.84.121.202
190.14.170.196
190.96.114.158
190.109.170.211
190.186.59.22
190.202.12.22
191.53.112.170
193.151.12.117
193.194.69.114
194.165.132.194
195.33.240.222
195.175.204.62
197.159.30.58
197.231.179.57
197.232.22.182
198.143.158.82
199.83.103.189
200.12.232.6
200.114.216.150
201.37.145.117
201.148.180.250
201.245.169.153
202.40.190.54
202.123.181.66
202.138.233.162
202.138.242.6
203.153.113.226
203.189.142.33
203.202.243.199
204.11.243.70
210.57.214.26
210.57.215.142
212.0.151.154
212.27.42.1
212.27.42.2
212.27.42.3
212.27.42.4
212.27.42.5
212.27.42.6
212.27.42.9
212.27.42.10
212.28.237.130
212.34.226.173
212.156.28.122
212.156.37.62
212.156.86.130
212.156.246.74
212.164.119.30
212.233.216.133
213.6.116.222
213.32.160.125
213.58.202.70
213.149.62.44
213.175.172.51
213.243.211.37
217.58.17.170
217.77.221.209
220.181.15.111
220.231.127.1
221.203.169.50
221.214.110.130
222.171.246.231

721
bi_postfix_2_30d.ipset Normal file
View File

@ -0,0 +1,721 @@
#
# bi_postfix_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# postfix with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/postfix/2?age=30d
# Source File Date: Sat Apr 20 16:16:49 UTC 2019
#
# Category : attacks
# Version : 314
#
# This File Date : Sat Apr 20 16:16:49 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 691 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_postfix_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
5.178.194.5
5.206.239.168
14.139.214.162
14.139.236.66
14.139.239.130
14.140.174.2
14.142.45.138
14.161.33.130
14.161.35.9
23.129.64.101
23.129.64.102
23.129.64.104
23.129.64.105
23.151.0.29
23.254.215.28
27.2.127.16
27.74.249.102
27.78.23.89
27.123.3.94
27.131.166.229
27.131.185.122
31.154.81.14
31.199.192.20
36.37.180.59
36.39.251.91
36.66.253.181
37.49.224.72
37.49.224.78
37.49.224.117
37.49.224.119
37.49.224.141
37.49.224.149
37.49.224.158
37.49.224.164
37.49.224.165
37.49.224.175
37.49.224.181
37.49.224.183
37.49.224.194
37.49.224.195
37.49.224.198
37.49.224.199
37.49.224.216
37.49.225.21
37.49.225.80
37.49.225.161
37.49.225.166
37.49.225.171
37.49.225.195
37.49.227.14
37.49.227.16
37.49.227.92
37.49.227.121
37.49.227.132
37.49.227.133
37.49.227.142
37.49.227.146
37.49.227.150
37.49.227.151
37.49.227.166
37.49.227.169
37.49.227.191
37.49.227.192
37.49.227.197
37.49.227.203
37.49.227.204
37.49.227.213
37.49.227.221
37.49.230.133
37.49.230.136
37.49.230.174
37.72.50.55
37.76.253.166
37.139.119.11
41.41.61.242
41.73.234.195
41.77.6.27
41.79.38.130
41.79.50.20
41.89.128.14
41.94.118.3
41.159.144.91
41.180.4.210
41.203.251.6
41.218.119.58
41.221.52.108
41.221.253.74
41.223.155.126
41.225.238.167
41.226.4.117
41.230.31.134
45.116.2.146
45.123.43.114
46.1.54.215
46.55.135.77
46.252.101.179
54.207.22.56
58.145.168.154
59.5.222.60
61.19.69.218
61.19.86.146
61.90.133.249
61.91.232.130
61.141.21.34
61.234.37.3
62.0.73.123
62.162.47.34
62.240.53.20
66.201.180.107
66.220.144.143
66.220.144.145
66.220.155.135
66.220.155.137
66.220.155.138
66.220.155.140
66.220.155.145
66.220.155.149
66.220.155.151
66.220.155.153
66.220.155.155
66.220.155.156
66.220.155.158
69.171.232.135
69.171.232.137
69.171.232.143
69.171.232.150
69.171.232.151
71.6.135.131
71.6.146.130
71.6.146.185
71.6.146.186
71.6.158.166
71.6.167.142
71.166.170.210
72.252.215.82
73.86.125.182
74.192.226.101
76.72.254.222
77.28.96.92
77.46.237.27
77.71.34.194
77.85.206.12
77.238.79.21
78.93.123.106
78.110.154.108
78.188.125.19
78.189.40.215
79.2.68.87
79.187.109.200
79.188.251.33
80.12.242.123
80.12.242.124
80.12.242.125
80.12.242.126
80.12.242.127
80.12.242.128
80.12.242.129
80.12.242.130
80.12.242.131
80.12.242.132
80.12.242.133
80.16.52.145
80.82.77.33
80.87.81.14
80.90.95.118
80.248.68.70
81.136.219.1
82.114.79.86
82.114.82.90
82.147.116.201
82.194.10.53
83.66.76.179
83.169.208.218
84.201.254.47
84.205.235.11
85.33.50.29
85.48.100.174
85.109.70.157
85.130.118.119
87.126.55.112
87.243.140.48
88.39.239.17
88.84.222.208
88.204.214.122
88.250.168.73
88.255.134.22
88.255.160.162
91.72.176.98
91.187.115.44
91.218.202.22
91.234.99.198
91.234.99.199
91.234.99.200
91.234.99.201
91.234.99.202
91.234.99.203
91.234.99.204
91.234.99.205
91.234.99.206
91.234.99.207
91.234.99.208
91.234.99.209
91.234.99.210
91.234.99.212
91.234.99.213
91.234.99.214
91.234.99.215
91.234.99.216
91.234.99.217
91.234.99.218
91.234.99.219
91.234.99.220
91.234.99.221
91.234.99.222
91.234.99.223
91.234.99.224
91.234.99.225
91.234.99.226
91.234.99.227
91.240.82.236
92.45.99.109
92.45.123.50
92.53.49.32
92.223.182.251
92.253.127.40
93.41.18.138
93.42.137.151
93.64.183.162
93.79.243.184
93.87.4.113
93.87.67.98
93.91.196.66
93.146.244.66
93.149.244.66
93.170.122.30
94.23.196.177
94.45.134.190
94.97.21.243
94.97.22.203
94.102.50.103
94.228.16.41
94.228.16.45
95.60.139.69
95.86.19.205
95.111.39.102
95.165.164.170
101.99.3.211
103.3.46.247
103.8.195.34
103.9.90.130
103.9.114.118
103.12.161.1
103.14.8.239
103.19.253.146
103.28.84.5
103.60.137.18
103.65.212.202
103.70.204.194
103.76.188.2
103.77.188.2
103.89.88.109
103.93.113.77
103.97.184.137
103.99.2.5
103.197.105.82
103.205.15.14
103.207.37.40
103.207.38.151
103.207.38.153
103.210.44.155
103.210.120.10
103.239.5.178
103.240.240.249
103.242.216.198
103.247.100.19
103.251.83.14
103.254.120.210
103.255.4.18
103.255.5.117
103.255.6.117
105.66.10.9
105.67.10.9
105.67.10.10
105.71.10.9
105.71.10.10
105.112.80.106
105.235.237.10
109.92.201.48
109.227.35.192
110.164.77.42
110.172.191.186
110.185.170.198
111.68.120.58
111.68.126.50
111.119.217.74
111.221.54.55
112.27.129.78
112.133.246.74
112.133.254.117
112.172.51.14
112.173.75.154
113.23.54.138
113.160.112.161
113.160.113.45
113.160.129.146
113.161.35.37
113.161.128.169
113.161.128.239
113.161.227.8
113.163.202.80
113.190.42.25
113.190.235.19
114.6.45.250
114.79.191.213
114.119.40.107
114.199.109.130
115.56.225.2
115.74.200.118
115.79.47.132
116.74.100.3
116.116.108.101
116.212.152.103
117.4.90.95
117.4.101.26
117.4.107.119
117.4.136.11
117.4.248.151
117.6.165.222
117.54.102.66
118.69.108.42
118.69.120.29
118.70.212.171
118.97.187.42
118.179.210.10
119.18.159.146
121.52.158.246
121.149.221.186
122.52.121.45
122.53.27.66
122.53.79.16
122.54.183.78
122.154.123.2
122.160.53.183
122.166.182.247
122.166.204.213
122.166.222.149
122.176.19.74
122.176.47.48
122.179.133.88
122.180.253.6
122.252.230.130
123.18.206.13
123.26.250.20
123.27.254.145
123.58.177.132
123.58.177.175
124.29.246.106
124.155.113.32
124.158.109.140
124.195.223.106
125.18.128.90
125.64.94.200
125.64.94.208
125.212.129.30
125.234.97.178
125.235.9.22
129.205.210.90
131.161.54.12
138.0.194.244
138.97.236.2
138.117.180.10
138.255.221.36
139.255.66.35
144.48.108.70
144.217.213.131
146.82.236.252
147.75.116.98
148.216.7.80
151.84.88.89
151.237.113.8
152.231.46.138
153.149.230.22
154.115.26.18
154.117.164.58
154.121.5.250
154.121.7.62
163.53.206.164
163.121.250.2
164.160.12.34
166.148.218.10
168.187.123.202
169.239.44.14
169.255.6.26
170.238.119.77
170.244.232.2
171.250.238.56
175.100.101.96
175.101.22.131
176.108.188.5
176.122.56.80
177.2.96.88
177.2.98.160
177.39.211.91
177.43.88.10
177.94.222.38
177.124.77.243
177.126.81.63
177.136.40.102
177.139.135.201
178.151.241.122
179.27.48.94
179.51.65.18
179.99.209.73
180.148.211.34
180.211.170.78
180.211.183.30
180.211.243.150
181.50.253.249
181.56.9.161
181.58.215.64
181.60.78.175
181.118.196.2
181.174.78.234
181.188.135.64
181.189.136.77
181.210.57.227
181.210.63.105
181.236.225.13
182.72.66.58
182.73.106.145
182.73.111.182
182.74.0.102
182.74.22.86
182.75.88.86
182.75.181.146
182.180.59.64
182.237.139.28
183.63.101.62
183.249.243.68
185.36.81.44
185.36.81.182
185.59.122.69
185.99.172.97
185.111.249.149
185.227.82.9
185.228.80.39
185.228.80.43
185.228.80.51
185.234.216.190
185.234.218.38
185.234.218.134
186.4.137.170
186.15.232.162
186.24.34.10
186.31.26.171
186.71.71.45
186.85.178.34
186.103.208.236
186.121.247.245
186.148.165.25
186.176.134.115
186.236.134.141
186.248.157.100
187.11.128.179
187.51.65.130
187.52.133.108
187.120.223.50
187.130.131.5
187.130.198.237
187.157.25.2
187.174.233.66
187.188.83.206
187.188.159.238
187.189.80.68
187.189.83.28
187.189.119.104
187.216.83.178
187.216.156.178
188.15.4.42
188.59.99.245
188.165.219.27
188.165.235.21
188.248.88.31
189.47.169.135
189.52.165.134
189.74.125.103
189.202.255.74
189.204.119.34
189.212.133.186
190.0.53.211
190.0.60.182
190.4.7.157
190.6.205.214
190.7.141.90
190.7.180.218
190.12.76.23
190.14.170.196
190.41.87.54
190.57.69.146
190.60.243.2
190.64.64.154
190.95.137.178
190.96.114.158
190.102.56.1
190.107.19.166
190.111.16.61
190.120.197.58
190.129.72.130
190.129.104.194
190.145.14.166
190.145.45.225
190.147.32.131
190.156.190.39
190.180.47.244
190.186.19.162
190.186.59.22
190.216.236.74
190.232.11.187
190.234.106.146
190.242.150.2
190.248.129.226
190.248.157.170
190.249.181.137
191.34.38.18
191.102.102.74
191.205.245.179
192.99.8.171
193.151.12.117
193.160.224.146
193.188.254.67
193.194.69.114
193.252.22.91
193.252.22.102
193.252.22.210
193.252.22.211
193.252.22.212
193.252.22.213
193.252.22.214
193.252.22.215
193.252.22.226
193.252.22.253
194.165.132.194
194.247.206.17
195.117.22.99
195.175.15.6
195.175.18.146
195.175.30.214
195.175.87.214
195.175.103.42
195.175.204.62
195.182.22.238
196.1.139.114
196.13.223.200
196.41.12.188
196.43.234.193
196.179.252.18
196.203.108.54
196.203.110.33
196.216.53.134
197.45.135.135
197.156.75.53
197.156.97.73
197.156.235.116
197.159.133.118
197.221.234.54
197.221.251.5
197.231.179.57
197.232.22.182
197.248.78.11
197.254.17.94
197.254.27.214
197.254.80.18
198.20.70.114
198.20.87.98
198.143.158.82
200.2.136.38
200.4.169.82
200.6.193.44
200.7.243.178
200.26.172.66
200.33.30.74
200.35.40.133
200.41.86.226
200.46.103.202
200.56.7.243
200.59.6.250
200.87.169.234
200.92.215.84
200.96.214.127
200.110.170.94
200.110.175.178
200.114.216.150
200.116.6.45
200.153.145.165
200.158.80.111
200.198.137.82
200.199.114.226
200.201.191.91
201.22.249.44
201.28.15.90
201.33.192.46
201.63.46.5
201.86.129.99
201.99.100.16
201.132.155.62
201.140.122.13
201.144.14.70
201.144.38.210
201.148.126.170
201.150.43.134
201.151.161.78
201.157.53.154
201.158.161.27
201.163.162.204
201.184.248.210
201.192.248.66
201.220.66.254
201.222.94.246
201.232.10.54
201.243.66.154
201.245.1.153
201.245.169.153
202.21.188.250
202.55.191.194
202.57.5.38
202.83.42.253
202.88.236.4
202.123.181.66
202.129.29.94
202.131.241.166
202.133.53.162
202.138.242.6
202.159.28.2
202.175.185.138
202.183.186.83
203.81.91.88
203.91.116.34
203.104.25.202
203.130.152.25
203.153.45.182
203.153.45.186
203.153.46.230
203.153.113.226
203.202.243.199
206.125.41.141
210.1.14.18
210.57.215.142
210.89.85.114
212.27.42.2
212.27.42.3
212.27.42.5
212.27.42.6
212.27.42.9
212.27.42.10
212.89.21.45
212.156.90.250
212.156.126.2
212.156.246.74
212.164.119.30
212.175.35.192
212.200.237.122
212.233.182.141
212.233.216.133
213.14.124.182
213.55.72.171
213.55.73.204
213.55.79.195
213.55.92.51
213.55.92.58
213.58.202.70
213.82.233.5
213.132.246.230
213.136.102.84
213.144.119.194
213.175.172.51
213.226.141.252
213.233.64.177
213.233.64.181
213.243.211.37
213.248.181.117
217.58.17.170
217.75.193.226
217.77.221.209
217.173.253.101
217.217.179.17
219.74.173.18
219.140.69.122
220.231.127.1
221.135.139.20
221.203.169.50
221.214.110.130

67
bi_proftpd_0_1d.ipset Normal file
View File

@ -0,0 +1,67 @@
#
# bi_proftpd_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/0?age=1d
# Source File Date: Sun Apr 21 09:56:16 UTC 2019
#
# Category : attacks
# Version : 12560
#
# This File Date : Sun Apr 21 09:56:16 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 37 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
46.161.27.73
49.82.22.175
58.216.60.159
58.216.60.163
59.41.244.212
60.1.255.128
60.23.24.190
60.216.149.32
61.130.146.238
62.233.99.74
82.147.220.206
91.49.166.96
101.30.25.182
106.113.67.51
110.53.234.200
110.243.61.82
114.228.153.116
114.239.54.6
116.25.240.224
117.10.55.30
117.40.5.42
118.113.23.130
120.230.95.94
121.26.215.250
123.166.135.37
170.238.61.238
180.124.77.129
180.142.44.117
185.178.48.117
193.169.255.253
218.71.0.246
221.3.111.178
221.13.235.0
221.149.133.213
223.135.169.55
223.199.153.218
223.220.80.72

98
bi_proftpd_1_7d.ipset Normal file
View File

@ -0,0 +1,98 @@
#
# bi_proftpd_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/1?age=7d
# Source File Date: Sun Apr 21 04:20:56 UTC 2019
#
# Category : attacks
# Version : 858
#
# This File Date : Sun Apr 21 04:20:56 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 68 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.180.70.178
5.101.40.97
5.101.40.98
39.118.158.229
41.59.225.121
42.51.183.193
45.32.225.235
46.34.137.81
46.214.147.118
50.252.47.25
58.16.190.56
58.42.237.29
58.221.121.90
60.23.24.190
60.161.145.243
60.221.239.68
61.33.152.215
61.153.56.30
61.184.253.154
70.91.203.141
80.16.23.37
80.188.186.235
92.63.197.29
103.207.36.76
103.210.135.136
108.82.128.117
112.161.187.208
113.206.191.212
115.248.207.78
118.85.194.26
121.26.215.250
121.29.112.99
121.69.3.38
122.2.223.242
123.157.138.165
123.249.9.114
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.207.216.2
137.147.22.163
162.157.220.37
166.62.92.59
168.195.231.130
171.107.111.97
171.244.27.184
172.114.92.219
178.66.160.90
182.253.11.226
183.230.146.26
185.143.223.135
185.143.223.136
185.219.81.252
185.224.133.176
185.224.134.122
188.114.179.24
193.169.252.247
195.2.222.161
202.100.182.250
202.131.69.68
207.118.138.44
213.186.170.226
213.251.182.111
218.227.85.176
221.202.168.254
222.237.78.73
223.68.134.29

543
bi_proftpd_2_30d.ipset Normal file
View File

@ -0,0 +1,543 @@
#
# bi_proftpd_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# proftpd with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/proftpd/2?age=30d
# Source File Date: Sun Apr 21 04:20:57 UTC 2019
#
# Category : attacks
# Version : 250
#
# This File Date : Sun Apr 21 04:20:57 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 513 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_proftpd_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.134.210
1.171.55.235
1.180.70.178
1.234.27.47
1.234.85.29
1.239.35.88
2.50.55.165
2.236.52.16
5.2.159.36
5.101.40.97
5.101.40.98
5.135.148.228
12.33.223.196
12.69.52.230
12.151.99.20
14.33.133.188
14.141.148.208
23.21.185.250
23.111.157.54
23.234.29.116
24.30.21.2
24.40.233.8
27.92.124.121
27.194.205.163
27.211.250.235
27.254.94.38
31.18.168.112
31.173.212.146
31.173.229.222
35.163.4.100
36.7.87.198
36.37.174.245
36.49.175.163
36.67.154.57
39.110.5.115
39.118.158.229
41.39.37.122
41.59.225.121
41.159.139.251
41.211.12.18
41.238.2.235
42.48.107.140
42.51.183.193
42.62.114.165
42.159.246.3
43.224.139.84
45.4.239.206
45.32.225.235
45.65.233.20
45.226.184.136
46.34.137.81
46.101.1.153
46.105.100.136
46.105.110.221
46.150.103.163
46.214.147.118
46.229.90.95
46.249.78.142
47.74.154.40
49.206.242.22
50.63.67.12
50.63.189.186
50.66.34.226
50.116.120.146
50.192.119.251
50.252.47.25
51.254.47.48
51.255.95.29
52.175.228.170
54.37.182.126
54.37.190.2
54.171.191.104
54.195.23.182
58.42.237.29
58.143.149.190
58.210.6.53
58.218.56.82
58.221.121.90
58.247.249.189
59.7.96.57
59.147.36.54
60.54.255.13
60.161.128.173
60.161.145.243
60.173.82.156
60.191.144.54
60.221.230.2
60.221.239.68
61.6.83.153
61.33.152.215
61.142.21.46
61.153.56.30
61.158.163.140
61.183.207.119
61.191.55.18
61.203.101.24
62.110.87.230
62.129.245.82
62.181.96.167
62.210.7.245
62.210.82.139
62.217.127.147
64.66.237.16
65.23.47.242
66.228.55.225
69.64.33.138
69.175.76.44
70.91.203.141
72.191.112.118
74.208.164.103
74.208.229.7
77.243.183.163
78.108.157.227
78.156.114.251
78.186.207.143
79.7.177.180
79.48.239.173
79.120.86.30
80.14.15.77
80.16.23.37
80.151.122.64
80.188.186.235
80.255.81.61
81.7.135.134
81.16.9.186
81.82.221.108
81.133.222.214
81.196.9.26
82.178.111.44
83.221.199.9
84.193.215.244
84.194.157.212
85.100.114.244
85.105.201.223
85.120.15.35
85.139.88.135
85.145.99.102
87.16.133.232
87.245.143.86
88.10.199.100
88.77.67.215
88.87.196.233
88.142.203.172
89.97.65.212
89.114.147.92
89.121.218.230
90.50.217.121
91.183.33.194
91.183.89.197
91.218.210.130
91.236.5.3
92.63.197.29
92.154.73.12
92.241.103.240
93.79.252.44
93.88.76.73
93.170.190.193
93.186.192.120
94.23.9.207
94.103.96.239
94.125.180.25
94.182.227.36
95.0.1.68
95.130.9.44
95.220.32.63
98.243.146.15
101.228.210.149
101.230.211.162
101.230.223.199
103.15.140.149
103.29.16.18
103.48.116.47
103.66.198.98
103.98.188.245
103.193.203.178
103.197.190.42
103.206.123.244
103.207.36.76
103.210.135.136
103.226.125.218
103.244.7.20
104.244.72.82
106.12.33.154
106.51.76.93
108.82.128.117
109.170.24.11
110.45.145.184
110.45.145.221
110.45.147.94
110.169.96.118
110.170.194.66
111.11.181.53
111.63.6.113
111.63.28.51
111.73.46.162
111.121.193.205
111.207.122.2
112.101.160.173
112.161.187.208
112.161.220.151
112.169.106.71
112.171.69.24
112.220.206.243
113.10.154.11
113.31.139.4
113.53.239.101
113.106.86.4
113.108.72.2
113.206.191.212
113.240.226.251
113.254.71.194
114.32.31.250
114.32.212.5
114.95.155.140
114.109.128.126
114.255.66.194
115.20.146.18
115.55.243.31
115.69.125.12
115.92.36.11
115.231.101.60
115.248.207.78
116.36.37.203
116.125.224.129
116.247.107.90
117.103.204.41
117.156.126.3
118.24.101.221
118.33.115.177
118.39.187.167
118.85.194.26
118.97.118.132
118.122.195.159
118.140.55.22
118.143.27.67
118.144.139.217
118.163.131.42
118.169.12.68
118.193.178.185
118.250.113.93
119.23.110.173
119.29.252.149
119.46.166.132
119.90.52.36
119.192.13.115
119.193.140.193
120.24.183.44
120.72.89.162
120.230.95.92
121.8.153.122
121.14.7.244
121.18.68.94
121.26.215.250
121.28.255.249
121.29.112.99
121.69.3.38
121.121.100.208
121.167.221.251
122.2.223.242
122.70.135.226
122.129.203.163
122.180.29.3
122.224.88.26
123.59.182.194
123.126.109.197
123.150.200.121
123.157.138.165
123.178.150.230
123.212.48.26
123.249.9.114
123.249.9.153
123.249.24.167
123.249.27.190
123.249.45.69
123.249.79.214
124.63.125.99
124.126.252.45
124.207.216.2
125.75.207.25
125.180.217.196
125.208.9.204
125.215.181.117
125.227.14.43
125.227.76.101
125.227.96.79
126.42.106.151
128.199.124.142
131.108.48.170
131.108.49.51
131.147.113.97
137.74.1.62
137.74.168.130
137.147.22.163
138.201.254.242
139.99.99.52
139.198.188.137
139.226.167.160
140.143.158.210
140.143.190.243
140.249.49.216
144.76.175.147
144.217.34.217
148.253.177.147
149.56.66.5
150.165.178.251
150.249.92.178
151.42.166.172
151.80.41.189
151.80.101.103
151.253.153.129
155.254.12.91
158.69.3.91
158.69.122.113
158.248.210.174
159.65.205.28
159.226.43.36
162.144.52.70
162.157.220.37
163.172.46.49
166.62.92.59
168.128.68.178
168.195.231.130
171.107.111.97
171.107.206.178
171.244.27.184
172.114.92.219
173.248.194.22
175.11.210.248
175.114.192.117
176.9.83.200
176.112.18.85
177.22.114.1
177.86.79.2
178.66.160.90
178.68.209.126
178.132.0.210
179.40.114.8
179.191.53.12
179.210.27.241
180.68.225.189
180.76.160.50
180.76.245.18
180.123.88.73
180.166.114.150
180.211.135.42
180.250.242.75
181.49.102.190
181.62.248.56
181.166.224.12
181.215.241.28
181.226.53.240
182.18.170.237
182.31.123.50
182.48.117.84
182.53.91.210
182.90.208.99
182.150.2.41
182.253.11.226
183.6.159.187
183.60.110.59
183.100.116.142
183.107.101.201
183.131.242.79
183.136.188.116
183.162.179.242
183.215.74.190
183.230.146.26
184.106.153.92
185.10.99.4
185.143.223.135
185.143.223.136
185.173.104.86
185.182.56.85
185.182.56.170
185.216.216.37
185.219.81.252
185.224.133.176
185.224.134.122
185.248.140.50
186.88.138.38
186.112.214.158
186.139.103.67
186.146.1.243
186.147.242.149
186.159.220.5
187.33.234.78
187.72.56.107
187.95.117.150
187.162.96.246
188.114.153.205
188.114.179.24
188.134.22.159
188.187.55.243
188.187.110.24
188.243.37.122
190.52.34.65
190.92.25.227
190.128.168.78
190.216.234.26
190.236.209.105
191.102.96.214
192.99.199.161
192.100.213.7
192.241.132.118
193.6.150.8
193.19.119.236
193.111.144.29
193.112.3.110
193.151.57.171
193.169.80.252
193.169.252.247
195.2.222.161
195.22.107.222
195.58.18.209
195.82.149.121
195.154.231.179
195.211.176.181
196.50.231.70
197.155.191.188
200.17.47.3
200.54.127.26
200.84.31.206
200.115.134.237
200.116.155.123
201.7.133.118
201.49.82.63
201.144.152.195
201.182.217.135
201.182.217.156
201.184.169.106
201.236.225.231
202.9.47.236
202.29.210.155
202.29.235.149
202.29.239.186
202.45.147.34
202.74.236.7
202.83.111.150
202.100.182.250
202.117.63.19
202.121.166.208
202.131.69.68
202.162.35.114
202.191.166.30
203.6.149.134
203.173.3.23
203.208.140.107
206.253.161.75
206.253.161.112
207.118.138.44
209.10.98.151
209.11.159.40
210.12.72.135
210.13.64.18
210.27.176.184
210.77.145.35
210.182.116.102
210.187.175.219
210.245.90.23
211.57.200.195
211.58.85.21
211.94.67.58
211.110.71.160
211.201.171.114
211.232.85.214
212.19.134.47
212.50.127.5
212.139.202.43
212.156.115.110
213.59.152.23
213.108.44.28
213.186.170.226
213.230.108.157
213.238.254.107
213.242.113.178
213.251.182.103
213.251.182.111
213.251.182.114
217.107.34.134
217.107.219.183
217.165.125.245
218.0.166.74
218.39.174.83
218.60.67.67
218.60.67.70
218.90.143.254
218.144.207.79
218.156.85.17
218.215.101.4
218.227.85.176
218.227.91.112
219.147.95.246
219.246.33.161
220.122.88.137
220.133.7.28
220.178.25.66
221.0.194.22
221.13.4.202
221.202.168.254
221.203.35.17
221.208.242.242
221.209.235.2
221.212.74.130
221.229.166.77
222.72.135.177
222.101.130.159
222.186.46.11
222.191.246.6
222.237.78.73
222.237.250.158
223.68.134.29
223.111.180.80
223.245.215.115

56
bi_pureftpd_0_1d.ipset Normal file
View File

@ -0,0 +1,56 @@
#
# bi_pureftpd_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/0?age=1d
# Source File Date: Sun Apr 21 09:32:45 UTC 2019
#
# Category : attacks
# Version : 7925
#
# This File Date : Sun Apr 21 09:32:46 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 26 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.176.0.94
31.184.193.102
46.165.230.5
59.175.239.178
62.233.99.74
80.79.27.168
82.85.145.91
93.113.63.242
94.242.59.89
95.78.137.186
111.221.43.112
113.110.171.168
114.228.200.183
118.123.22.233
118.250.113.251
121.231.181.244
123.12.178.55
132.148.17.38
138.68.189.129
171.25.193.235
175.11.209.218
177.205.120.83
178.175.132.229
179.95.81.219
202.138.226.2
212.35.193.126

35
bi_pureftpd_1_7d.ipset Normal file
View File

@ -0,0 +1,35 @@
#
# bi_pureftpd_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/1?age=7d
# Source File Date: Sat Apr 20 22:12:45 UTC 2019
#
# Category : attacks
# Version : 494
#
# This File Date : Sat Apr 20 22:12:45 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 5 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
46.165.230.5
51.254.47.48
94.23.226.221
94.158.108.47
175.11.209.95

37
bi_pureftpd_2_30d.ipset Normal file
View File

@ -0,0 +1,37 @@
#
# bi_pureftpd_2_30d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# pureftpd with score above 2 and age less than 30d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/pureftpd/2?age=30d
# Source File Date: Sun Apr 21 00:08:23 UTC 2019
#
# Category : attacks
# Version : 190
#
# This File Date : Sun Apr 21 00:08:23 UTC 2019
# Update Frequency: 1 day
# Aggregation : none
# Entries : 7 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_pureftpd_2_30d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
46.165.230.5
50.93.206.56
51.254.47.48
94.158.108.47
175.11.209.95
197.231.221.211
220.203.63.86

211
bi_qmail-smtp_0_1d.ipset Normal file
View File

@ -0,0 +1,211 @@
#
# bi_qmail-smtp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# qmail-smtp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/qmail-smtp/0?age=1d
# Source File Date: Sun Apr 21 10:05:07 UTC 2019
#
# Category : attacks
# Version : 10156
#
# This File Date : Sun Apr 21 10:05:07 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 181 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_qmail-smtp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.9.216.226
1.53.137.12
1.220.89.178
5.21.252.132
5.202.46.61
14.49.95.57
14.162.146.164
27.2.7.59
31.5.5.182
31.13.227.67
31.173.100.61
31.173.249.206
31.222.123.131
37.32.28.105
37.49.224.236
37.49.225.224
37.49.227.92
37.75.129.126
37.131.165.19
37.230.136.29
37.239.43.40
41.160.225.174
41.162.88.186
41.169.151.90
41.170.9.236
41.230.48.83
45.121.41.5
45.232.67.62
45.237.140.1
46.17.120.217
46.52.213.194
58.233.12.46
59.31.90.206
59.152.102.235
59.153.84.254
60.216.101.46
61.191.212.242
61.231.184.204
62.176.1.194
74.231.185.248
79.11.199.122
79.103.54.31
80.68.2.100
80.107.91.196
81.23.109.186
81.161.61.88
82.103.122.138
84.17.20.102
84.54.92.2
84.204.200.138
85.112.42.199
85.114.96.154
85.117.56.66
85.117.60.116
89.22.201.221
89.34.79.154
89.34.208.223
89.47.38.196
89.108.135.130
89.185.74.232
89.216.56.5
91.139.1.158
91.192.25.158
91.197.189.62
91.243.97.185
92.241.103.122
93.94.155.135
94.136.157.114
95.33.162.197
95.129.97.146
95.134.194.58
95.154.81.65
95.160.17.142
95.170.203.121
103.7.114.78
103.29.150.27
103.54.93.226
103.60.214.18
103.69.20.149
103.77.23.202
103.105.195.226
103.106.34.10
103.107.84.66
103.108.90.18
103.130.114.90
103.192.170.20
103.193.197.26
103.198.172.4
103.221.254.2
103.237.58.214
103.242.125.243
105.179.7.210
109.224.16.195
109.229.45.146
109.245.236.109
109.245.241.89
109.252.255.162
113.74.26.114
113.199.252.72
114.110.21.54
115.42.64.24
116.193.223.101
117.2.133.106
117.4.194.93
117.54.13.174
117.188.41.232
117.242.147.5
118.70.196.124
119.18.159.6
121.173.238.41
122.248.38.210
125.214.58.110
131.221.165.50
138.118.224.188
147.30.121.236
148.77.34.200
151.14.93.62
159.255.167.28
168.181.61.154
168.227.229.102
175.195.33.102
177.11.244.4
177.39.83.210
177.66.21.60
177.67.9.13
177.73.188.80
177.87.15.230
177.101.180.25
178.34.158.18
178.76.238.246
178.219.171.43
181.48.7.146
181.48.154.98
182.48.79.58
183.91.68.148
185.34.16.41
185.46.110.141
185.64.238.229
185.66.228.149
185.128.37.10
185.170.184.1
187.19.62.7
187.84.146.178
187.93.115.90
188.212.131.221
188.240.196.66
189.45.79.141
189.215.105.40
190.5.76.6
190.153.105.91
192.141.207.18
193.187.82.74
194.44.94.103
194.44.176.100
195.68.129.146
195.112.252.180
195.162.88.214
196.32.109.73
196.210.8.252
197.157.143.50
200.53.19.204
200.77.186.161
200.89.129.233
201.7.1.42
201.28.87.42
201.158.106.70
202.51.98.150
202.57.35.74
202.77.121.146
202.159.112.67
202.168.159.54
202.169.242.236
210.57.215.218
211.109.238.151
213.16.234.208
213.32.253.150
213.63.134.210
213.234.119.4
217.12.49.22
217.79.206.36
221.214.110.130

31
bi_rdp_0_1d.ipset Normal file
View File

@ -0,0 +1,31 @@
#
# bi_rdp_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# rdp with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/rdp/0?age=1d
# Source File Date: Sat Apr 20 17:52:24 UTC 2019
#
# Category : attacks
# Version : 226
#
# This File Date : Sat Apr 20 17:52:24 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 1 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_rdp_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
141.98.83.5

470
bi_sasl_0_1d.ipset Normal file
View File

@ -0,0 +1,470 @@
#
# bi_sasl_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sasl with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sasl/0?age=1d
# Source File Date: Sun Apr 21 10:05:09 UTC 2019
#
# Category : attacks
# Version : 14159
#
# This File Date : Sun Apr 21 10:05:09 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 440 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sasl_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
1.238.11.86
1.250.62.223
5.180.33.203
5.190.56.183
5.196.3.158
14.63.166.243
14.170.159.135
14.186.54.17
14.225.2.93
14.231.231.126
14.244.28.242
23.254.231.87
27.34.68.41
27.66.252.116
27.74.241.212
27.157.0.247
27.159.173.190
27.255.77.209
27.255.79.137
31.3.251.205
35.190.165.252
35.221.157.112
35.226.195.195
35.231.48.87
36.82.97.162
36.89.232.100
36.91.162.42
37.49.224.215
37.49.225.147
37.49.225.156
37.49.225.208
37.49.225.223
37.49.225.224
37.49.225.232
37.49.227.16
37.49.227.49
37.49.227.92
37.49.227.144
37.49.227.190
37.49.227.194
37.59.189.118
37.72.209.22
37.114.146.29
37.114.186.170
38.89.140.11
41.44.221.242
41.79.79.221
41.95.192.22
41.210.30.109
41.225.239.103
42.116.101.3
43.225.52.63
45.6.24.15
45.40.203.41
45.55.54.70
45.116.2.95
45.119.81.126
45.122.220.36
45.125.66.62
45.125.66.70
45.125.66.133
45.125.66.184
45.125.66.193
45.227.253.99
46.19.230.42
46.100.57.205
47.75.106.104
49.64.78.130
49.64.78.174
49.64.116.132
49.72.12.18
49.72.12.114
49.72.94.84
49.73.157.76
49.73.157.184
49.73.161.222
49.75.71.128
49.77.2.133
49.84.130.43
49.85.245.61
49.85.245.196
49.86.180.233
49.86.182.89
49.147.58.180
50.224.110.50
51.15.249.253
51.68.62.19
51.77.74.174
51.77.74.175
51.254.35.77
51.254.58.226
51.254.114.105
54.39.50.217
54.39.84.216
58.208.115.179
58.209.37.215
58.209.77.192
58.209.212.26
58.209.212.48
58.209.212.193
58.209.212.196
58.215.194.74
61.177.9.67
62.4.55.126
68.183.12.252
68.183.78.175
68.183.104.14
68.183.216.175
68.183.223.36
69.61.226.123
77.40.2.58
77.40.2.166
77.40.25.78
77.40.31.51
77.40.42.239
77.40.65.35
77.40.67.16
77.40.69.143
77.81.237.43
78.98.94.249
78.155.206.138
78.155.206.195
79.137.78.70
80.82.67.117
80.211.184.9
83.66.25.67
84.52.93.227
85.14.154.66
85.112.84.199
89.44.44.143
89.214.61.255
91.106.131.86
92.60.235.14
94.23.20.25
95.85.59.22
95.110.226.228
101.50.103.193
101.96.116.82
102.165.35.30
102.165.35.178
102.165.49.43
102.165.50.142
103.7.115.70
103.10.171.42
103.89.85.29
103.89.88.139
103.99.2.73
103.106.72.28
103.106.72.45
103.207.37.40
103.207.37.50
103.207.38.151
103.207.39.104
103.210.72.253
103.231.139.127
103.231.139.146
103.231.139.184
103.231.139.248
103.233.110.178
104.215.72.16
104.236.158.58
104.236.248.209
104.248.33.189
104.248.45.254
104.248.61.201
104.248.80.250
104.248.89.235
104.248.147.163
104.248.178.255
104.248.180.179
104.248.187.99
105.189.78.178
106.254.246.82
109.194.98.122
109.241.87.160
111.164.49.40
111.171.214.81
111.230.220.148
111.231.66.43
112.217.85.92
113.123.0.218
113.124.95.190
113.172.61.20
114.32.124.240
114.216.18.164
114.216.221.230
114.220.28.139
114.220.28.164
114.220.28.175
114.220.28.179
114.220.29.8
114.220.29.164
114.220.59.89
114.220.71.63
114.220.107.21
114.230.104.2
114.230.121.209
114.230.122.161
114.230.123.169
114.230.124.108
114.230.124.127
114.230.125.60
114.230.127.126
115.84.91.157
115.84.92.149
115.159.194.92
116.236.125.118
117.1.119.59
117.62.60.65
117.62.60.114
117.62.106.233
117.62.106.247
117.81.110.86
117.81.111.33
117.81.111.149
117.81.173.37
117.82.176.154
117.83.54.27
117.83.54.102
117.90.4.207
118.24.13.227
118.24.45.165
118.25.71.104
118.70.8.49
118.98.221.96
118.240.133.81
119.160.98.66
119.205.221.232
120.85.101.130
120.138.8.203
121.227.43.26
121.227.43.163
121.227.43.210
121.227.43.229
121.227.43.248
121.227.76.157
121.227.156.137
121.227.161.251
121.227.164.12
121.233.206.135
121.239.88.13
121.239.88.230
122.4.30.230
122.141.32.5
122.155.0.145
122.155.0.237
122.155.0.239
123.21.17.156
123.21.68.129
123.24.205.219
124.89.88.122
124.207.137.144
125.209.107.10
129.150.112.231
131.255.4.177
132.145.55.221
133.130.102.17
134.209.121.118
138.68.8.165
138.197.35.188
139.28.219.38
139.59.78.49
139.59.224.234
139.59.243.28
139.59.255.187
139.217.198.80
139.219.191.125
139.219.234.171
141.98.10.32
141.98.10.33
141.98.10.41
141.98.80.32
142.93.36.70
142.93.83.223
142.93.97.211
142.93.108.45
142.93.121.54
142.93.200.146
142.93.214.72
142.93.228.232
144.22.97.159
144.22.101.25
144.217.71.173
146.234.92.185
148.72.210.154
149.129.214.140
150.95.27.23
151.0.179.18
151.80.162.216
151.80.238.201
151.236.59.178
157.230.16.196
157.230.28.93
157.230.44.69
157.230.152.81
158.69.207.104
158.255.6.211
159.65.137.143
159.65.142.154
159.65.230.184
159.89.229.129
159.203.32.194
159.203.36.200
159.203.116.103
159.203.124.125
159.203.170.196
162.243.7.211
163.44.158.66
165.0.56.182
170.254.229.27
171.8.76.24
171.100.65.190
171.228.0.127
173.212.202.56
174.138.63.237
175.207.12.142
176.53.90.210
176.107.130.72
177.38.184.224
177.69.248.104
177.75.158.104
178.62.66.223
178.128.68.103
178.128.75.233
178.128.85.19
178.128.97.155
178.128.98.128
178.128.101.28
178.128.102.19
180.103.171.142
180.103.171.247
180.106.229.192
180.107.0.40
180.107.225.136
180.108.3.35
180.108.206.140
180.109.36.238
180.109.37.96
180.117.226.162
180.117.235.139
180.119.141.13
180.140.42.94
180.141.254.169
180.167.216.198
180.168.181.102
180.190.187.80
180.246.77.234
180.250.18.136
182.72.107.166
182.75.204.90
182.86.174.184
182.208.211.117
182.253.112.2
183.163.246.225
183.166.87.119
185.36.81.164
185.36.81.180
185.41.250.46
185.102.185.80
185.211.245.198
185.222.209.71
185.228.80.47
185.228.80.48
185.234.216.92
185.234.217.161
185.234.218.176
185.234.218.228
185.234.219.52
185.234.219.65
185.234.219.70
186.42.226.218
187.33.236.146
187.84.232.204
188.122.22.130
188.131.162.27
188.166.38.216
188.166.39.232
188.166.72.93
188.214.210.96
189.90.42.209
190.15.114.83
190.60.219.108
190.60.236.6
190.95.204.74
190.149.177.56
190.167.13.116
191.101.5.128
191.252.66.114
191.252.109.167
191.252.109.168
191.252.195.74
192.95.56.86
193.36.184.175
193.70.115.178
193.112.109.40
193.169.254.67
194.158.201.183
195.142.175.33
195.178.50.222
195.226.195.11
197.34.180.160
197.184.94.159
197.255.204.15
198.50.158.228
200.9.102.86
200.57.73.170
200.133.39.41
200.150.82.141
201.37.145.117
201.49.233.102
201.62.64.4
201.191.205.41
202.6.235.26
203.150.51.45
203.205.41.53
206.189.142.169
206.214.9.130
208.115.208.167
209.97.142.78
209.97.172.209
210.4.125.252
210.140.228.145
211.67.112.41
211.72.92.124
211.171.200.232
211.178.134.168
212.64.44.208
217.79.179.118
218.94.72.162
219.91.197.233
220.130.190.13
221.225.26.33
221.225.26.106
221.225.26.135
221.225.183.109
222.107.127.253
222.135.142.82
222.136.210.57
222.188.220.158
222.252.48.205

64
bi_sasl_1_7d.ipset Normal file
View File

@ -0,0 +1,64 @@
#
# bi_sasl_1_7d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sasl with score above 1 and age less than 7d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sasl/1?age=7d
# Source File Date: Sun Apr 21 08:44:37 UTC 2019
#
# Category : attacks
# Version : 1054
#
# This File Date : Sun Apr 21 08:44:37 UTC 2019
# Update Frequency: 6 hours
# Aggregation : none
# Entries : 34 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sasl_1_7d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
23.254.215.28
27.74.241.212
37.49.224.172
37.49.224.181
37.49.224.202
37.49.224.215
37.49.224.218
37.49.225.57
37.49.225.156
37.49.225.195
37.49.227.16
37.49.227.92
37.49.227.144
37.49.227.190
37.49.227.194
37.49.230.152
58.215.194.74
94.23.196.177
101.96.116.82
103.99.2.3
103.99.2.5
103.99.2.7
103.207.37.40
103.207.38.151
103.207.39.104
123.24.205.219
145.249.105.154
166.148.218.10
185.3.134.108
185.228.80.39
185.228.80.47
185.228.80.48
188.165.219.27
192.99.7.175

2407
bi_sasl_2_30d.ipset Normal file

File diff suppressed because it is too large Load Diff

37
bi_sip_0_1d.ipset Normal file
View File

@ -0,0 +1,37 @@
#
# bi_sip_0_1d
#
# ipv4 hash:ip ipset
#
# [BadIPs.com] (https://www.badips.com/) Bad IPs in category
# sip with score above 0 and age less than 1d
#
# Maintainer : BadIPs.com
# Maintainer URL : https://www.badips.com/
# List source URL : https://www.badips.com/get/list/sip/0?age=1d
# Source File Date: Sat Apr 20 23:24:50 UTC 2019
#
# Category : attacks
# Version : 3603
#
# This File Date : Sat Apr 20 23:24:50 UTC 2019
# Update Frequency: 30 mins
# Aggregation : none
# Entries : 7 unique IPs
#
# Full list analysis, including geolocation map, history,
# retention policy, overlaps with other lists, etc.
# available at:
#
# http://iplists.firehol.org/?ipset=bi_sip_0_1d
#
# Generated by FireHOL's update-ipsets.sh
# Processed with FireHOL's iprange
#
81.83.7.136
81.83.19.213
84.194.49.11
84.199.38.196
94.104.40.171
102.165.38.246
195.130.156.202

Some files were not shown because too many files have changed in this diff Show More