Robot
/
blocklist-ipsets
mirror of https://github.com/firehol/blocklist-ipsets.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
blocklist-ipsets/README.md

1365 lines
391 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### Contents
- [About this repo](#about-this-repo)
- [Using these ipsets](#using-these-ipsets)
- [Which ones to use?](#which-ones-to-use)
- [Why are open proxy lists included](#why-are-open-proxy-lists-included)
- [Using them in FireHOL](#using-them-in-firehol)
* [Adding the ipsets in your firehol.conf](#adding-the-ipsets-in-your-fireholconf)
* [Updating the ipsets while the firewall is running](#updating-the-ipsets-while-the-firewall-is-running)
- [Dynamic List of ipsets included](#list-of-ipsets-included)
- [Comparison of ipsets](#comparison-of-ipsets)
---
# About this repo
This repository includes a list of ipsets dynamically updated with
[FireHOL](https://github.com/firehol/firehol)'s `update-ipsets.sh`
[documented in this wiki](https://github.com/firehol/blocklist-ipsets/wiki).
This repo is self maintained. It it updated automatically from the script via a cron job.
This repo has a site: [http://iplists.firehol.org](http://iplists.firehol.org).
## Why do we need blocklists?
As time passes and the internet matures in our life, cyber crime is becoming increasingly sophisticated.
Although there are many tools (detection of malware, viruses, intrusion detection and prevension systems,
etc) to help us isolate the budguys, there are now a lot more than just such attacks.
What is more interesting is that the fraudsters or attackers in many cases are not going to do a direct
damage to you or your systems. They will use you and your systems to gain something else, possibly not
related or indirectly related to your business. Nowdays the attacks cannot be identified easily. They are
distributed and come to our systems from a vast amount of IPs around the world.
To get an idea, check for example the [XRumer](http://en.wikipedia.org/wiki/XRumer) software. This thing
mimics human behaviour to post ads, it creates email accounts, responds to emails it receives, bypasses
captchas, it goes gently to stay unoticed, etc.
To increase our effectiveness we need to complement our security solutions with our shared knowledge, our
shared experience in this fight.
Hopefully, there are many teams out there that do their best to identify the attacks and pinpoint the
attackers. These teams release blocklists. Blocklists of IPs (for use in firewalls), domains & URLs
(for use in proxies), etc.
What we are interested here is IPs.
Using IP blocklists at the internet side of your firewall is a key component of internet security. These
lists share key knowledge between us, allowing us to learn from each other and effectively isolate
fraudsters and attackers from our services.
I decided to upload these lists to a github repo because:
1. They are freely available on the internet. The intention of their creators is to help internet security.
Keep in mind though that a few of these lists may have special licences attached. Before using them, please check their source site for any information regarding proper use.
2. Github provides (via `git pull`) a unified way of updating all the lists together.
Pulling this repo regularly on your machines, you will update all the IP lists at once.
3. Github also provides a unified version control. Using it we can have a history of what each list has
done, which IPs or subnets were added and which were removed.
## DNSBLs
Check also another tool included in FireHOL v3+, called `dnsbl-ipset.sh`.
This tool is capable of creating an ipset based on your traffic by looking up information on DNSBLs and
scoring it according to your preferences.
More information [here](https://github.com/firehol/firehol/wiki/dnsbl-ipset.sh).
---
# Using these ipsets
Please be very careful what you choose to use and how you use it. If you blacklist traffic using these
lists you may end up blocking your users, your customers, even yourself (!) from accessing your services.
1. Go to to the site of each list and read how each list is maintained. You are going to trust these guys for doing their job right.
2. Most sites have either a donation system or commercial lists of higher quality. Try to support them.
3. I have included the TOR network in these lists (`bm_tor`, `dm_tor`, `et_tor`). The TOR network is not necessarily bad and you should not block it if you want to allow your users be anonymous. I have included it because for certain cases, allowing an anonymity network might be a risky thing (such as eCommerce).
4. Apply any blacklist at the internet side of your firewall. Be very carefull. The `bogons` and `fullbogons` lists contain private, unroutable IPs that should not be routed on the internet. If you apply such a blocklist on your DMZ or LAN side, you will be blocked out of your firewall.
5. Always have a whitelist too, containing the IP addresses or subnets you trust. Try to build the rules in such a way that if an IP is in the whitelist, it should not be blocked by these blocklists.
## Which ones to use
### Level 1 - Basic
These are the ones I trust. **Level 1** provides basic security against the most well known attackers, with the minimum of false positives.
1. **Abuse.ch** lists `feodo`, `palevo`, `sslbl`, `zeus`, `zeus_badips`
These folks are doing a great job tracking crimeware. Their blocklists are very focused.
Keep in mind `zeus` may include some false positives. You can use `zeus_badips` instead.
2. **DShield.org** list `dshield`
It contains the top 20 attacking class C (/24) subnets, over the last three days.
3. **Spamhaus.org** lists `spamhaus_drop`, `spamhaus_edrop`
DROP (Don't Route Or Peer) and EDROP are advisory "drop all traffic" lists, consisting of netblocks that are "hijacked" or leased by professional spam or cyber-crime operations (used for dissemination of malware, trojan downloaders, botnet controllers).
According to Spamhaus.org:
> When implemented at a network or ISP's 'core routers', DROP and EDROP will help protect the network's users from spamming, scanning, harvesting, DNS-hijacking and DDoS attacks originating on rogue netblocks.
>
> Spamhaus strongly encourages the use of DROP and EDROP by tier-1s and backbones.
Spamhaus is very responsive to adapt these lists when a network owner updates them that the issue has been solved (I had one such incident with one of my users).
4. **Team-Cymru.org** list `bogons` or `fullbogons`
These are lists of IPs that should not be routed on the internet. No one should be using them.
Be very careful to apply either of the two on the internet side of your network.
### Level 2 - Essentials
**Level 2** provide protection against current brute force attacks. This level may have a small percentage of false positives, mainly due to dynamic IPs being re-used by other users.
1. **OpenBL.org** lists `openbl*`
The team of OpenBL tracks brute force attacks on their hosts. They have a very short list for hosts, under their own control, collecting this information, to eliminate false positives.
They suggest to use the default blacklist which has a retention policy of 90 days (`openbl`), but they also provide lists with different retention policies (from 1 day to 1 year).
Their goal is to report abuse to the responsible provider so that the infection is disabled.
2. **Blocklist.de** lists `blocklist_de*`
Is a network of users reporting abuse mainly using `fail2ban`. They eliminate false positives using other lists available. Since they collect information from their users, their lists may be subject to poisoning, or false positives.
I asked them about poisoning. [Here](https://forum.blocklist.de/viewtopic.php?f=4&t=244&sid=847d00d26b0735add3518ff515242cad) you can find their answer. In short, they track it down so that they have an ignorable rate of false positives.
Also, they only include individual IPs (no subnets) which have attacked their users the last 48 hours and their list contains 20.000 to 40.000 IPs (which is small enough considering the size of the internet).
Like `openbl`, their goal is to report abuse back, so that the infection is disabled.
They also provide their blocklist per type of attack (mail, web, etc).
Of course there are more lists included. You can check them and decide if they fit for your needs.
## Why are open proxy lists included
Of course, I haven't included them for you to use the open proxies. The port the proxy is listening, or the type of proxy, are not included (although most of them use the standard proxy ports and do serve web requests).
If you check the comparisons for the open proxy lists (`ri_connect_proxies`, `ri_web_proxies`, `xroxy`, `proxz`, `proxyrss`, etc)
you will find that they overlap to a great degree with other blocklists, like `blocklist_de`, `stopforumspam`, etc.
> This means the attackers also use open proxies to execute attacks.
So, if you are under attack, blocking the open proxies may help isolate a large part of the attack.
I don't suggest to permanenly block IPs using the proxy lists. Their purpose of existance is questionable.
Their quality though may be acceptable, since lot of these sites advertise that they test open proxies before including them in their lists, so that there are no false positives, at least at the time they tested them.
---
## Using them in FireHOL
`update-ipsets.sh` itself does not alter your firewall. It can be used to update ipsets both on disk and in the kernel for any firewall solution you use.
The information below, shows you how to configure FireHOL to use the provides ipsets.
### Adding the ipsets in your firehol.conf
I use something like this:
```sh
# our wan interface
wan="dsl0"
# our whitelist
ipset4 create whitelist hash:net
ipset4 add whitelist A.B.C.D/E # A.B.C.D/E is whitelisted
# subnets - netsets
for x in fullbogons dshield spamhaus_drop spamhaus_edrop
do
ipset4 create ${x} hash:net
ipset4 addfile ${x} ipsets/${x}.netset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
# individual IPs - ipsets
for x in feodo palevo sslbl zeus openbl blocklist_de
do
ipset4 create ${x} hash:ip
ipset4 addfile ${x} ipsets/${x}.ipset
blacklist4 full inface "${wan}" log "BLACKLIST ${x^^}" ipset:${x} \
except src ipset:whitelist
done
... rest of firehol.conf ...
```
If you are concerned about iptables performance, change the `blacklist4` keyword `full` to `input`.
This will block only inbound NEW connections, i.e. only the first packet for every NEW inbound connection will be checked.
All other traffic passes through unchecked.
> Before adding these rules to your `firehol.conf` you should run `update-ipsets.sh` to enable them.
### Updating the ipsets while the firewall is running
Just use the `update-ipsets.sh` script from the firehol distribution.
This script will update each ipset and call firehol to update the ipset while the firewall is running.
> You can add `update-ipsets.sh` to cron, to run every 10 mins. `update-ipsets.sh` is smart enough to download
> a list only when it needs to.
---
# List of ipsets included
The following list was automatically generated on Mon Nov 21 14:20:22 UTC 2016.
The update frequency is the maximum allowed by internal configuration. A list will never be downloaded sooner than the update frequency stated. A list may also not be downloaded, after this frequency expired, if it has not been modified on the server (as reported by HTTP `IF_MODIFIED_SINCE` method).
name|info|type|entries|update|
:--:|:--:|:--:|:-----:|:----:|
[alienvault_reputation](http://iplists.firehol.org/?ipset=alienvault_reputation)|[AlienVault.com](https://www.alienvault.com/) IP reputation database|ipv4 hash:ip|47668 unique IPs|updated every 6 hours from [this link](https://reputation.alienvault.com/reputation.generic)
[anonymous](http://iplists.firehol.org/?ipset=anonymous)|Anonymous Service Providers -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|32 subnets, 6159 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[asprox_c2](http://iplists.firehol.org/?ipset=asprox_c2)|[h3x.eu](http://atrack.h3x.eu/) ASPROX Tracker - Asprox C&C Sites|ipv4 hash:ip|936 unique IPs|updated every 1 day from [this link](http://atrack.h3x.eu/c2)
[atlas_attacks](http://iplists.firehol.org/?ipset=atlas_attacks)|[ATLAS Attacks](https://atlas.arbor.net/summary/attacks) - ATLAS uses lightweight honeypot sensors to detect and fingerprint the attacks launched by malicious sources on the Internet. In most cases the attacker is trying to take control of the target via a published exploit for a known vulnerability. A variety of exploit tools exist and are usually written specifically for each attack vector. Exploit attempts and attacks are most often launched from bots (hosts under an attacker's control), which will automatically try to exploit any possible host on the Internet. Attack origins are usually not spoofed, although the source host may be compromised or infected with malware.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/attacks.csv)
[atlas_attacks_2d](http://iplists.firehol.org/?ipset=atlas_attacks_2d)|[ATLAS Attacks](https://atlas.arbor.net/summary/attacks) - ATLAS uses lightweight honeypot sensors to detect and fingerprint the attacks launched by malicious sources on the Internet. In most cases the attacker is trying to take control of the target via a published exploit for a known vulnerability. A variety of exploit tools exist and are usually written specifically for each attack vector. Exploit attempts and attacks are most often launched from bots (hosts under an attacker's control), which will automatically try to exploit any possible host on the Internet. Attack origins are usually not spoofed, although the source host may be compromised or infected with malware.|ipv4 hash:ip|19 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/attacks.csv)
[atlas_attacks_30d](http://iplists.firehol.org/?ipset=atlas_attacks_30d)|[ATLAS Attacks](https://atlas.arbor.net/summary/attacks) - ATLAS uses lightweight honeypot sensors to detect and fingerprint the attacks launched by malicious sources on the Internet. In most cases the attacker is trying to take control of the target via a published exploit for a known vulnerability. A variety of exploit tools exist and are usually written specifically for each attack vector. Exploit attempts and attacks are most often launched from bots (hosts under an attacker's control), which will automatically try to exploit any possible host on the Internet. Attack origins are usually not spoofed, although the source host may be compromised or infected with malware.|ipv4 hash:ip|89 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/attacks.csv)
[atlas_attacks_7d](http://iplists.firehol.org/?ipset=atlas_attacks_7d)|[ATLAS Attacks](https://atlas.arbor.net/summary/attacks) - ATLAS uses lightweight honeypot sensors to detect and fingerprint the attacks launched by malicious sources on the Internet. In most cases the attacker is trying to take control of the target via a published exploit for a known vulnerability. A variety of exploit tools exist and are usually written specifically for each attack vector. Exploit attempts and attacks are most often launched from bots (hosts under an attacker's control), which will automatically try to exploit any possible host on the Internet. Attack origins are usually not spoofed, although the source host may be compromised or infected with malware.|ipv4 hash:ip|40 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/attacks.csv)
[atlas_botnets](http://iplists.firehol.org/?ipset=atlas_botnets)|[ATLAS Botnets](https://atlas.arbor.net/summary/botnets) - Botnets are collections of compromised hosts that attackers remotely control for their own nefarious purposes. Once installed and running, a malicious bot will attempt to connect to a remote server to receive instructions on what actions to take. The most common command and control (C&C) protocol used for this is Internet Relay Chat (IRC). While a legitimate protocol for online chat, IRC is often used by attackers due to the relative simplicity of the protocol along with the ready availability of bot software written to use it. After connecting, a bot-controlled host can be controlled by an attacker and commanded to conduct malicious actions such as sending spam, scanning the Internet for other potentially controllable hosts, or launching DoS attacks. ATLAS maintains a real-time database of malicious botnet command and control servers that is continuously updated. This information comes from malware analysis, botnet infiltration, and other sources of data.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/botnets.csv)
[atlas_botnets_2d](http://iplists.firehol.org/?ipset=atlas_botnets_2d)|[ATLAS Botnets](https://atlas.arbor.net/summary/botnets) - Botnets are collections of compromised hosts that attackers remotely control for their own nefarious purposes. Once installed and running, a malicious bot will attempt to connect to a remote server to receive instructions on what actions to take. The most common command and control (C&C) protocol used for this is Internet Relay Chat (IRC). While a legitimate protocol for online chat, IRC is often used by attackers due to the relative simplicity of the protocol along with the ready availability of bot software written to use it. After connecting, a bot-controlled host can be controlled by an attacker and commanded to conduct malicious actions such as sending spam, scanning the Internet for other potentially controllable hosts, or launching DoS attacks. ATLAS maintains a real-time database of malicious botnet command and control servers that is continuously updated. This information comes from malware analysis, botnet infiltration, and other sources of data.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/botnets.csv)
[atlas_botnets_30d](http://iplists.firehol.org/?ipset=atlas_botnets_30d)|[ATLAS Botnets](https://atlas.arbor.net/summary/botnets) - Botnets are collections of compromised hosts that attackers remotely control for their own nefarious purposes. Once installed and running, a malicious bot will attempt to connect to a remote server to receive instructions on what actions to take. The most common command and control (C&C) protocol used for this is Internet Relay Chat (IRC). While a legitimate protocol for online chat, IRC is often used by attackers due to the relative simplicity of the protocol along with the ready availability of bot software written to use it. After connecting, a bot-controlled host can be controlled by an attacker and commanded to conduct malicious actions such as sending spam, scanning the Internet for other potentially controllable hosts, or launching DoS attacks. ATLAS maintains a real-time database of malicious botnet command and control servers that is continuously updated. This information comes from malware analysis, botnet infiltration, and other sources of data.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/botnets.csv)
[atlas_botnets_7d](http://iplists.firehol.org/?ipset=atlas_botnets_7d)|[ATLAS Botnets](https://atlas.arbor.net/summary/botnets) - Botnets are collections of compromised hosts that attackers remotely control for their own nefarious purposes. Once installed and running, a malicious bot will attempt to connect to a remote server to receive instructions on what actions to take. The most common command and control (C&C) protocol used for this is Internet Relay Chat (IRC). While a legitimate protocol for online chat, IRC is often used by attackers due to the relative simplicity of the protocol along with the ready availability of bot software written to use it. After connecting, a bot-controlled host can be controlled by an attacker and commanded to conduct malicious actions such as sending spam, scanning the Internet for other potentially controllable hosts, or launching DoS attacks. ATLAS maintains a real-time database of malicious botnet command and control servers that is continuously updated. This information comes from malware analysis, botnet infiltration, and other sources of data.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/botnets.csv)
[atlas_fastflux](http://iplists.firehol.org/?ipset=atlas_fastflux)|[ATLAS Fastflux](https://atlas.arbor.net/summary/fastflux) - Fast flux hosting is a technique where the nodes in a botnet are used as the endpoints in a website hosting scheme. The DNS records change frequently, often every few minutes, to point to new bots. The actual nodes themselves simply proxy the request back to the central hosting location. This gives the botnet a robust hosting infrastructure. Many different kinds of botnets use fastflux DNS techniques, for malware hosting, for illegal content hosting, for phishing site hosting, and other such activities. These hosts are likely to be infected with some form of malware.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/fastflux.csv)
[atlas_fastflux_2d](http://iplists.firehol.org/?ipset=atlas_fastflux_2d)|[ATLAS Fastflux](https://atlas.arbor.net/summary/fastflux) - Fast flux hosting is a technique where the nodes in a botnet are used as the endpoints in a website hosting scheme. The DNS records change frequently, often every few minutes, to point to new bots. The actual nodes themselves simply proxy the request back to the central hosting location. This gives the botnet a robust hosting infrastructure. Many different kinds of botnets use fastflux DNS techniques, for malware hosting, for illegal content hosting, for phishing site hosting, and other such activities. These hosts are likely to be infected with some form of malware.|ipv4 hash:ip|21 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/fastflux.csv)
[atlas_fastflux_30d](http://iplists.firehol.org/?ipset=atlas_fastflux_30d)|[ATLAS Fastflux](https://atlas.arbor.net/summary/fastflux) - Fast flux hosting is a technique where the nodes in a botnet are used as the endpoints in a website hosting scheme. The DNS records change frequently, often every few minutes, to point to new bots. The actual nodes themselves simply proxy the request back to the central hosting location. This gives the botnet a robust hosting infrastructure. Many different kinds of botnets use fastflux DNS techniques, for malware hosting, for illegal content hosting, for phishing site hosting, and other such activities. These hosts are likely to be infected with some form of malware.|ipv4 hash:ip|51 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/fastflux.csv)
[atlas_fastflux_7d](http://iplists.firehol.org/?ipset=atlas_fastflux_7d)|[ATLAS Fastflux](https://atlas.arbor.net/summary/fastflux) - Fast flux hosting is a technique where the nodes in a botnet are used as the endpoints in a website hosting scheme. The DNS records change frequently, often every few minutes, to point to new bots. The actual nodes themselves simply proxy the request back to the central hosting location. This gives the botnet a robust hosting infrastructure. Many different kinds of botnets use fastflux DNS techniques, for malware hosting, for illegal content hosting, for phishing site hosting, and other such activities. These hosts are likely to be infected with some form of malware.|ipv4 hash:ip|27 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/fastflux.csv)
[atlas_phishing](http://iplists.firehol.org/?ipset=atlas_phishing)|[ATLAS Phishing](https://atlas.arbor.net/summary/fastflux) - Phishing servers host content that is designed to socially engineer unsuspecting users into surrendering private information used for identity theft. These servers are installed on compromised web servers or botnets, at times. Phishing Web sites mimic legitimate Web sites, often of a financial institution, in order to steal logins, passwords, and personal information. Attackers trick users into using the fake Web site by sending the intended victim an e-mail claiming to be a legitimate institution requesting the information for valid reasons, such as account verification. They may then use the stolen credentials to withdraw large amounts of money from the victim's account or commit other fraudulent acts. Most targeted brands are usually in the financial sector, including banks and online commerce sites.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/phishing.csv)
[atlas_phishing_2d](http://iplists.firehol.org/?ipset=atlas_phishing_2d)|[ATLAS Phishing](https://atlas.arbor.net/summary/fastflux) - Phishing servers host content that is designed to socially engineer unsuspecting users into surrendering private information used for identity theft. These servers are installed on compromised web servers or botnets, at times. Phishing Web sites mimic legitimate Web sites, often of a financial institution, in order to steal logins, passwords, and personal information. Attackers trick users into using the fake Web site by sending the intended victim an e-mail claiming to be a legitimate institution requesting the information for valid reasons, such as account verification. They may then use the stolen credentials to withdraw large amounts of money from the victim's account or commit other fraudulent acts. Most targeted brands are usually in the financial sector, including banks and online commerce sites.|ipv4 hash:ip|11 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/phishing.csv)
[atlas_phishing_30d](http://iplists.firehol.org/?ipset=atlas_phishing_30d)|[ATLAS Phishing](https://atlas.arbor.net/summary/fastflux) - Phishing servers host content that is designed to socially engineer unsuspecting users into surrendering private information used for identity theft. These servers are installed on compromised web servers or botnets, at times. Phishing Web sites mimic legitimate Web sites, often of a financial institution, in order to steal logins, passwords, and personal information. Attackers trick users into using the fake Web site by sending the intended victim an e-mail claiming to be a legitimate institution requesting the information for valid reasons, such as account verification. They may then use the stolen credentials to withdraw large amounts of money from the victim's account or commit other fraudulent acts. Most targeted brands are usually in the financial sector, including banks and online commerce sites.|ipv4 hash:ip|16 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/phishing.csv)
[atlas_phishing_7d](http://iplists.firehol.org/?ipset=atlas_phishing_7d)|[ATLAS Phishing](https://atlas.arbor.net/summary/fastflux) - Phishing servers host content that is designed to socially engineer unsuspecting users into surrendering private information used for identity theft. These servers are installed on compromised web servers or botnets, at times. Phishing Web sites mimic legitimate Web sites, often of a financial institution, in order to steal logins, passwords, and personal information. Attackers trick users into using the fake Web site by sending the intended victim an e-mail claiming to be a legitimate institution requesting the information for valid reasons, such as account verification. They may then use the stolen credentials to withdraw large amounts of money from the victim's account or commit other fraudulent acts. Most targeted brands are usually in the financial sector, including banks and online commerce sites.|ipv4 hash:ip|13 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/phishing.csv)
[atlas_scans](http://iplists.firehol.org/?ipset=atlas_scans)|[ATLAS Scans](https://atlas.arbor.net/summary/scans) - Host scanning is a process whereby automated network sweeps are initiated in search of hosts running a particular service. This may be indicative of either legitimate host scanners (including network management systems and authorized vulnerability scanners) or an attacker (or automated malicious code, such as a worm) trying to enumerate potential hosts for subsequent compromise. Scans are often the prelude to an attack, and services scanned by attackers usually indicate known vulnerabilities for those services. Types of port scans include connect() scans, SYN scans, stealth scans, bounce scans, XMAS and Null scans. All reveal to the attacker which services on what hosts are listening for connections. Scans may be launched from compromised hosts, and their sources may be forged.|ipv4 hash:ip|10 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/scans.csv)
[atlas_scans_2d](http://iplists.firehol.org/?ipset=atlas_scans_2d)|[ATLAS Scans](https://atlas.arbor.net/summary/scans) - Host scanning is a process whereby automated network sweeps are initiated in search of hosts running a particular service. This may be indicative of either legitimate host scanners (including network management systems and authorized vulnerability scanners) or an attacker (or automated malicious code, such as a worm) trying to enumerate potential hosts for subsequent compromise. Scans are often the prelude to an attack, and services scanned by attackers usually indicate known vulnerabilities for those services. Types of port scans include connect() scans, SYN scans, stealth scans, bounce scans, XMAS and Null scans. All reveal to the attacker which services on what hosts are listening for connections. Scans may be launched from compromised hosts, and their sources may be forged.|ipv4 hash:ip|20 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/scans.csv)
[atlas_scans_30d](http://iplists.firehol.org/?ipset=atlas_scans_30d)|[ATLAS Scans](https://atlas.arbor.net/summary/scans) - Host scanning is a process whereby automated network sweeps are initiated in search of hosts running a particular service. This may be indicative of either legitimate host scanners (including network management systems and authorized vulnerability scanners) or an attacker (or automated malicious code, such as a worm) trying to enumerate potential hosts for subsequent compromise. Scans are often the prelude to an attack, and services scanned by attackers usually indicate known vulnerabilities for those services. Types of port scans include connect() scans, SYN scans, stealth scans, bounce scans, XMAS and Null scans. All reveal to the attacker which services on what hosts are listening for connections. Scans may be launched from compromised hosts, and their sources may be forged.|ipv4 hash:ip|108 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/scans.csv)
[atlas_scans_7d](http://iplists.firehol.org/?ipset=atlas_scans_7d)|[ATLAS Scans](https://atlas.arbor.net/summary/scans) - Host scanning is a process whereby automated network sweeps are initiated in search of hosts running a particular service. This may be indicative of either legitimate host scanners (including network management systems and authorized vulnerability scanners) or an attacker (or automated malicious code, such as a worm) trying to enumerate potential hosts for subsequent compromise. Scans are often the prelude to an attack, and services scanned by attackers usually indicate known vulnerabilities for those services. Types of port scans include connect() scans, SYN scans, stealth scans, bounce scans, XMAS and Null scans. All reveal to the attacker which services on what hosts are listening for connections. Scans may be launched from compromised hosts, and their sources may be forged.|ipv4 hash:ip|31 unique IPs|updated every 1 day from [this link](https://atlas.arbor.net/summary/scans.csv)
[bambenek_banjori](http://iplists.firehol.org/?ipset=bambenek_banjori)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of banjori C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/banjori-iplist.txt)
[bambenek_bebloh](http://iplists.firehol.org/?ipset=bambenek_bebloh)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of bebloh C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/bebloh-iplist.txt)
[bambenek_c2](http://iplists.firehol.org/?ipset=bambenek_c2)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) master feed of known, active and non-sinkholed C&Cs IP addresses|ipv4 hash:ip|241 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist.txt)
[bambenek_cl](http://iplists.firehol.org/?ipset=bambenek_cl)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cl C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cl-iplist.txt)
[bambenek_cl](http://iplists.firehol.org/?ipset=bambenek_cl)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cl C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cl-iplist.txt)
[bambenek_cryptowall](http://iplists.firehol.org/?ipset=bambenek_cryptowall)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of cryptowall C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/cryptowall-iplist.txt)
[bambenek_dircrypt](http://iplists.firehol.org/?ipset=bambenek_dircrypt)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dircrypt C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dircrypt-iplist.txt)
[bambenek_dyre](http://iplists.firehol.org/?ipset=bambenek_dyre)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of dyre C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/dyre-iplist.txt)
[bambenek_geodo](http://iplists.firehol.org/?ipset=bambenek_geodo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of geodo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt)
bambenek_geodo|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of geodo C&Cs with 90 minute lookback|ipv4 hash:ip|disabled|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/geodo-iplist.txt)
[bambenek_hesperbot](http://iplists.firehol.org/?ipset=bambenek_hesperbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of hesperbot C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/hesperbot-iplist.txt)
[bambenek_matsnu](http://iplists.firehol.org/?ipset=bambenek_matsnu)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of matsnu C&Cs with 90 minute lookback|ipv4 hash:ip|4 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/matsnu-iplist.txt)
[bambenek_necurs](http://iplists.firehol.org/?ipset=bambenek_necurs)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of necurs C&Cs with 90 minute lookback|ipv4 hash:ip|6 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/necurs-iplist.txt)
[bambenek_p2pgoz](http://iplists.firehol.org/?ipset=bambenek_p2pgoz)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of p2pgoz C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt)
bambenek_p2pgoz|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of p2pgoz C&Cs with 90 minute lookback|ipv4 hash:ip|disabled|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/p2pgoz-iplist.txt)
[bambenek_pushdo](http://iplists.firehol.org/?ipset=bambenek_pushdo)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pushdo C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pushdo-iplist.txt)
[bambenek_pykspa](http://iplists.firehol.org/?ipset=bambenek_pykspa)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of pykspa C&Cs with 90 minute lookback|ipv4 hash:ip|10 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/pykspa-iplist.txt)
[bambenek_qakbot](http://iplists.firehol.org/?ipset=bambenek_qakbot)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of qakbot C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/qakbot-iplist.txt)
[bambenek_ramnit](http://iplists.firehol.org/?ipset=bambenek_ramnit)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ramnit C&Cs with 90 minute lookback|ipv4 hash:ip|12 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ramnit-iplist.txt)
[bambenek_ranbyus](http://iplists.firehol.org/?ipset=bambenek_ranbyus)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of ranbyus C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/ranbyus-iplist.txt)
[bambenek_simda](http://iplists.firehol.org/?ipset=bambenek_simda)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of simda C&Cs with 90 minute lookback|ipv4 hash:ip|109 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/simda-iplist.txt)
[bambenek_suppobox](http://iplists.firehol.org/?ipset=bambenek_suppobox)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of suppobox C&Cs with 90 minute lookback|ipv4 hash:ip|54 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/suppobox-iplist.txt)
[bambenek_symmi](http://iplists.firehol.org/?ipset=bambenek_symmi)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of symmi C&Cs with 90 minute lookback|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/symmi-iplist.txt)
[bambenek_tinba](http://iplists.firehol.org/?ipset=bambenek_tinba)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of tinba C&Cs with 90 minute lookback|ipv4 hash:ip|23 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/tinba-iplist.txt)
[bambenek_volatile](http://iplists.firehol.org/?ipset=bambenek_volatile)|[Bambenek Consulting](http://osint.bambenekconsulting.com/feeds/) feed of current IPs of volatile C&Cs with 90 minute lookback|ipv4 hash:ip|1 unique IPs|updated every 30 mins from [this link](http://osint.bambenekconsulting.com/feeds/volatile-iplist.txt)
[bbcan177_ms1](http://iplists.firehol.org/?ipset=bbcan177_ms1)|pfBlockerNG Malicious Threats|ipv4 hash:net|2566 subnets, 5268568 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/bf29d47ea04391cb3eb0/raw)
[bbcan177_ms3](http://iplists.firehol.org/?ipset=bbcan177_ms3)|pfBlockerNG Malicious Threats|ipv4 hash:net|1146 subnets, 30151694 unique IPs|updated every 1 day from [this link](https://gist.githubusercontent.com/BBcan177/d7105c242f17f4498f81/raw)
[bds_atif](http://iplists.firehol.org/?ipset=bds_atif)|Artillery Threat Intelligence Feed and Banlist Feed|ipv4 hash:ip|3839 unique IPs|updated every 1 day from [this link](https://www.binarydefense.com/banlist.txt)
[bi_any_2_1d](http://iplists.firehol.org/?ipset=bi_any_2_1d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 1d|ipv4 hash:ip|793 unique IPs|updated every 30 mins from [this link](https://www.badips.com/get/list/any/2?age=1d)
[bi_any_2_30d](http://iplists.firehol.org/?ipset=bi_any_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 30d|ipv4 hash:ip|11512 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/any/2?age=30d)
[bi_any_2_7d](http://iplists.firehol.org/?ipset=bi_any_2_7d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category any with score above 2 and age less than 7d|ipv4 hash:ip|7826 unique IPs|updated every 6 hours from [this link](https://www.badips.com/get/list/any/2?age=7d)
[bi_bruteforce_2_30d](http://iplists.firehol.org/?ipset=bi_bruteforce_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category bruteforce with score above 2 and age less than 30d|ipv4 hash:ip|2 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/bruteforce/2?age=30d)
[bi_ftp_2_30d](http://iplists.firehol.org/?ipset=bi_ftp_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ftp with score above 2 and age less than 30d|ipv4 hash:ip|478 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ftp/2?age=30d)
[bi_http_2_30d](http://iplists.firehol.org/?ipset=bi_http_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category http with score above 2 and age less than 30d|ipv4 hash:ip|460 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/http/2?age=30d)
[bi_mail_2_30d](http://iplists.firehol.org/?ipset=bi_mail_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category mail with score above 2 and age less than 30d|ipv4 hash:ip|1684 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/mail/2?age=30d)
[bi_proxy_2_30d](http://iplists.firehol.org/?ipset=bi_proxy_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category proxy with score above 2 and age less than 30d|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/proxy/2?age=30d)
[bi_sql_2_30d](http://iplists.firehol.org/?ipset=bi_sql_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category sql with score above 2 and age less than 30d|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/sql/2?age=30d)
[bi_ssh_2_30d](http://iplists.firehol.org/?ipset=bi_ssh_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category ssh with score above 2 and age less than 30d|ipv4 hash:ip|8887 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/ssh/2?age=30d)
[bi_voip_2_30d](http://iplists.firehol.org/?ipset=bi_voip_2_30d)|[BadIPs.com](https://www.badips.com/) Bad IPs in category voip with score above 2 and age less than 30d|ipv4 hash:ip|86 unique IPs|updated every 1 day from [this link](https://www.badips.com/get/list/voip/2?age=30d)
[bitcoin_blockchain_info](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|328 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_1d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_1d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|497 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_30d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_30d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|4486 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_blockchain_info_7d](http://iplists.firehol.org/?ipset=bitcoin_blockchain_info_7d)|[Blockchain.info](https://blockchain.info/en/connected-nodes) Bitcoin nodes connected to Blockchain.info.|ipv4 hash:ip|1722 unique IPs|updated every 10 mins from [this link](https://blockchain.info/en/connected-nodes)
[bitcoin_nodes](http://iplists.firehol.org/?ipset=bitcoin_nodes)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|4292 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_1d](http://iplists.firehol.org/?ipset=bitcoin_nodes_1d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|5454 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_30d](http://iplists.firehol.org/?ipset=bitcoin_nodes_30d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|21263 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[bitcoin_nodes_7d](http://iplists.firehol.org/?ipset=bitcoin_nodes_7d)|[BitNodes](https://getaddr.bitnodes.io/) Bitcoin connected nodes, globally.|ipv4 hash:ip|9031 unique IPs|updated every 10 mins from [this link](https://getaddr.bitnodes.io/api/v1/snapshots/latest/)
[blocklist_de](http://iplists.firehol.org/?ipset=blocklist_de)|[Blocklist.de](https://www.blocklist.de/) IPs that have been detected by fail2ban in the last 48 hours|ipv4 hash:ip|23194 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/all.txt)
[blocklist_de_apache](http://iplists.firehol.org/?ipset=blocklist_de_apache)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.|ipv4 hash:ip|9287 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/apache.txt)
[blocklist_de_bots](http://iplists.firehol.org/?ipset=blocklist_de_bots)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).|ipv4 hash:ip|1582 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bots.txt)
[blocklist_de_bruteforce](http://iplists.firehol.org/?ipset=blocklist_de_bruteforce)|[Blocklist.de](https://www.blocklist.de/) All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.|ipv4 hash:ip|282 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/bruteforcelogin.txt)
[blocklist_de_ftp](http://iplists.firehol.org/?ipset=blocklist_de_ftp)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.|ipv4 hash:ip|610 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ftp.txt)
[blocklist_de_imap](http://iplists.firehol.org/?ipset=blocklist_de_imap)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3, etc.|ipv4 hash:ip|1763 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/imap.txt)
[blocklist_de_mail](http://iplists.firehol.org/?ipset=blocklist_de_mail)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.|ipv4 hash:ip|17035 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/mail.txt)
[blocklist_de_sip](http://iplists.firehol.org/?ipset=blocklist_de_sip)|[Blocklist.de](https://www.blocklist.de/) All IP addresses that tried to login in a SIP, VOIP or Asterisk Server and are included in the IPs list from infiltrated.net|ipv4 hash:ip|113 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/sip.txt)
[blocklist_de_ssh](http://iplists.firehol.org/?ipset=blocklist_de_ssh)|[Blocklist.de](https://www.blocklist.de/) All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.|ipv4 hash:ip|3127 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/ssh.txt)
[blocklist_de_strongips](http://iplists.firehol.org/?ipset=blocklist_de_strongips)|[Blocklist.de](https://www.blocklist.de/) All IPs which are older then 2 month and have more then 5.000 attacks.|ipv4 hash:ip|146 unique IPs|updated every 15 mins from [this link](http://lists.blocklist.de/lists/strongips.txt)
[blocklist_net_ua](http://iplists.firehol.org/?ipset=blocklist_net_ua)|[blocklist.net.ua](https://blocklist.net.ua) The BlockList project was created to become protection against negative influence of the harmful and potentially dangerous events on the Internet. First of all this service will help internet and hosting providers to protect subscribers sites from being hacked. BlockList will help to stop receiving a large amount of spam from dubious SMTP relays or from attempts of brute force passwords to servers and network equipment.|ipv4 hash:ip|10610 unique IPs|updated every 10 mins from [this link](https://blocklist.net.ua/blocklist.csv)
[blueliv_crimeserver_last](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|54 unique IPs|updated every 6 hours from [this link](https://freeapi.blueliv.com/v1/crimeserver/last)
[blueliv_crimeserver_last_1d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_1d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|244 unique IPs|updated every 6 hours from [this link](https://freeapi.blueliv.com/v1/crimeserver/last)
[blueliv_crimeserver_last_2d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_2d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|489 unique IPs|updated every 6 hours from [this link](https://freeapi.blueliv.com/v1/crimeserver/last)
[blueliv_crimeserver_last_30d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_30d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|2955 unique IPs|updated every 6 hours from [this link](https://freeapi.blueliv.com/v1/crimeserver/last)
[blueliv_crimeserver_last_7d](http://iplists.firehol.org/?ipset=blueliv_crimeserver_last_7d)|[blueliv.com](https://www.blueliv.com/) Last 6 hours Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|1518 unique IPs|updated every 6 hours from [this link](https://freeapi.blueliv.com/v1/crimeserver/last)
[blueliv_crimeserver_online](http://iplists.firehol.org/?ipset=blueliv_crimeserver_online)|[blueliv.com](https://www.blueliv.com/) Online Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|60318 unique IPs|updated every 1 day from [this link](https://freeapi.blueliv.com/v1/crimeserver/online)
[blueliv_crimeserver_recent](http://iplists.firehol.org/?ipset=blueliv_crimeserver_recent)|[blueliv.com](https://www.blueliv.com/) Recent Cybercrime IPs, in all categories: BACKDOOR, C_AND_C, EXPLOIT_KIT, MALWARE and PHISHING (to download the source data you need an API key from blueliv.com)|ipv4 hash:ip|37 unique IPs|updated every 1 day from [this link](https://freeapi.blueliv.com/v1/crimeserver/recent)
[bm_tor](http://iplists.firehol.org/?ipset=bm_tor)|[torstatus.blutmagie.de](https://torstatus.blutmagie.de) list of all TOR network servers|ipv4 hash:ip|6959 unique IPs|updated every 30 mins from [this link](https://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv)
[bogons](http://iplists.firehol.org/?ipset=bogons)|[Team-Cymru.org](http://www.team-cymru.org) private and reserved addresses defined by RFC 1918, RFC 5735, and RFC 6598 and netblocks that have not been allocated to a regional internet registry|ipv4 hash:net|13 subnets, 592708608 unique IPs|updated every 1 day from [this link](http://www.team-cymru.org/Services/Bogons/bogon-bn-agg.txt)
[botscout](http://iplists.firehol.org/?ipset=botscout)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|29 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_1d](http://iplists.firehol.org/?ipset=botscout_1d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|1179 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_30d](http://iplists.firehol.org/?ipset=botscout_30d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|13278 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botscout_7d](http://iplists.firehol.org/?ipset=botscout_7d)|[BotScout](http://botscout.com/) helps prevent automated web scripts, known as bots, from registering on forums, polluting databases, spreading spam, and abusing forms on web sites. They do this by tracking the names, IPs, and email addresses that bots use and logging them as unique signatures for future reference. They also provide a simple yet powerful API that you can use to test forms when they're submitted on your site. This list is composed of the most recently-caught bots.|ipv4 hash:ip|4457 unique IPs|updated every 30 mins from [this link](http://botscout.com/last_caught_cache.htm)
[botvrij_dst](http://iplists.firehol.org/?ipset=botvrij_dst)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious destination IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|333 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-dst.raw)
[botvrij_src](http://iplists.firehol.org/?ipset=botvrij_src)|[botvrij.eu](http://www.botvrij.eu/) Indicators of Compromise (IOCS) about malicious source IPs, gathered via open source information feeds (blog pages and PDF documents) and then consolidated into different datasets. To ensure the quality of the data all entries older than approx. 6 months are removed.|ipv4 hash:ip|0 unique IPs|updated every 1 day from [this link](http://www.botvrij.eu/data/ioclist.ip-src.raw)
[bruteforceblocker](http://iplists.firehol.org/?ipset=bruteforceblocker)|[danger.rulez.sk bruteforceblocker](http://danger.rulez.sk/index.php/bruteforceblocker/) (fail2ban alternative for SSH on OpenBSD). This is an automatically generated list from users reporting failed authentication attempts. An IP seems to be included if 3 or more users report it. Its retention pocily seems 30 days.|ipv4 hash:ip|1412 unique IPs|updated every 3 hours from [this link](http://danger.rulez.sk/projects/bruteforceblocker/blist.php)
[chaosreigns_iprep0](http://iplists.firehol.org/?ipset=chaosreigns_iprep0)|[ChaosReigns.com](http://www.chaosreigns.com/iprep) The iprep0 list includes all IPs that sent only spam emails. This is an automated, free, public email IP reputation system. The primary goal is a whitelist. Other data is provided as a consequence.|ipv4 hash:ip|5323 unique IPs|updated every 1 day from [this link](http://www.chaosreigns.com/iprep/iprep.txt)
[chaosreigns_iprep100](http://iplists.firehol.org/?ipset=chaosreigns_iprep100)|[ChaosReigns.com](http://www.chaosreigns.com/iprep) The iprep100 list includes all IPs that sent 100% ham emails. This is an automated, free, public email IP reputation system. The primary goal is a whitelist. Other data is provided as a consequence.|ipv4 hash:ip|5323 unique IPs|updated every 1 day from [this link](http://www.chaosreigns.com/iprep/iprep.txt)
[chaosreigns_iprep50](http://iplists.firehol.org/?ipset=chaosreigns_iprep50)|[ChaosReigns.com](http://www.chaosreigns.com/iprep) The iprep50 list includes all IPs that sent both ham and spam emails. This is an automated, free, public email IP reputation system. The primary goal is a whitelist. Other data is provided as a consequence.|ipv4 hash:ip|5323 unique IPs|updated every 1 day from [this link](http://www.chaosreigns.com/iprep/iprep.txt)
[ciarmy](http://iplists.firehol.org/?ipset=ciarmy)|[CIArmy.com](http://ciarmy.com/) IPs with poor Rogue Packet score that have not yet been identified as malicious by the community|ipv4 hash:ip|12306 unique IPs|updated every 3 hours from [this link](http://cinsscore.com/list/ci-badguys.txt)
[cidr_report_bogons](http://iplists.firehol.org/?ipset=cidr_report_bogons)|Unallocated (Free) Address Space, generated on a daily basis using the IANA registry files, the Regional Internet Registry stats files and the Regional Internet Registry whois data.|ipv4 hash:net|3839 subnets, 603473224 unique IPs|updated every 1 day from [this link](http://www.cidr-report.org/bogons/freespace-prefix.txt)
[cleanmx_phishing](http://iplists.firehol.org/?ipset=cleanmx_phishing)|[Clean-MX.de](http://support.clean-mx.de/) IPs sending phishing messages|ipv4 hash:ip|4519 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format=csv&domain=)
[cleanmx_viruses](http://iplists.firehol.org/?ipset=cleanmx_viruses)|[Clean-MX.de](http://support.clean-mx.de/clean-mx/viruses.php) IPs with viruses|ipv4 hash:ip|12190 unique IPs|updated every 30 mins from [this link](http://support.clean-mx.de/clean-mx/xmlviruses.php?response=alive&fields=ip)
[cleantalk](http://iplists.firehol.org/?ipset=cleantalk)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new cleantalk_updated)|ipv4 hash:ip|3165 unique IPs|
[cleantalk_1d](http://iplists.firehol.org/?ipset=cleantalk_1d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_1d cleantalk_updated_1d)|ipv4 hash:ip|7622 unique IPs|
[cleantalk_30d](http://iplists.firehol.org/?ipset=cleantalk_30d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_30d cleantalk_updated_30d)|ipv4 hash:ip|66544 unique IPs|
[cleantalk_7d](http://iplists.firehol.org/?ipset=cleantalk_7d)|[CleanTalk](https://cleantalk.org/) Today's HTTP Spammers (includes: cleantalk_new_7d cleantalk_updated_7d)|ipv4 hash:ip|20555 unique IPs|
[cleantalk_new](http://iplists.firehol.org/?ipset=cleantalk_new)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|1165 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_1d](http://iplists.firehol.org/?ipset=cleantalk_new_1d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|2288 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_30d](http://iplists.firehol.org/?ipset=cleantalk_new_30d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|42989 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_new_7d](http://iplists.firehol.org/?ipset=cleantalk_new_7d)|[CleanTalk](https://cleantalk.org/) Recent HTTP Spammers|ipv4 hash:ip|9584 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/submited_today)
[cleantalk_top20](http://iplists.firehol.org/?ipset=cleantalk_top20)|[CleanTalk](https://cleantalk.org/) Top 20 HTTP Spammers|ipv4 hash:ip|20 unique IPs|updated every 1 day from [this link](https://cleantalk.org/blacklists/top20)
[cleantalk_updated](http://iplists.firehol.org/?ipset=cleantalk_updated)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|2000 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_1d](http://iplists.firehol.org/?ipset=cleantalk_updated_1d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|6392 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_30d](http://iplists.firehol.org/?ipset=cleantalk_updated_30d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|31458 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[cleantalk_updated_7d](http://iplists.firehol.org/?ipset=cleantalk_updated_7d)|[CleanTalk](https://cleantalk.org/) Recurring HTTP Spammers|ipv4 hash:ip|14430 unique IPs|updated every 15 mins from [this link](https://cleantalk.org/blacklists/updated_today)
[continent_af](http://iplists.firehol.org/?ipset=continent_af)|Africa (AF), with countries: Rwanda (RW), Somalia (SO), Tanzania (TZ), Kenya (KE), Congo (CD), Djibouti (DJ), Uganda (UG), Central African Republic (CF), Seychelles (SC), Ethiopia (ET), Eritrea (ER), Egypt (EG), Sudan (SD), Burundi (BI), Zimbabwe (ZW), Zambia (ZM), Comoros (KM), Malawi (MW), Lesotho (LS), Botswana (BW), Mauritius (MU), Swaziland (SZ), Réunion (RE), South Africa (ZA), Mayotte (YT), Mozambique (MZ), Madagascar (MG), Libya (LY), Cameroon (CM), Senegal (SN), Republic of the Congo (CG), Liberia (LR), Ivory Coast (CI), Ghana (GH), Equatorial Guinea (GQ), Nigeria (NG), Burkina Faso (BF), Togo (TG), Guinea-Bissau (GW), Mauritania (MR), Benin (BJ), Gabon (GA), Sierra Leone (SL), São Tomé and Príncipe (ST), Gambia (GM), Guinea (GN), Chad (TD), Niger (NE), Mali (ML), Tunisia (TN), Morocco (MA), Algeria (DZ), Angola (AO), Namibia (NA), Saint Helena (SH), Cape Verde (CV), South Sudan (SS), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2744 subnets, 94817313 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_an](http://iplists.firehol.org/?ipset=continent_an)|Antarctica (AN), with countries: French Southern Territories (TF), South Georgia and the South Sandwich Islands (GS), Antarctica (AQ), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 1331 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_as](http://iplists.firehol.org/?ipset=continent_as)|Asia (AS), with countries: Yemen (YE), Iraq (IQ), Saudi Arabia (SA), Iran (IR), Syria (SY), Armenia (AM), Hashemite Kingdom of Jordan (JO), Lebanon (LB), Kuwait (KW), Oman (OM), Qatar (QA), Bahrain (BH), United Arab Emirates (AE), Israel (IL), Turkey (TR), Azerbaijan (AZ), Georgia (GE), Afghanistan (AF), Pakistan (PK), Bangladesh (BD), Turkmenistan (TM), Tajikistan (TJ), Sri Lanka (LK), Bhutan (BT), India (IN), Maldives (MV), British Indian Ocean Territory (IO), Nepal (NP), Myanmar (Burma) (MM), Uzbekistan (UZ), Kazakhstan (KZ), Kyrgyzstan (KG), Cocos (Keeling) Islands (CC), Vietnam (VN), Thailand (TH), Indonesia (ID), Laos (LA), Taiwan (TW), Philippines (PH), Malaysia (MY), China (CN), Hong Kong (HK), Brunei (BN), Macao (MO), Cambodia (KH), Republic of Korea (KR), Japan (JP), North Korea (KP), Singapore (SG), Mongolia (MN), Christmas Island (CX), Palestine (PS), (), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|22181 subnets, 883382437 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_eu](http://iplists.firehol.org/?ipset=continent_eu)|Europe (EU), with countries: Cyprus (CY), Greece (GR), Estonia (EE), Latvia (LV), Republic of Lithuania (LT), Svalbard and Jan Mayen (SJ), Republic of Moldova (MD), Belarus (BY), Finland (FI), Åland (AX), Ukraine (UA), F.Y.R.O.M. (MK), Hungary (HU), Bulgaria (BG), Albania (AL), Poland (PL), Romania (RO), Kosovo (XK), Russia (RU), Portugal (PT), Gibraltar (GI), Spain (ES), Malta (MT), Faroe Islands (FO), Denmark (DK), Iceland (IS), United Kingdom (GB), Switzerland (CH), Sweden (SE), Netherlands (NL), Austria (AT), Belgium (BE), Germany (DE), Luxembourg (LU), Ireland (IE), Monaco (MC), France (FR), Andorra (AD), Liechtenstein (LI), Jersey (JE), Isle of Man (IM), Guernsey (GG), Slovak Republic (SK), Czechia (CZ), Norway (NO), Vatican City (VA), San Marino (SM), Italy (IT), Slovenia (SI), Montenegro (ME), Croatia (HR), Bosnia and Herzegovina (BA), (), Serbia (RS), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|45723 subnets, 751302891 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_na](http://iplists.firehol.org/?ipset=continent_na)|North America (NA), with countries: Barbados (BB), Saint Pierre and Miquelon (PM), Greenland (GL), Jamaica (JM), Dominican Republic (DO), Cuba (CU), Martinique (MQ), Bahamas (BS), Bermuda (BM), Anguilla (AI), Trinidad and Tobago (TT), Saint Kitts and Nevis (KN), Dominica (DM), Antigua and Barbuda (AG), Saint Lucia (LC), Turks and Caicos Islands (TC), Aruba (AW), British Virgin Islands (VG), Saint Vincent and the Grenadines (VC), Montserrat (MS), Saint Martin (MF), Saint-Barthélemy (BL), Guadeloupe (GP), Grenada (GD), Cayman Islands (KY), Belize (BZ), El Salvador (SV), Guatemala (GT), Honduras (HN), Nicaragua (NI), Costa Rica (CR), Panama (PA), Haiti (HT), Mexico (MX), Puerto Rico (PR), U.S. Virgin Islands (VI), Canada (CA), United States (US), Sint Maarten (SX), Curaçao (CW), Bonaire, Sint Eustatius, and Saba (BQ), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|42161 subnets, 1714467526 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_oc](http://iplists.firehol.org/?ipset=continent_oc)|Oceania (OC), with countries: Palau (PW), Cook Islands (CK), East Timor (TL), Australia (AU), Marshall Islands (MH), Federated States of Micronesia (FM), Papua New Guinea (PG), Solomon Islands (SB), Tuvalu (TV), Nauru (NR), Vanuatu (VU), New Caledonia (NC), Norfolk Island (NF), New Zealand (NZ), Fiji (FJ), French Polynesia (PF), Pitcairn Islands (PN), Kiribati (KI), Tokelau (TK), Tonga (TO), Wallis and Futuna (WF), Samoa (WS), Niue (NU), Northern Mariana Islands (MP), Guam (GU), U.S. Minor Outlying Islands (UM), American Samoa (AS), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|7243 subnets, 57909325 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[continent_sa](http://iplists.firehol.org/?ipset=continent_sa)|South America (SA), with countries: Guyana (GY), French Guiana (GF), Suriname (SR), Paraguay (PY), Uruguay (UY), Brazil (BR), Falkland Islands (FK), Venezuela (VE), Ecuador (EC), Colombia (CO), Argentina (AR), Chile (CL), Bolivia (BO), Peru (PE), -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4481 subnets, 147431850 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ad](http://iplists.firehol.org/?ipset=country_ad)|Andorra (AD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|17 subnets, 42786 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ae](http://iplists.firehol.org/?ipset=country_ae)|United Arab Emirates (AE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|293 subnets, 3925518 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_af](http://iplists.firehol.org/?ipset=country_af)|Afghanistan (AF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|95 subnets, 189776 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ag](http://iplists.firehol.org/?ipset=country_ag)|Antigua and Barbuda (AG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|93 subnets, 53008 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ai](http://iplists.firehol.org/?ipset=country_ai)|Anguilla (AI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|20 subnets, 11280 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_al](http://iplists.firehol.org/?ipset=country_al)|Albania (AL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|134 subnets, 399646 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_am](http://iplists.firehol.org/?ipset=country_am)|Armenia (AM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|130 subnets, 610066 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ao](http://iplists.firehol.org/?ipset=country_ao)|Angola (AO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|100 subnets, 1221039 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_aq](http://iplists.firehol.org/?ipset=country_aq)|Antarctica (AQ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 552 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ar](http://iplists.firehol.org/?ipset=country_ar)|Argentina (AR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1733 subnets, 19008488 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_as](http://iplists.firehol.org/?ipset=country_as)|American Samoa (AS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|17 subnets, 11016 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_at](http://iplists.firehol.org/?ipset=country_at)|Austria (AT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1955 subnets, 11063018 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_au](http://iplists.firehol.org/?ipset=country_au)|Australia (AU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|6283 subnets, 49909246 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_aw](http://iplists.firehol.org/?ipset=country_aw)|Aruba (AW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|39 subnets, 86552 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ax](http://iplists.firehol.org/?ipset=country_ax)|Åland (AX) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|17 subnets, 22925 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_az](http://iplists.firehol.org/?ipset=country_az)|Azerbaijan (AZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|140 subnets, 761440 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ba](http://iplists.firehol.org/?ipset=country_ba)|Bosnia and Herzegovina (BA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|169 subnets, 834570 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bb](http://iplists.firehol.org/?ipset=country_bb)|Barbados (BB) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|134 subnets, 152748 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bd](http://iplists.firehol.org/?ipset=country_bd)|Bangladesh (BD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|629 subnets, 1303573 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_be](http://iplists.firehol.org/?ipset=country_be)|Belgium (BE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1847 subnets, 24000524 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bf](http://iplists.firehol.org/?ipset=country_bf)|Burkina Faso (BF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|27 subnets, 101032 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bg](http://iplists.firehol.org/?ipset=country_bg)|Bulgaria (BG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|840 subnets, 4426764 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bh](http://iplists.firehol.org/?ipset=country_bh)|Bahrain (BH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|81 subnets, 461862 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bi](http://iplists.firehol.org/?ipset=country_bi)|Burundi (BI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|20 subnets, 41600 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bj](http://iplists.firehol.org/?ipset=country_bj)|Benin (BJ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|30 subnets, 142872 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bl](http://iplists.firehol.org/?ipset=country_bl)|Saint-Barthélemy (BL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|23 subnets, 6155 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bm](http://iplists.firehol.org/?ipset=country_bm)|Bermuda (BM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|66 subnets, 126513 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bn](http://iplists.firehol.org/?ipset=country_bn)|Brunei (BN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|38 subnets, 210322 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bo](http://iplists.firehol.org/?ipset=country_bo)|Bolivia (BO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|119 subnets, 1153476 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bq](http://iplists.firehol.org/?ipset=country_bq)|Bonaire, Sint Eustatius, and Saba (BQ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|24 subnets, 24579 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_br](http://iplists.firehol.org/?ipset=country_br)|Brazil (BR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2448 subnets, 83482441 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bs](http://iplists.firehol.org/?ipset=country_bs)|Bahamas (BS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|61 subnets, 159974 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bt](http://iplists.firehol.org/?ipset=country_bt)|Bhutan (BT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|16 subnets, 32528 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bw](http://iplists.firehol.org/?ipset=country_bw)|Botswana (BW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|46 subnets, 147092 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_by](http://iplists.firehol.org/?ipset=country_by)|Belarus (BY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|145 subnets, 1917709 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_bz](http://iplists.firehol.org/?ipset=country_bz)|Belize (BZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|261 subnets, 203001 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ca](http://iplists.firehol.org/?ipset=country_ca)|Canada (CA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9614 subnets, 72266957 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cc](http://iplists.firehol.org/?ipset=country_cc)|Cocos (Keeling) Islands (CC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 1537 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cd](http://iplists.firehol.org/?ipset=country_cd)|Congo (CD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|81 subnets, 149785 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cf](http://iplists.firehol.org/?ipset=country_cf)|Central African Republic (CF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|13 subnets, 12037 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cg](http://iplists.firehol.org/?ipset=country_cg)|Republic of the Congo (CG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|38 subnets, 56861 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ch](http://iplists.firehol.org/?ipset=country_ch)|Switzerland (CH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2649 subnets, 20159151 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ci](http://iplists.firehol.org/?ipset=country_ci)|Ivory Coast (CI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|38 subnets, 660104 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ck](http://iplists.firehol.org/?ipset=country_ck)|Cook Islands (CK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 8450 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cl](http://iplists.firehol.org/?ipset=country_cl)|Chile (CL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|792 subnets, 9990526 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cm](http://iplists.firehol.org/?ipset=country_cm)|Cameroon (CM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|72 subnets, 462816 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cn](http://iplists.firehol.org/?ipset=country_cn)|China (CN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|6349 subnets, 338264382 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_co](http://iplists.firehol.org/?ipset=country_co)|Colombia (CO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|785 subnets, 17324629 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cr](http://iplists.firehol.org/?ipset=country_cr)|Costa Rica (CR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|386 subnets, 2587389 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cu](http://iplists.firehol.org/?ipset=country_cu)|Cuba (CU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|29 subnets, 261520 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cv](http://iplists.firehol.org/?ipset=country_cv)|Cape Verde (CV) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 34560 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cw](http://iplists.firehol.org/?ipset=country_cw)|Curaçao (CW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|60 subnets, 283569 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cx](http://iplists.firehol.org/?ipset=country_cx)|Christmas Island (CX) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 1792 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cy](http://iplists.firehol.org/?ipset=country_cy)|Cyprus (CY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|323 subnets, 845827 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_cz](http://iplists.firehol.org/?ipset=country_cz)|Czechia (CZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1458 subnets, 8479813 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_de](http://iplists.firehol.org/?ipset=country_de)|Germany (DE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|11834 subnets, 121564771 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_dj](http://iplists.firehol.org/?ipset=country_dj)|Djibouti (DJ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|27 subnets, 66587 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_dk](http://iplists.firehol.org/?ipset=country_dk)|Denmark (DK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1444 subnets, 13055527 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_dm](http://iplists.firehol.org/?ipset=country_dm)|Dominica (DM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|38 subnets, 23745 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_do](http://iplists.firehol.org/?ipset=country_do)|Dominican Republic (DO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|105 subnets, 1581043 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_dz](http://iplists.firehol.org/?ipset=country_dz)|Algeria (DZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|63 subnets, 4837057 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ec](http://iplists.firehol.org/?ipset=country_ec)|Ecuador (EC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|270 subnets, 2656376 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ee](http://iplists.firehol.org/?ipset=country_ee)|Estonia (EE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|292 subnets, 1599041 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_eg](http://iplists.firehol.org/?ipset=country_eg)|Egypt (EG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|240 subnets, 19978743 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_er](http://iplists.firehol.org/?ipset=country_er)|Eritrea (ER) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|5 subnets, 8832 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_es](http://iplists.firehol.org/?ipset=country_es)|Spain (ES) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3434 subnets, 32136881 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_et](http://iplists.firehol.org/?ipset=country_et)|Ethiopia (ET) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|10 subnets, 366337 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fi](http://iplists.firehol.org/?ipset=country_fi)|Finland (FI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1344 subnets, 13615412 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fj](http://iplists.firehol.org/?ipset=country_fj)|Fiji (FJ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|37 subnets, 147520 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fk](http://iplists.firehol.org/?ipset=country_fk)|Falkland Islands (FK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 771 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fm](http://iplists.firehol.org/?ipset=country_fm)|Federated States of Micronesia (FM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|8 subnets, 13056 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fo](http://iplists.firehol.org/?ipset=country_fo)|Faroe Islands (FO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|19 subnets, 43529 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_fr](http://iplists.firehol.org/?ipset=country_fr)|France (FR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|13429 subnets, 82273492 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ga](http://iplists.firehol.org/?ipset=country_ga)|Gabon (GA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|65 subnets, 347052 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gb](http://iplists.firehol.org/?ipset=country_gb)|United Kingdom (GB) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|16301 subnets, 124644982 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gd](http://iplists.firehol.org/?ipset=country_gd)|Grenada (GD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|44 subnets, 31376 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ge](http://iplists.firehol.org/?ipset=country_ge)|Georgia (GE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|179 subnets, 1215596 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gf](http://iplists.firehol.org/?ipset=country_gf)|French Guiana (GF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|52 subnets, 61264 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gg](http://iplists.firehol.org/?ipset=country_gg)|Guernsey (GG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|48 subnets, 53310 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gh](http://iplists.firehol.org/?ipset=country_gh)|Ghana (GH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|122 subnets, 1161117 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gi](http://iplists.firehol.org/?ipset=country_gi)|Gibraltar (GI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|65 subnets, 77182 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gl](http://iplists.firehol.org/?ipset=country_gl)|Greenland (GL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9 subnets, 23808 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gm](http://iplists.firehol.org/?ipset=country_gm)|Gambia (GM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|20 subnets, 260997 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gn](http://iplists.firehol.org/?ipset=country_gn)|Guinea (GN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|74 subnets, 30843 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gp](http://iplists.firehol.org/?ipset=country_gp)|Guadeloupe (GP) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|197 subnets, 214262 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gq](http://iplists.firehol.org/?ipset=country_gq)|Equatorial Guinea (GQ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|15 subnets, 19866 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gr](http://iplists.firehol.org/?ipset=country_gr)|Greece (GR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|487 subnets, 5885315 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gt](http://iplists.firehol.org/?ipset=country_gt)|Guatemala (GT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|357 subnets, 645943 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gu](http://iplists.firehol.org/?ipset=country_gu)|Guam (GU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|59 subnets, 230440 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gw](http://iplists.firehol.org/?ipset=country_gw)|Guinea-Bissau (GW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9 subnets, 12675 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_gy](http://iplists.firehol.org/?ipset=country_gy)|Guyana (GY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|18 subnets, 64640 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_hk](http://iplists.firehol.org/?ipset=country_hk)|Hong Kong (HK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2918 subnets, 12524204 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_hn](http://iplists.firehol.org/?ipset=country_hn)|Honduras (HN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|779 subnets, 545634 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_hr](http://iplists.firehol.org/?ipset=country_hr)|Croatia (HR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|293 subnets, 2643504 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ht](http://iplists.firehol.org/?ipset=country_ht)|Haiti (HT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|37 subnets, 172680 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_hu](http://iplists.firehol.org/?ipset=country_hu)|Hungary (HU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|650 subnets, 5895750 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_id](http://iplists.firehol.org/?ipset=country_id)|Indonesia (ID) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1579 subnets, 17958236 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ie](http://iplists.firehol.org/?ipset=country_ie)|Ireland (IE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1726 subnets, 10228396 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_il](http://iplists.firehol.org/?ipset=country_il)|Israel (IL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|655 subnets, 8059763 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_im](http://iplists.firehol.org/?ipset=country_im)|Isle of Man (IM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|59 subnets, 92419 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_in](http://iplists.firehol.org/?ipset=country_in)|India (IN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4341 subnets, 41991199 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_io](http://iplists.firehol.org/?ipset=country_io)|British Indian Ocean Territory (IO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 3074 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_iq](http://iplists.firehol.org/?ipset=country_iq)|Iraq (IQ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|178 subnets, 664876 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ir](http://iplists.firehol.org/?ipset=country_ir)|Iran (IR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1116 subnets, 12351370 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_is](http://iplists.firehol.org/?ipset=country_is)|Iceland (IS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|157 subnets, 890641 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_it](http://iplists.firehol.org/?ipset=country_it)|Italy (IT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3710 subnets, 54190883 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_je](http://iplists.firehol.org/?ipset=country_je)|Jersey (JE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|243 subnets, 72449 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_jm](http://iplists.firehol.org/?ipset=country_jm)|Jamaica (JM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|121 subnets, 274946 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_jo](http://iplists.firehol.org/?ipset=country_jo)|Hashemite Kingdom of Jordan (JO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|160 subnets, 684538 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_jp](http://iplists.firehol.org/?ipset=country_jp)|Japan (JP) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4311 subnets, 205726094 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ke](http://iplists.firehol.org/?ipset=country_ke)|Kenya (KE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|246 subnets, 5000938 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kg](http://iplists.firehol.org/?ipset=country_kg)|Kyrgyzstan (KG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|75 subnets, 272278 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kh](http://iplists.firehol.org/?ipset=country_kh)|Cambodia (KH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|151 subnets, 301666 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ki](http://iplists.firehol.org/?ipset=country_ki)|Kiribati (KI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|7 subnets, 8960 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_km](http://iplists.firehol.org/?ipset=country_km)|Comoros (KM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9 subnets, 6021 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kn](http://iplists.firehol.org/?ipset=country_kn)|Saint Kitts and Nevis (KN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|56 subnets, 36223 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kp](http://iplists.firehol.org/?ipset=country_kp)|North Korea (KP) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|8 subnets, 9779 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kr](http://iplists.firehol.org/?ipset=country_kr)|Republic of Korea (KR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1112 subnets, 112701069 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kw](http://iplists.firehol.org/?ipset=country_kw)|Kuwait (KW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|177 subnets, 1955140 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ky](http://iplists.firehol.org/?ipset=country_ky)|Cayman Islands (KY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|45 subnets, 204971 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_kz](http://iplists.firehol.org/?ipset=country_kz)|Kazakhstan (KZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|317 subnets, 3095949 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_la](http://iplists.firehol.org/?ipset=country_la)|Laos (LA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|42 subnets, 75763 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lb](http://iplists.firehol.org/?ipset=country_lb)|Lebanon (LB) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|221 subnets, 588157 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lc](http://iplists.firehol.org/?ipset=country_lc)|Saint Lucia (LC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|40 subnets, 35464 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_li](http://iplists.firehol.org/?ipset=country_li)|Liechtenstein (LI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|77 subnets, 107587 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lk](http://iplists.firehol.org/?ipset=country_lk)|Sri Lanka (LK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|77 subnets, 549505 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lr](http://iplists.firehol.org/?ipset=country_lr)|Liberia (LR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|37 subnets, 36642 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ls](http://iplists.firehol.org/?ipset=country_ls)|Lesotho (LS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|47 subnets, 109856 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lt](http://iplists.firehol.org/?ipset=country_lt)|Republic of Lithuania (LT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|482 subnets, 2967142 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lu](http://iplists.firehol.org/?ipset=country_lu)|Luxembourg (LU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|387 subnets, 1441222 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_lv](http://iplists.firehol.org/?ipset=country_lv)|Latvia (LV) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|447 subnets, 2044291 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ly](http://iplists.firehol.org/?ipset=country_ly)|Libya (LY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|40 subnets, 374788 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ma](http://iplists.firehol.org/?ipset=country_ma)|Morocco (MA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|80 subnets, 9901779 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mc](http://iplists.firehol.org/?ipset=country_mc)|Monaco (MC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|21 subnets, 55345 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_md](http://iplists.firehol.org/?ipset=country_md)|Republic of Moldova (MD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|390 subnets, 1339600 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_me](http://iplists.firehol.org/?ipset=country_me)|Montenegro (ME) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|72 subnets, 186096 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mf](http://iplists.firehol.org/?ipset=country_mf)|Saint Martin (MF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|53 subnets, 27649 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mg](http://iplists.firehol.org/?ipset=country_mg)|Madagascar (MG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|33 subnets, 174501 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mh](http://iplists.firehol.org/?ipset=country_mh)|Marshall Islands (MH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|10 subnets, 9728 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mk](http://iplists.firehol.org/?ipset=country_mk)|F.Y.R.O.M. (MK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|97 subnets, 695392 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ml](http://iplists.firehol.org/?ipset=country_ml)|Mali (ML) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|19 subnets, 80896 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mm](http://iplists.firehol.org/?ipset=country_mm)|Myanmar (Burma) (MM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|77 subnets, 119472 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mn](http://iplists.firehol.org/?ipset=country_mn)|Mongolia (MN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|106 subnets, 230779 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mo](http://iplists.firehol.org/?ipset=country_mo)|Macao (MO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|44 subnets, 351024 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mp](http://iplists.firehol.org/?ipset=country_mp)|Northern Mariana Islands (MP) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|11 subnets, 20736 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mq](http://iplists.firehol.org/?ipset=country_mq)|Martinique (MQ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|183 subnets, 145615 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mr](http://iplists.firehol.org/?ipset=country_mr)|Mauritania (MR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|20 subnets, 53440 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ms](http://iplists.firehol.org/?ipset=country_ms)|Montserrat (MS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|11 subnets, 3264 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mt](http://iplists.firehol.org/?ipset=country_mt)|Malta (MT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|112 subnets, 615763 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mu](http://iplists.firehol.org/?ipset=country_mu)|Mauritius (MU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|240 subnets, 1400060 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mv](http://iplists.firehol.org/?ipset=country_mv)|Maldives (MV) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|23 subnets, 65552 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mw](http://iplists.firehol.org/?ipset=country_mw)|Malawi (MW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|41 subnets, 433601 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mx](http://iplists.firehol.org/?ipset=country_mx)|Mexico (MX) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|872 subnets, 28976139 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_my](http://iplists.firehol.org/?ipset=country_my)|Malaysia (MY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|701 subnets, 6655438 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_mz](http://iplists.firehol.org/?ipset=country_mz)|Mozambique (MZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|57 subnets, 455813 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_na](http://iplists.firehol.org/?ipset=country_na)|Namibia (NA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|92 subnets, 480224 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nc](http://iplists.firehol.org/?ipset=country_nc)|New Caledonia (NC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|45 subnets, 164378 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ne](http://iplists.firehol.org/?ipset=country_ne)|Niger (NE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|24 subnets, 46428 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nf](http://iplists.firehol.org/?ipset=country_nf)|Norfolk Island (NF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|7 subnets, 2053 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ng](http://iplists.firehol.org/?ipset=country_ng)|Nigeria (NG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|531 subnets, 2845925 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ni](http://iplists.firehol.org/?ipset=country_ni)|Nicaragua (NI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|104 subnets, 434976 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nl](http://iplists.firehol.org/?ipset=country_nl)|Netherlands (NL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|8007 subnets, 52138272 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_no](http://iplists.firehol.org/?ipset=country_no)|Norway (NO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1369 subnets, 15995089 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_np](http://iplists.firehol.org/?ipset=country_np)|Nepal (NP) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|101 subnets, 512177 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nr](http://iplists.firehol.org/?ipset=country_nr)|Nauru (NR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|12 subnets, 14341 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nu](http://iplists.firehol.org/?ipset=country_nu)|Niue (NU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|6 subnets, 2314 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_nz](http://iplists.firehol.org/?ipset=country_nz)|New Zealand (NZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|920 subnets, 7122555 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_om](http://iplists.firehol.org/?ipset=country_om)|Oman (OM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|59 subnets, 919068 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pa](http://iplists.firehol.org/?ipset=country_pa)|Panama (PA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|420 subnets, 2050757 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pe](http://iplists.firehol.org/?ipset=country_pe)|Peru (PE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|221 subnets, 3233584 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pf](http://iplists.firehol.org/?ipset=country_pf)|French Polynesia (PF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|18 subnets, 62736 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pg](http://iplists.firehol.org/?ipset=country_pg)|Papua New Guinea (PG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|45 subnets, 63112 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ph](http://iplists.firehol.org/?ipset=country_ph)|Philippines (PH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|657 subnets, 5522977 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pk](http://iplists.firehol.org/?ipset=country_pk)|Pakistan (PK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|409 subnets, 5335051 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pl](http://iplists.firehol.org/?ipset=country_pl)|Poland (PL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3457 subnets, 20776704 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pm](http://iplists.firehol.org/?ipset=country_pm)|Saint Pierre and Miquelon (PM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9 subnets, 8709 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pr](http://iplists.firehol.org/?ipset=country_pr)|Puerto Rico (PR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|365 subnets, 1257551 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ps](http://iplists.firehol.org/?ipset=country_ps)|Palestine (PS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|135 subnets, 642304 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pt](http://iplists.firehol.org/?ipset=country_pt)|Portugal (PT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|672 subnets, 6656487 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_pw](http://iplists.firehol.org/?ipset=country_pw)|Palau (PW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|5 subnets, 9984 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_py](http://iplists.firehol.org/?ipset=country_py)|Paraguay (PY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|80 subnets, 1109025 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_qa](http://iplists.firehol.org/?ipset=country_qa)|Qatar (QA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|56 subnets, 845784 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_re](http://iplists.firehol.org/?ipset=country_re)|Réunion (RE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|192 subnets, 500375 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ro](http://iplists.firehol.org/?ipset=country_ro)|Romania (RO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2712 subnets, 8810018 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_rs](http://iplists.firehol.org/?ipset=country_rs)|Serbia (RS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|360 subnets, 2290963 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ru](http://iplists.firehol.org/?ipset=country_ru)|Russia (RU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|7702 subnets, 45443381 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_rw](http://iplists.firehol.org/?ipset=country_rw)|Rwanda (RW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|29 subnets, 374656 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sa](http://iplists.firehol.org/?ipset=country_sa)|Saudi Arabia (SA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|444 subnets, 8985895 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sb](http://iplists.firehol.org/?ipset=country_sb)|Solomon Islands (SB) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|9 subnets, 15360 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sc](http://iplists.firehol.org/?ipset=country_sc)|Seychelles (SC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|417 subnets, 1256485 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sd](http://iplists.firehol.org/?ipset=country_sd)|Sudan (SD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|30 subnets, 1273352 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_se](http://iplists.firehol.org/?ipset=country_se)|Sweden (SE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3995 subnets, 27405533 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sg](http://iplists.firehol.org/?ipset=country_sg)|Singapore (SG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|2827 subnets, 8057065 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_si](http://iplists.firehol.org/?ipset=country_si)|Slovenia (SI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|496 subnets, 2626881 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sk](http://iplists.firehol.org/?ipset=country_sk)|Slovak Republic (SK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|414 subnets, 2712084 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sl](http://iplists.firehol.org/?ipset=country_sl)|Sierra Leone (SL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|27 subnets, 57222 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sm](http://iplists.firehol.org/?ipset=country_sm)|San Marino (SM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|24 subnets, 23815 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sn](http://iplists.firehol.org/?ipset=country_sn)|Senegal (SN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|22 subnets, 364176 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_so](http://iplists.firehol.org/?ipset=country_so)|Somalia (SO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|30 subnets, 25410 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sr](http://iplists.firehol.org/?ipset=country_sr)|Suriname (SR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|19 subnets, 89226 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ss](http://iplists.firehol.org/?ipset=country_ss)|South Sudan (SS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 13321 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_st](http://iplists.firehol.org/?ipset=country_st)|São Tomé and Príncipe (ST) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|6 subnets, 13697 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sv](http://iplists.firehol.org/?ipset=country_sv)|El Salvador (SV) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|132 subnets, 683088 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sx](http://iplists.firehol.org/?ipset=country_sx)|Sint Maarten (SX) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 36096 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sy](http://iplists.firehol.org/?ipset=country_sy)|Syria (SY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|164 subnets, 1093901 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_sz](http://iplists.firehol.org/?ipset=country_sz)|Swaziland (SZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|24 subnets, 52864 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tc](http://iplists.firehol.org/?ipset=country_tc)|Turks and Caicos Islands (TC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 12673 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_td](http://iplists.firehol.org/?ipset=country_td)|Chad (TD) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|17 subnets, 24849 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tg](http://iplists.firehol.org/?ipset=country_tg)|Togo (TG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|12 subnets, 309504 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_th](http://iplists.firehol.org/?ipset=country_th)|Thailand (TH) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|581 subnets, 9063784 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tj](http://iplists.firehol.org/?ipset=country_tj)|Tajikistan (TJ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|33 subnets, 73094 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tk](http://iplists.firehol.org/?ipset=country_tk)|Tokelau (TK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3 subnets, 2305 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tl](http://iplists.firehol.org/?ipset=country_tl)|East Timor (TL) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|15 subnets, 15872 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tm](http://iplists.firehol.org/?ipset=country_tm)|Turkmenistan (TM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|14 subnets, 22402 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tn](http://iplists.firehol.org/?ipset=country_tn)|Tunisia (TN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|26 subnets, 5232289 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_to](http://iplists.firehol.org/?ipset=country_to)|Tonga (TO) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|12 subnets, 14848 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tr](http://iplists.firehol.org/?ipset=country_tr)|Turkey (TR) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1029 subnets, 16502746 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tt](http://iplists.firehol.org/?ipset=country_tt)|Trinidad and Tobago (TT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|52 subnets, 534432 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tv](http://iplists.firehol.org/?ipset=country_tv)|Tuvalu (TV) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|4 subnets, 12800 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tw](http://iplists.firehol.org/?ipset=country_tw)|Taiwan (TW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|631 subnets, 35478540 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_tz](http://iplists.firehol.org/?ipset=country_tz)|Tanzania (TZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|144 subnets, 1082217 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ua](http://iplists.firehol.org/?ipset=country_ua)|Ukraine (UA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|3039 subnets, 11697999 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ug](http://iplists.firehol.org/?ipset=country_ug)|Uganda (UG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|75 subnets, 907924 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_um](http://iplists.firehol.org/?ipset=country_um)|U.S. Minor Outlying Islands (UM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|7 subnets, 148 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_us](http://iplists.firehol.org/?ipset=country_us)|United States (US) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|48423 subnets, 1600668380 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_uy](http://iplists.firehol.org/?ipset=country_uy)|Uruguay (UY) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|73 subnets, 2460442 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_uz](http://iplists.firehol.org/?ipset=country_uz)|Uzbekistan (UZ) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|79 subnets, 253440 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_va](http://iplists.firehol.org/?ipset=country_va)|Vatican City (VA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|22 subnets, 19584 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_vc](http://iplists.firehol.org/?ipset=country_vc)|Saint Vincent and the Grenadines (VC) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|50 subnets, 27648 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ve](http://iplists.firehol.org/?ipset=country_ve)|Venezuela (VE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|329 subnets, 6797730 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_vg](http://iplists.firehol.org/?ipset=country_vg)|British Virgin Islands (VG) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|75 subnets, 42971 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_vi](http://iplists.firehol.org/?ipset=country_vi)|U.S. Virgin Islands (VI) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|92 subnets, 129770 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_vn](http://iplists.firehol.org/?ipset=country_vn)|Vietnam (VN) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|479 subnets, 15885793 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_vu](http://iplists.firehol.org/?ipset=country_vu)|Vanuatu (VU) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|18 subnets, 19968 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_wf](http://iplists.firehol.org/?ipset=country_wf)|Wallis and Futuna (WF) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|5 subnets, 4096 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ws](http://iplists.firehol.org/?ipset=country_ws)|Samoa (WS) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|17 subnets, 23042 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_xk](http://iplists.firehol.org/?ipset=country_xk)|Kosovo (XK) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|99 subnets, 41858 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_ye](http://iplists.firehol.org/?ipset=country_ye)|Yemen (YE) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|28 subnets, 142336 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_yt](http://iplists.firehol.org/?ipset=country_yt)|Mayotte (YT) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|47 subnets, 15878 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_za](http://iplists.firehol.org/?ipset=country_za)|South Africa (ZA) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|1459 subnets, 30479577 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_zm](http://iplists.firehol.org/?ipset=country_zm)|Zambia (ZM) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|93 subnets, 1177533 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[country_zw](http://iplists.firehol.org/?ipset=country_zw)|Zimbabwe (ZW) -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|70 subnets, 146184 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[cruzit_web_attacks](http://iplists.firehol.org/?ipset=cruzit_web_attacks)|[CruzIt.com](http://www.cruzit.com/wbl.php) IPs of compromised machines scanning for vulnerabilities and DDOS attacks|ipv4 hash:ip|6261 unique IPs|updated every 12 hours from [this link](http://www.cruzit.com/xwbl2txt.php)
[cta_cryptowall](http://iplists.firehol.org/?ipset=cta_cryptowall)|[Cyber Threat Alliance](http://www.cyberthreatalliance.org/cryptowall-dashboard.html) CryptoWall is one of the most lucrative and broad-reaching ransomware campaigns affecting Internet users today. Sharing intelligence and analysis resources, the CTA profiled the latest version of CryptoWall, which impacted hundreds of thousands of users, resulting in over US $325 million in damages worldwide.|ipv4 hash:ip|1360 unique IPs|updated every 1 day from [this link](https://public.tableau.com/views/CTAOnlineViz/DashboardData.csv?:embed=y&:showVizHome=no&:showTabs=y&:display_count=y&:display_static_image=y&:bootstrapWhenNotified=true)
[cta_cryptowall](http://iplists.firehol.org/?ipset=cta_cryptowall)|[Cyber Threat Alliance](http://www.cyberthreatalliance.org/cryptowall-dashboard.html) CryptoWall is one of the most lucrative and broad-reaching ransomware campaigns affecting Internet users today. Sharing intelligence and analysis resources, the CTA profiled the latest version of CryptoWall, which impacted hundreds of thousands of users, resulting in over US $325 million in damages worldwide.|ipv4 hash:ip|1229 unique IPs|updated every 1 day from [this link](https://public.tableau.com/views/CTAOnlineViz/DashboardData.csv?:embed=y&:showVizHome=no&:showTabs=y&:display_count=y&:display_static_image=y&:bootstrapWhenNotified=true)
[cybercrime](http://iplists.firehol.org/?ipset=cybercrime)|[CyberCrime](http://cybercrime-tracker.net/) A project tracking Command and Control.|ipv4 hash:ip|8057 unique IPs|updated every 12 hours from [this link](http://cybercrime-tracker.net/fuckerz.php)
[darklist_de](http://iplists.firehol.org/?ipset=darklist_de)|[darklist.de](http://www.darklist.de/) ssh fail2ban reporting|ipv4 hash:net|1495 subnets, 256598 unique IPs|updated every 1 day from [this link](http://www.darklist.de/raw.php)
[dataplane_sipquery](http://iplists.firehol.org/?ipset=dataplane_sipquery)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating a SIP OPTIONS query to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SIP server cataloging or conducting various forms of telephony abuse.|ipv4 hash:ip|328 unique IPs|updated every 1 hour from [this link](https://dataplane.org/sipquery.txt)
[dataplane_sshclient](http://iplists.firehol.org/?ipset=dataplane_sshclient)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen initiating an SSH connection to a remote host. This report lists hosts that are suspicious of more than just port scanning. These hosts may be SSH server cataloging or conducting authentication attack attempts.|ipv4 hash:ip|3123 unique IPs|updated every 1 hour from [this link](https://dataplane.org/sshclient.txt)
[dataplane_sshpwauth](http://iplists.firehol.org/?ipset=dataplane_sshpwauth)|[DataPlane.org](https://dataplane.org/) IP addresses that has been seen attempting to remotely login to a host using SSH password authentication. This report lists hosts that are highly suspicious and are likely conducting malicious SSH password authentication attacks.|ipv4 hash:ip|1359 unique IPs|updated every 1 hour from [this link](https://dataplane.org/sshpwauth.txt)
[dm_tor](http://iplists.firehol.org/?ipset=dm_tor)|[dan.me.uk](https://www.dan.me.uk) dynamic list of TOR nodes|ipv4 hash:ip|6953 unique IPs|updated every 30 mins from [this link](https://www.dan.me.uk/torlist/)
[dragon_http](http://iplists.firehol.org/?ipset=dragon_http)|[Dragon Research Group](http://www.dragonresearchgroup.org/) IPs that have been seen sending HTTP requests to Dragon Research Pods in the last 7 days. This report lists hosts that are highly suspicious and are likely conducting malicious HTTP attacks. LEGITIMATE SEARCH ENGINE BOTS MAY BE IN THIS LIST. This report is informational. It is not a blacklist, but some operators may choose to use it to help protect their networks and hosts in the forms of automated reporting and mitigation services.|ipv4 hash:net|219 subnets, 59136 unique IPs|updated every 1 hour from [this link](http://www.dragonresearchgroup.org/insight/http-report.txt)
[dragon_sshpauth](http://iplists.firehol.org/?ipset=dragon_sshpauth)|[Dragon Research Group](http://www.dragonresearchgroup.org/) IP address that has been seen attempting to remotely login to a host using SSH password authentication, in the last 7 days. This report lists hosts that are highly suspicious and are likely conducting malicious SSH password authentication attacks.|ipv4 hash:net|324 subnets, 333 unique IPs|updated every 1 hour from [this link](https://www.dragonresearchgroup.org/insight/sshpwauth.txt)
[dragon_vncprobe](http://iplists.firehol.org/?ipset=dragon_vncprobe)|[Dragon Research Group](http://www.dragonresearchgroup.org/) IP address that has been seen attempting to remotely connect to a host running the VNC application service, in the last 7 days. This report lists hosts that are highly suspicious and are likely conducting malicious VNC probes or VNC brute force attacks.|ipv4 hash:net|60 subnets, 60 unique IPs|updated every 1 hour from [this link](https://www.dragonresearchgroup.org/insight/vncprobe.txt)
[dronebl_anonymizers](http://iplists.firehol.org/?ipset=dronebl_anonymizers)|[DroneBL.org](https://dronebl.org) List of open proxies. It includes IPs which DroneBL categorizes as SOCKS proxies (8), HTTP proxies (9), web page proxies (11), WinGate proxies (14), proxy chains (10).|ipv4 hash:net|264056 subnets, 274267 unique IPs|
[dronebl_auto_botnets](http://iplists.firehol.org/?ipset=dronebl_auto_botnets)|[DroneBL.org](https://dronebl.org) IPs of automatically detected botnets. It includes IPs for which DroneBL responds with 17.|ipv4 hash:net|296213 subnets, 305803 unique IPs|
[dronebl_autorooting_worms](http://iplists.firehol.org/?ipset=dronebl_autorooting_worms)|[DroneBL.org](https://dronebl.org) IPs of autorooting worms. It includes IPs for which DroneBL responds with 16. These are usually SSH bruteforce attacks.|ipv4 hash:net|883 subnets, 958 unique IPs|
[dronebl_compromised](http://iplists.firehol.org/?ipset=dronebl_compromised)|[DroneBL.org](https://dronebl.org) IPs of compromised routers / gateways. It includes IPs for which DroneBL responds with 15 (BOPM detected).|ipv4 hash:net|627 subnets, 628 unique IPs|
[dronebl_ddos_drones](http://iplists.firehol.org/?ipset=dronebl_ddos_drones)|[DroneBL.org](https://dronebl.org) IPs of DDoS drones. It includes IPs for which DroneBL responds with 7.|ipv4 hash:net|902 subnets, 906 unique IPs|
[dronebl_dns_mx_on_irc](http://iplists.firehol.org/?ipset=dronebl_dns_mx_on_irc)|[DroneBL.org](https://dronebl.org) List of IPs of DNS / MX hostname detected on IRC. It includes IPs for which DroneBL responds with 18.|ipv4 hash:net|2451 subnets, 2482 unique IPs|
[dronebl_irc_drones](http://iplists.firehol.org/?ipset=dronebl_irc_drones)|[DroneBL.org](https://dronebl.org) List of IRC spam drones (litmus/sdbot/fyle). It includes IPs for which DroneBL responds with 3.|ipv4 hash:net|28357 subnets, 28526 unique IPs|
[dronebl_unknown](http://iplists.firehol.org/?ipset=dronebl_unknown)|[DroneBL.org](https://dronebl.org) List of IPs of uncategorized threats. It includes IPs for which DroneBL responds with 255.|ipv4 hash:net|32 subnets, 33 unique IPs|
[dronebl_worms_bots](http://iplists.firehol.org/?ipset=dronebl_worms_bots)|[DroneBL.org](https://dronebl.org) IPs of unknown worms or spambots. It includes IPs for which DroneBL responds with 6|ipv4 hash:net|21587 subnets, 92698 unique IPs|
[dshield](http://iplists.firehol.org/?ipset=dshield)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|20 subnets, 5120 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_1d](http://iplists.firehol.org/?ipset=dshield_1d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|33 subnets, 8448 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_30d](http://iplists.firehol.org/?ipset=dshield_30d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|179 subnets, 46848 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_7d](http://iplists.firehol.org/?ipset=dshield_7d)|[DShield.org](https://dshield.org/) top 20 attacking class C (/24) subnets over the last three days|ipv4 hash:net|73 subnets, 19200 unique IPs|updated every 10 mins from [this link](http://feeds.dshield.org/block.txt)
[dshield_top_1000](http://iplists.firehol.org/?ipset=dshield_top_1000)|[DShield.org](https://dshield.org/) top 1000 attacking hosts in the last 30 days|ipv4 hash:ip|881 unique IPs|updated every 1 hour from [this link](https://isc.sans.edu/api/sources/attacks/1000/)
[dyndns_ponmocup](http://iplists.firehol.org/?ipset=dyndns_ponmocup)|[DynDNS.org](http://security-research.dyndns.org/pub/malware-feeds/) Ponmocup. The malware powering the botnet has been around since 2006 and it’s known under various names, including Ponmocup, Vundo, Virtumonde, Milicenso and Swisyn. It has been used for ad fraud, data theft and downloading additional threats to infected systems. Ponmocup is one of the largest currently active and, with nine consecutive years, also one of the longest running, but it is rarely noticed as the operators take care to keep it operating under the radar.|ipv4 hash:ip|233 unique IPs|updated every 1 day from [this link](http://security-research.dyndns.org/pub/malware-feeds/ponmocup-infected-domains-shadowserver.csv)
[esentire_14072015_com](http://iplists.firehol.org/?ipset=esentire_14072015_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|579 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015.com_watch_ip.lst)
[esentire_14072015q_com](http://iplists.firehol.org/?ipset=esentire_14072015q_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|575 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/14072015q.com_watch_ip.lst)
[esentire_22072014a_com](http://iplists.firehol.org/?ipset=esentire_22072014a_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1290 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014a.com_watch_ip.lst)
[esentire_22072014b_com](http://iplists.firehol.org/?ipset=esentire_22072014b_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1288 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014b.com_watch_ip.lst)
[esentire_22072014c_com](http://iplists.firehol.org/?ipset=esentire_22072014c_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1289 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/22072014c.com_watch_ip.lst)
[esentire_atomictrivia_ru](http://iplists.firehol.org/?ipset=esentire_atomictrivia_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/atomictrivia.ru_watch_ip.lst)
[esentire_auth_update_ru](http://iplists.firehol.org/?ipset=esentire_auth_update_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|1306 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/auth-update.ru_watch_ip.lst)
esentire_burmundisoul_ru|Ursnif Variant CnC|ipv4 hash:ip|disabled|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/burmundisoul.ru_watch_ip.lst)
[esentire_crazyerror_su](http://iplists.firehol.org/?ipset=esentire_crazyerror_su)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|18613 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/crazyerror.su_watch_ip.lst)
[esentire_dagestanskiiviskis_ru](http://iplists.firehol.org/?ipset=esentire_dagestanskiiviskis_ru)|Ursnif Variant CnC|ipv4 hash:ip|517 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dagestanskiiviskis.ru_watch_ip.lst)
[esentire_differentia_ru](http://iplists.firehol.org/?ipset=esentire_differentia_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|12 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/differentia.ru_watch_ip.lst)
[esentire_disorderstatus_ru](http://iplists.firehol.org/?ipset=esentire_disorderstatus_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/disorderstatus.ru_watch_ip.lst)
[esentire_dorttlokolrt_com](http://iplists.firehol.org/?ipset=esentire_dorttlokolrt_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|23664 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/dorttlokolrt.com_watch_ip.lst)
[esentire_downs1_ru](http://iplists.firehol.org/?ipset=esentire_downs1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|7231 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/downs1.ru_watch_ip.lst)
[esentire_ebankoalalusys_ru](http://iplists.firehol.org/?ipset=esentire_ebankoalalusys_ru)|Ursnif Variant CnC|ipv4 hash:ip|898 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/ebankoalalusys.ru_watch_ip.lst)
[esentire_emptyarray_ru](http://iplists.firehol.org/?ipset=esentire_emptyarray_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|20139 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/emptyarray.ru_watch_ip.lst)
[esentire_fioartd_com](http://iplists.firehol.org/?ipset=esentire_fioartd_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|601 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/fioartd.com_watch_ip.lst)
[esentire_getarohirodrons_com](http://iplists.firehol.org/?ipset=esentire_getarohirodrons_com)|Andromeda/Gamarue Checkin|ipv4 hash:ip|2156 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/getarohirodrons.com_watch_ip.lst)
[esentire_hasanhashsde_ru](http://iplists.firehol.org/?ipset=esentire_hasanhashsde_ru)|Ursnif Variant CnC|ipv4 hash:ip|1184 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/hasanhashsde.ru_watch_ip.lst)
[esentire_inleet_ru](http://iplists.firehol.org/?ipset=esentire_inleet_ru)|Ursnif Variant CnC|ipv4 hash:ip|4219 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/inleet.ru_watch_ip.lst)
[esentire_islamislamdi_ru](http://iplists.firehol.org/?ipset=esentire_islamislamdi_ru)|Ursnif Variant CnC|ipv4 hash:ip|673 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/islamislamdi.ru_watch_ip.lst)
[esentire_krnqlwlplttc_com](http://iplists.firehol.org/?ipset=esentire_krnqlwlplttc_com)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/krnqlwlplttc.com_watch_ip.lst)
[esentire_maddox1_ru](http://iplists.firehol.org/?ipset=esentire_maddox1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|11345 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/maddox1.ru_watch_ip.lst)
[esentire_manning1_ru](http://iplists.firehol.org/?ipset=esentire_manning1_ru)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|6824 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/manning1.ru_watch_ip.lst)
[esentire_misteryherson_ru](http://iplists.firehol.org/?ipset=esentire_misteryherson_ru)|Ursnif Variant CnC|ipv4 hash:ip|176 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/misteryherson.ru_watch_ip.lst)
[esentire_mysebstarion_ru](http://iplists.firehol.org/?ipset=esentire_mysebstarion_ru)|Ursnif Variant CnC|ipv4 hash:ip|1058 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/mysebstarion.ru_watch_ip.lst)
[esentire_smartfoodsglutenfree_kz](http://iplists.firehol.org/?ipset=esentire_smartfoodsglutenfree_kz)|Malicious Botnet Serving Various Malware Families|ipv4 hash:ip|2674 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/smartfoodsglutenfree.kz_watch_ip.lst)
[esentire_venerologvasan93_ru](http://iplists.firehol.org/?ipset=esentire_venerologvasan93_ru)|Ursnif Variant CnC|ipv4 hash:ip|1263 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/venerologvasan93.ru_watch_ip.lst)
[esentire_volaya_ru](http://iplists.firehol.org/?ipset=esentire_volaya_ru)|Win32/PSW.Papras.CK CnC|ipv4 hash:ip|5080 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/eSentire/malfeed/master/volaya.ru_watch_ip.lst)
[et_block](http://iplists.firehol.org/?ipset=et_block)|[EmergingThreats.net](http://www.emergingthreats.net/) default blacklist (at the time of writing includes spamhaus DROP, dshield and abuse.ch trackers, which are available separately too - prefer to use the direct ipsets instead of this, they seem to lag a bit in updates)|ipv4 hash:net|1672 subnets, 25281118 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt)
[et_botcc](http://iplists.firehol.org/?ipset=et_botcc)|[EmergingThreats.net Command and Control IPs](http://doc.emergingthreats.net/bin/view/Main/BotCC) These IPs are updates every 24 hours and should be considered VERY highly reliable indications that a host is communicating with a known and active Bot or Malware command and control server - (although they say this includes abuse.ch trackers, it does not - check its overlaps)|ipv4 hash:ip|571 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-CC.rules)
[et_compromised](http://iplists.firehol.org/?ipset=et_compromised)|[EmergingThreats.net compromised hosts](http://doc.emergingthreats.net/bin/view/Main/CompromisedHost)|ipv4 hash:ip|1410 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/compromised-ips.txt)
[et_dshield](http://iplists.firehol.org/?ipset=et_dshield)|[EmergingThreats.net](http://www.emergingthreats.net/) dshield blocklist|ipv4 hash:net|19 subnets, 5120 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DSHIELD.rules)
[et_spamhaus](http://iplists.firehol.org/?ipset=et_spamhaus)|[EmergingThreats.net](http://www.emergingthreats.net/) spamhaus blocklist|ipv4 hash:net|796 subnets, 25275136 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/fwrules/emerging-PIX-DROP.rules)
[et_tor](http://iplists.firehol.org/?ipset=et_tor)|[EmergingThreats.net TOR list](http://doc.emergingthreats.net/bin/view/Main/TorRules) of TOR network IPs|ipv4 hash:ip|6880 unique IPs|updated every 12 hours from [this link](http://rules.emergingthreats.net/blockrules/emerging-tor.rules)
[feodo](http://iplists.firehol.org/?ipset=feodo)|[Abuse.ch Feodo tracker](https://feodotracker.abuse.ch) trojan includes IPs which are being used by Feodo (also known as Cridex or Bugat) which commits ebanking fraud|ipv4 hash:ip|715 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=ipblocklist)
[feodo_badips](http://iplists.firehol.org/?ipset=feodo_badips)|[Abuse.ch Feodo tracker BadIPs](https://feodotracker.abuse.ch) The Feodo Tracker Feodo BadIP Blocklist only contains IP addresses (IPv4) used as C&C communication channel by the Feodo Trojan version B. These IP addresses are usually servers rented by cybercriminals directly and used for the exclusive purpose of hosting a Feodo C&C server. Hence you should expect no legit traffic to those IP addresses. The site highly recommends you to block/drop any traffic towards any Feodo C&C using the Feodo BadIP Blocklist. Please consider that this blocklist only contains IP addresses used by version B of the Feodo Trojan. C&C communication channels used by version A, version C and version D are not covered by this blocklist.|ipv4 hash:ip|0 unique IPs|updated every 30 mins from [this link](https://feodotracker.abuse.ch/blocklist/?download=badips)
[firehol_abusers_1d](http://iplists.firehol.org/?ipset=firehol_abusers_1d)|An ipset made from blocklists that track abusers in the last 24 hours. (includes: botscout_1d cleantalk_new_1d cleantalk_updated_1d php_commenters_1d php_dictionary_1d php_harvesters_1d php_spammers_1d stopforumspam_1d)|ipv4 hash:net|12652 subnets, 13184 unique IPs|
[firehol_abusers_30d](http://iplists.firehol.org/?ipset=firehol_abusers_30d)|An ipset made from blocklists that track abusers in the last 30 days. (includes: cleantalk_new_30d cleantalk_updated_30d php_commenters_30d php_dictionary_30d php_harvesters_30d php_spammers_30d stopforumspam sblam)|ipv4 hash:net|199646 subnets, 212495 unique IPs|
[firehol_anonymous](http://iplists.firehol.org/?ipset=firehol_anonymous)|An ipset that includes all the anonymizing IPs of the world. (includes: anonymous bm_tor dm_tor firehol_proxies tor_exits)|ipv4 hash:net|39293 subnets, 46343 unique IPs|
[firehol_level1](http://iplists.firehol.org/?ipset=firehol_level1)|A firewall blacklist composed from IP lists, providing maximum protection with minimum false positives. Suitable for basic protection on all internet facing servers, routers and firewalls. (includes: bambenek_c2 dshield feodo fullbogons palevo spamhaus_drop spamhaus_edrop sslbl zeus_badips ransomware_rw)|ipv4 hash:net|17226 subnets, 662542738 unique IPs|
[firehol_level2](http://iplists.firehol.org/?ipset=firehol_level2)|An ipset made from blocklists that track attacks, during about the last 48 hours. (includes: blocklist_de dshield_1d greensnow openbl_1d virbl)|ipv4 hash:net|15942 subnets, 33026 unique IPs|
[firehol_level3](http://iplists.firehol.org/?ipset=firehol_level3)|An ipset made from blocklists that track attacks, spyware, viruses. It includes IPs than have been reported or detected in the last 30 days. (includes: bruteforceblocker ciarmy dragon_http dragon_sshpauth dragon_vncprobe dshield_30d dshield_top_1000 malc0de maxmind_proxy_fraud myip openbl_30d shunlist snort_ipfilter sslbl_aggressive talosintel_ipfilter zeus vxvault)|ipv4 hash:net|23835 subnets, 128179 unique IPs|
[firehol_level4](http://iplists.firehol.org/?ipset=firehol_level4)|An ipset made from blocklists that track attacks, but may include a large number of false positives. (includes: cleanmx_viruses blocklist_net_ua botscout_30d cruzit_web_attacks cybercrime haley_ssh iblocklist_hijacked iblocklist_spyware iblocklist_webexploit ipblacklistcloud_top iw_wormlist malwaredomainlist)|ipv4 hash:net|75160 subnets, 9570934 unique IPs|
[firehol_proxies](http://iplists.firehol.org/?ipset=firehol_proxies)|An ipset made from all sources that track open proxies. It includes IPs reported or detected in the last 30 days. (includes: iblocklist_proxies maxmind_proxy_fraud proxylists_30d proxyrss_30d proxz_30d proxyspy_30d ri_connect_proxies_30d ri_web_proxies_30d socks_proxy_30d sslproxies_30d xroxy_30d)|ipv4 hash:net|32533 subnets, 33351 unique IPs|
[firehol_webclient](http://iplists.firehol.org/?ipset=firehol_webclient)|An IP blacklist made from blocklists that track IPs that a web client should never talk to. This list is to be used on top of firehol_level1. (includes: ransomware_online sslbl_aggressive cybercrime atlas_phishing_2d atlas_fastflux_2d dyndns_ponmocup maxmind_proxy_fraud)|ipv4 hash:net|11946 subnets, 12026 unique IPs|
[firehol_webserver](http://iplists.firehol.org/?ipset=firehol_webserver)|A web server IP blacklist made from blocklists that track IPs that should never be your web users. (This list includes IPs that are servers hosting malware, bots, etc or users having a long criminal history. This list is to be used on top of firehol_level1, firehol_level2, firehol_level3 and possibly firehol_proxies or firehol_anonymous). (includes: hphosts_emd hphosts_exp hphosts_fsa hphosts_hjk hphosts_psh hphosts_wrz maxmind_proxy_fraud myip pushing_inertia_blocklist stopforumspam_toxic)|ipv4 hash:net|50631 subnets, 50960199 unique IPs|
[fullbogons](http://iplists.firehol.org/?ipset=fullbogons)|[Team-Cymru.org](http://www.team-cymru.org) IP space that has been allocated to an RIR, but not assigned by that RIR to an actual ISP or other end-user|ipv4 hash:net|3760 subnets, 636477992 unique IPs|updated every 1 day from [this link](http://www.team-cymru.org/Services/Bogons/fullbogons-ipv4.txt)
[geolite2_country](https://github.com/firehol/blocklist-ipsets/tree/master/geolite2_country)|[MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/) databases are free IP geolocation databases comparable to, but less accurate than, MaxMind’s GeoIP2 databases. They include IPs per country, IPs per continent, IPs used by anonymous services (VPNs, Proxies, etc) and Satellite Providers.|ipv4 hash:net|All the world|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[gofferje_sip](http://iplists.firehol.org/?ipset=gofferje_sip)|[Stefan Gofferje](http://stefan.gofferje.net/it-stuff/sipfraud/sip-attacker-blacklist) A personal blacklist of networks and IPs of SIP attackers. To end up here, the IP or network must have been the origin of considerable and repeated attacks on my PBX and additionally, the ISP didn't react to any complaint. Note from the author: I don't give any guarantees of accuracy, completeness or even usability! USE AT YOUR OWN RISK! Also note that I block complete countries, namely China, Korea and Palestine with blocklists from ipdeny.com, so some attackers will never even get the chance to get noticed by me to be put on this blacklist. I also don't accept any liabilities related to this blocklist. If you're an ISP and don't like your IPs being listed here, too bad! You should have done something about your customers' behavior and reacted to my complaints. This blocklist is nothing but an expression of my personal opinion and exercising my right of free speech.|ipv4 hash:net|1474 subnets, 1095348 unique IPs|updated every 6 hours from [this link](http://stefan.gofferje.net/sipblocklist.zone)
[gpf_comics](http://iplists.firehol.org/?ipset=gpf_comics)|The GPF DNS Block List is a list of IP addresses on the Internet that have attacked the [GPF Comics](http://www.gpf-comics.com/) family of Web sites. IPs on this block list have been banned from accessing all of our servers because they were caught in the act of spamming, attempting to exploit our scripts, scanning for vulnerabilities, or consuming resources to the detriment of our human visitors.|ipv4 hash:ip|3348 unique IPs|updated every 1 day from [this link](https://www.gpf-comics.com/dnsbl/export.php)
[graphiclineweb](http://iplists.firehol.org/?ipset=graphiclineweb)|[GraphiclineWeb](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/) The IP’s, Hosts and Domains listed in this table are banned universally from accessing websites controlled by the maintainer. Some form of bad activity has been seen from the addresses listed. Bad activity includes: unwanted spiders, rule breakers, comment spammers, trackback spammers, spambots, hacker bots, registration bots and other scripting attackers, harvesters, nuisance spiders, spy bots and organisations spying on websites for commercial reasons.|ipv4 hash:net|2579 subnets, 330527 unique IPs|updated every 1 day from [this link](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/)
[graphiclineweb](http://iplists.firehol.org/?ipset=graphiclineweb)|[GraphiclineWeb](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/) The IP’s, Hosts and Domains listed in this table are banned universally from accessing websites controlled by the maintainer. Some form of bad activity has been seen from the addresses listed. Bad activity includes: unwanted spiders, rule breakers, comment spammers, trackback spammers, spambots, hacker bots, registration bots and other scripting attackers, harvesters, nuisance spiders, spy bots and organisations spying on websites for commercial reasons.|ipv4 hash:net|2579 subnets, 330527 unique IPs|updated every 1 day from [this link](https://graphiclineweb.wordpress.com/tech-notes/ip-blacklist/)
[greensnow](http://iplists.firehol.org/?ipset=greensnow)|[GreenSnow](https://greensnow.co/) is a team harvesting a large number of IPs from different computers located around the world. GreenSnow is comparable with SpamHaus.org for attacks of any kind except for spam. Their list is updated automatically and you can withdraw at any time your IP address if it has been listed. Attacks / bruteforce that are monitored are: Scan Port, FTP, POP3, mod_security, IMAP, SMTP, SSH, cPanel, etc.|ipv4 hash:ip|1297 unique IPs|updated every 30 mins from [this link](http://blocklist.greensnow.co/greensnow.txt)
[haley_ssh](http://iplists.firehol.org/?ipset=haley_ssh)|[Charles Haley](http://charles.the-haleys.org) IPs launching SSH dictionary attacks.|ipv4 hash:ip|22550 unique IPs|updated every 4 hours from [this link](http://charles.the-haleys.org/ssh_dico_attack_hdeny_format.php/hostsdeny.txt)
[hphosts_ats](http://iplists.firehol.org/?ipset=hphosts_ats)|[hpHosts](http://hosts-file.net/?s=Download) ad/tracking servers listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|15711 unique IPs|updated every 1 day from [this link](http://hosts-file.net/ad_servers.txt)
[hphosts_emd](http://iplists.firehol.org/?ipset=hphosts_emd)|[hpHosts](http://hosts-file.net/?s=Download) malware sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|22077 unique IPs|updated every 1 day from [this link](http://hosts-file.net/emd.txt)
[hphosts_exp](http://iplists.firehol.org/?ipset=hphosts_exp)|[hpHosts](http://hosts-file.net/?s=Download) exploit sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|303 unique IPs|updated every 1 day from [this link](http://hosts-file.net/exp.txt)
[hphosts_fsa](http://iplists.firehol.org/?ipset=hphosts_fsa)|[hpHosts](http://hosts-file.net/?s=Download) fraud sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|26275 unique IPs|updated every 1 day from [this link](http://hosts-file.net/fsa.txt)
[hphosts_grm](http://iplists.firehol.org/?ipset=hphosts_grm)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in spam (that do not otherwise meet any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|297 unique IPs|updated every 1 day from [this link](http://hosts-file.net/grm.txt)
[hphosts_hfs](http://iplists.firehol.org/?ipset=hphosts_hfs)|[hpHosts](http://hosts-file.net/?s=Download) sites spamming the hpHosts forums (and not meeting any other classification criteria) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|268 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hfs.txt)
[hphosts_hjk](http://iplists.firehol.org/?ipset=hphosts_hjk)|[hpHosts](http://hosts-file.net/?s=Download) hijack sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|57 unique IPs|updated every 1 day from [this link](http://hosts-file.net/hjk.txt)
[hphosts_mmt](http://iplists.firehol.org/?ipset=hphosts_mmt)|[hpHosts](http://hosts-file.net/?s=Download) sites involved in misleading marketing (e.g. fake Flash update adverts) listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1177 unique IPs|updated every 1 day from [this link](http://hosts-file.net/mmt.txt)
[hphosts_pha](http://iplists.firehol.org/?ipset=hphosts_pha)|[hpHosts](http://hosts-file.net/?s=Download) illegal pharmacy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|1753 unique IPs|updated every 1 day from [this link](http://hosts-file.net/pha.txt)
[hphosts_psh](http://iplists.firehol.org/?ipset=hphosts_psh)|[hpHosts](http://hosts-file.net/?s=Download) phishing sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|18509 unique IPs|updated every 1 day from [this link](http://hosts-file.net/psh.txt)
[hphosts_wrz](http://iplists.firehol.org/?ipset=hphosts_wrz)|[hpHosts](http://hosts-file.net/?s=Download) warez/piracy sites listed in the hpHosts database. The maintainer's file contains hostnames, which have been DNS resolved to IP addresses.|ipv4 hash:ip|830 unique IPs|updated every 1 day from [this link](http://hosts-file.net/wrz.txt)
[iblocklist_abuse_palevo](http://iplists.firehol.org/?ipset=iblocklist_abuse_palevo)|palevotracker.abuse.ch IP blocklist.|ipv4 hash:net|12 subnets, 12 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=erqajhwrxiuvjxqrrwfj&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_spyeye](http://iplists.firehol.org/?ipset=iblocklist_abuse_spyeye)|spyeyetracker.abuse.ch IP blocklist.|ipv4 hash:net|83 subnets, 84 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zvjxsfuvdhoxktpeiokq&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_spyeye](http://iplists.firehol.org/?ipset=iblocklist_abuse_spyeye)|spyeyetracker.abuse.ch IP blocklist.|ipv4 hash:net|83 subnets, 84 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zvjxsfuvdhoxktpeiokq&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_zeus](http://iplists.firehol.org/?ipset=iblocklist_abuse_zeus)|zeustracker.abuse.ch IP blocklist that contains IP addresses which are currently beeing tracked on the abuse.ch ZeuS Tracker.|ipv4 hash:net|209 subnets, 212 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ynkdjqsjyfmilsgbogqf&fileformat=p2p&archiveformat=gz)
[iblocklist_abuse_zeus](http://iplists.firehol.org/?ipset=iblocklist_abuse_zeus)|zeustracker.abuse.ch IP blocklist that contains IP addresses which are currently beeing tracked on the abuse.ch ZeuS Tracker.|ipv4 hash:net|209 subnets, 212 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ynkdjqsjyfmilsgbogqf&fileformat=p2p&archiveformat=gz)
[iblocklist_ads](http://iplists.firehol.org/?ipset=iblocklist_ads)|Advertising trackers and a short list of bad/intrusive porn sites.|ipv4 hash:net|3314 subnets, 888645 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=p2p&archiveformat=gz)
[iblocklist_ads](http://iplists.firehol.org/?ipset=iblocklist_ads)|Advertising trackers and a short list of bad/intrusive porn sites.|ipv4 hash:net|3314 subnets, 888645 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=dgxtneitpuvgqqcpfulq&fileformat=p2p&archiveformat=gz)
[iblocklist_badpeers](http://iplists.firehol.org/?ipset=iblocklist_badpeers)|IPs that have been reported for bad deeds in p2p.|ipv4 hash:net|48482 subnets, 1568848 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=cwworuawihqvocglcoss&fileformat=p2p&archiveformat=gz)
[iblocklist_bogons](http://iplists.firehol.org/?ipset=iblocklist_bogons)|Unallocated address space.|ipv4 hash:net|2699 subnets, 666661539 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=gihxqmhyunbxhbmgqrla&fileformat=p2p&archiveformat=gz)
[iblocklist_bogons](http://iplists.firehol.org/?ipset=iblocklist_bogons)|Unallocated address space.|ipv4 hash:net|2699 subnets, 666661539 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=gihxqmhyunbxhbmgqrla&fileformat=p2p&archiveformat=gz)
[iblocklist_ciarmy_malicious](http://iplists.firehol.org/?ipset=iblocklist_ciarmy_malicious)|ciarmy.com IP blocklist. Based on information from a network of Sentinel devices deployed around the world, they compile a list of known bad IP addresses. Sentinel devices are uniquely positioned to pick up traffic from bad guys without requiring any type of signature-based or rate-based identification. If an IP is identified in this way by a significant number of Sentinels, the IP is malicious and should be blocked.|ipv4 hash:net|10603 subnets, 10976 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=npkuuhuxcsllnhoamkvm&fileformat=p2p&archiveformat=gz)
[iblocklist_cidr_report_bogons](http://iplists.firehol.org/?ipset=iblocklist_cidr_report_bogons)|cidr-report.org IP list of Unallocated address space.|ipv4 hash:net|3839 subnets, 603473224 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=lujdnbasfaaixitgmxpp&fileformat=p2p&archiveformat=gz)
[iblocklist_cruzit_web_attacks](http://iplists.firehol.org/?ipset=iblocklist_cruzit_web_attacks)|CruzIT IP list with individual IP addresses of compromised machines scanning for vulnerabilities and DDOS attacks.|ipv4 hash:net|6201 subnets, 6253 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=czvaehmjpsnwwttrdoyl&fileformat=p2p&archiveformat=gz)
[iblocklist_dshield](http://iplists.firehol.org/?ipset=iblocklist_dshield)|known Hackers and such people.|ipv4 hash:net|20 subnets, 5120 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=xpbqleszmajjesnzddhv&fileformat=p2p&archiveformat=gz)
[iblocklist_dshield](http://iplists.firehol.org/?ipset=iblocklist_dshield)|known Hackers and such people.|ipv4 hash:net|20 subnets, 5120 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=xpbqleszmajjesnzddhv&fileformat=p2p&archiveformat=gz)
[iblocklist_edu](http://iplists.firehol.org/?ipset=iblocklist_edu)|IPs used by Educational Institutions.|ipv4 hash:net|40791 subnets, 227983648 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=imlmncgrkbnacgcwfjvh&fileformat=p2p&archiveformat=gz)
[iblocklist_exclusions](http://iplists.firehol.org/?ipset=iblocklist_exclusions)|Exclusions.|ipv4 hash:net|297 subnets, 7427 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=mtxmiireqmjzazcsoiem&fileformat=p2p&archiveformat=gz)
[iblocklist_exclusions](http://iplists.firehol.org/?ipset=iblocklist_exclusions)|Exclusions.|ipv4 hash:net|297 subnets, 7427 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=mtxmiireqmjzazcsoiem&fileformat=p2p&archiveformat=gz)
[iblocklist_fornonlancomputers](http://iplists.firehol.org/?ipset=iblocklist_fornonlancomputers)|IP blocklist for non-LAN computers.|ipv4 hash:net|4 subnets, 302055424 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=jhaoawihmfxgnvmaqffp&fileformat=p2p&archiveformat=gz)
[iblocklist_fornonlancomputers](http://iplists.firehol.org/?ipset=iblocklist_fornonlancomputers)|IP blocklist for non-LAN computers.|ipv4 hash:net|4 subnets, 302055424 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=jhaoawihmfxgnvmaqffp&fileformat=p2p&archiveformat=gz)
[iblocklist_forumspam](http://iplists.firehol.org/?ipset=iblocklist_forumspam)|Forum spam.|ipv4 hash:net|476 subnets, 615 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ficutxiwawokxlcyoeye&fileformat=p2p&archiveformat=gz)
[iblocklist_forumspam](http://iplists.firehol.org/?ipset=iblocklist_forumspam)|Forum spam.|ipv4 hash:net|476 subnets, 615 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ficutxiwawokxlcyoeye&fileformat=p2p&archiveformat=gz)
[iblocklist_hijacked](http://iplists.firehol.org/?ipset=iblocklist_hijacked)|Hijacked IP-Blocks. Contains hijacked IP-Blocks and known IP-Blocks that are used to deliver Spam. This list is a combination of lists with hijacked IP-Blocks. Hijacked IP space are IP blocks that are being used without permission by organizations that have no relation to original organization (or its legal successor) that received the IP block. In essence it's stealing of somebody else's IP resources.|ipv4 hash:net|534 subnets, 9145088 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=usrcshglbiilevmyfhse&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_multicast](http://iplists.firehol.org/?ipset=iblocklist_iana_multicast)|IANA Multicast IPs.|ipv4 hash:net|1 subnets, 268435456 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=pwqnlynprfgtjbgqoizj&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_multicast](http://iplists.firehol.org/?ipset=iblocklist_iana_multicast)|IANA Multicast IPs.|ipv4 hash:net|1 subnets, 268435456 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=pwqnlynprfgtjbgqoizj&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_private](http://iplists.firehol.org/?ipset=iblocklist_iana_private)|IANA Private IPs.|ipv4 hash:net|56 subnets, 51643638 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=cslpybexmxyuacbyuvib&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_private](http://iplists.firehol.org/?ipset=iblocklist_iana_private)|IANA Private IPs.|ipv4 hash:net|56 subnets, 51643638 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=cslpybexmxyuacbyuvib&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_reserved](http://iplists.firehol.org/?ipset=iblocklist_iana_reserved)|IANA Reserved IPs.|ipv4 hash:net|1 subnets, 536870912 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=bcoepfyewziejvcqyhqo&fileformat=p2p&archiveformat=gz)
[iblocklist_iana_reserved](http://iplists.firehol.org/?ipset=iblocklist_iana_reserved)|IANA Reserved IPs.|ipv4 hash:net|1 subnets, 536870912 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=bcoepfyewziejvcqyhqo&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_aol](http://iplists.firehol.org/?ipset=iblocklist_isp_aol)|AOL IPs.|ipv4 hash:net|16 subnets, 6627584 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=toboaiysofkflwgrttmb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_aol](http://iplists.firehol.org/?ipset=iblocklist_isp_aol)|AOL IPs.|ipv4 hash:net|16 subnets, 6627584 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=toboaiysofkflwgrttmb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_att](http://iplists.firehol.org/?ipset=iblocklist_isp_att)|AT&T IPs.|ipv4 hash:net|35 subnets, 55845128 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=grbtkzijgrowvobvessf&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_att](http://iplists.firehol.org/?ipset=iblocklist_isp_att)|AT&T IPs.|ipv4 hash:net|35 subnets, 55845128 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=grbtkzijgrowvobvessf&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_cablevision](http://iplists.firehol.org/?ipset=iblocklist_isp_cablevision)|Cablevision IPs.|ipv4 hash:net|11 subnets, 1787136 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=dwwbsmzirrykdlvpqozb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_cablevision](http://iplists.firehol.org/?ipset=iblocklist_isp_cablevision)|Cablevision IPs.|ipv4 hash:net|11 subnets, 1787136 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=dwwbsmzirrykdlvpqozb&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_charter](http://iplists.firehol.org/?ipset=iblocklist_isp_charter)|Charter IPs.|ipv4 hash:net|21 subnets, 6138112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=htnzojgossawhpkbulqw&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_charter](http://iplists.firehol.org/?ipset=iblocklist_isp_charter)|Charter IPs.|ipv4 hash:net|21 subnets, 6138112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=htnzojgossawhpkbulqw&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_comcast](http://iplists.firehol.org/?ipset=iblocklist_isp_comcast)|Comcast IPs.|ipv4 hash:net|33 subnets, 45121536 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=rsgyxvuklicibautguia&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_comcast](http://iplists.firehol.org/?ipset=iblocklist_isp_comcast)|Comcast IPs.|ipv4 hash:net|33 subnets, 45121536 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=rsgyxvuklicibautguia&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_embarq](http://iplists.firehol.org/?ipset=iblocklist_isp_embarq)|Embarq IPs.|ipv4 hash:net|14 subnets, 2703360 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=twdblifaysaqtypevvdp&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_embarq](http://iplists.firehol.org/?ipset=iblocklist_isp_embarq)|Embarq IPs.|ipv4 hash:net|14 subnets, 2703360 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=twdblifaysaqtypevvdp&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_qwest](http://iplists.firehol.org/?ipset=iblocklist_isp_qwest)|Qwest IPs.|ipv4 hash:net|73 subnets, 15777552 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=jezlifrpefawuoawnfez&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_qwest](http://iplists.firehol.org/?ipset=iblocklist_isp_qwest)|Qwest IPs.|ipv4 hash:net|73 subnets, 15777552 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=jezlifrpefawuoawnfez&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_sprint](http://iplists.firehol.org/?ipset=iblocklist_isp_sprint)|Sprint IPs.|ipv4 hash:net|63 subnets, 6310530 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=hngtqrhhuadlceqxbrob&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_sprint](http://iplists.firehol.org/?ipset=iblocklist_isp_sprint)|Sprint IPs.|ipv4 hash:net|63 subnets, 6310530 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=hngtqrhhuadlceqxbrob&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_suddenlink](http://iplists.firehol.org/?ipset=iblocklist_isp_suddenlink)|Suddenlink IPs.|ipv4 hash:net|3 subnets, 458752 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=psaoblrwylfrdsspfuiq&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_suddenlink](http://iplists.firehol.org/?ipset=iblocklist_isp_suddenlink)|Suddenlink IPs.|ipv4 hash:net|3 subnets, 458752 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=psaoblrwylfrdsspfuiq&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_twc](http://iplists.firehol.org/?ipset=iblocklist_isp_twc)|Time Warner Cable IPs.|ipv4 hash:net|56 subnets, 15015936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aqtsnttnqmcucwrjmohd&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_twc](http://iplists.firehol.org/?ipset=iblocklist_isp_twc)|Time Warner Cable IPs.|ipv4 hash:net|56 subnets, 15015936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aqtsnttnqmcucwrjmohd&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_verizon](http://iplists.firehol.org/?ipset=iblocklist_isp_verizon)|Verizon IPs.|ipv4 hash:net|22 subnets, 18087936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cdmdbprvldivlqsaqjol&fileformat=p2p&archiveformat=gz)
[iblocklist_isp_verizon](http://iplists.firehol.org/?ipset=iblocklist_isp_verizon)|Verizon IPs.|ipv4 hash:net|22 subnets, 18087936 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cdmdbprvldivlqsaqjol&fileformat=p2p&archiveformat=gz)
[iblocklist_level1](http://iplists.firehol.org/?ipset=iblocklist_level1)|Level 1 (for use in p2p): Companies or organizations who are clearly involved with trying to stop filesharing (e.g. Baytsp, MediaDefender, Mediasentry a.o.). Companies which anti-p2p activity has been seen from. Companies that produce or have a strong financial interest in copyrighted material (e.g. music, movie, software industries a.o.). Government ranges or companies that have a strong financial interest in doing work for governments. Legal industry ranges. IPs or ranges of ISPs from which anti-p2p activity has been observed. Basically this list will block all kinds of internet connections that most people would rather not have during their internet travels.|ipv4 hash:net|218282 subnets, 762690984 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ydxerpxkpcfqjaybcssw&fileformat=p2p&archiveformat=gz)
[iblocklist_level2](http://iplists.firehol.org/?ipset=iblocklist_level2)|Level 2 (for use in p2p). General corporate ranges. Ranges used by labs or researchers. Proxies.|ipv4 hash:net|72949 subnets, 346613099 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=gyisgnzbhppbvsphucsw&fileformat=p2p&archiveformat=gz)
[iblocklist_level2](http://iplists.firehol.org/?ipset=iblocklist_level2)|Level 2 (for use in p2p). General corporate ranges. Ranges used by labs or researchers. Proxies.|ipv4 hash:net|72950 subnets, 348710251 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=gyisgnzbhppbvsphucsw&fileformat=p2p&archiveformat=gz)
[iblocklist_level3](http://iplists.firehol.org/?ipset=iblocklist_level3)|Level 3 (for use in p2p). Many portal-type websites. ISP ranges that may be dodgy for some reason. Ranges that belong to an individual, but which have not been determined to be used by a particular company. Ranges for things that are unusual in some way. The L3 list is aka the paranoid list.|ipv4 hash:net|17810 subnets, 139023007 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=uwnukjqktoggdknzrhgh&fileformat=p2p&archiveformat=gz)
[iblocklist_malc0de](http://iplists.firehol.org/?ipset=iblocklist_malc0de)|malc0de.com IP blocklist. Addresses that have been indentified distributing malware during the past 30 days.|ipv4 hash:net|283 subnets, 288 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=pbqcylkejciyhmwttify&fileformat=p2p&archiveformat=gz)
[iblocklist_onion_router](http://iplists.firehol.org/?ipset=iblocklist_onion_router)|The Onion Router IP addresses.|ipv4 hash:net|6780 subnets, 6875 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=togdoptykrlolpddwbvz&fileformat=p2p&archiveformat=gz)
[iblocklist_org_activision](http://iplists.firehol.org/?ipset=iblocklist_org_activision)|Activision IPs.|ipv4 hash:net|46 subnets, 4890 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=gfnxlhxsijzrcuxwzebb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_activision](http://iplists.firehol.org/?ipset=iblocklist_org_activision)|Activision IPs.|ipv4 hash:net|46 subnets, 4890 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=gfnxlhxsijzrcuxwzebb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_apple](http://iplists.firehol.org/?ipset=iblocklist_org_apple)|Apple IPs.|ipv4 hash:net|1 subnets, 16777216 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aphcqvpxuqgrkgufjruj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_apple](http://iplists.firehol.org/?ipset=iblocklist_org_apple)|Apple IPs.|ipv4 hash:net|1 subnets, 16777216 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aphcqvpxuqgrkgufjruj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_blizzard](http://iplists.firehol.org/?ipset=iblocklist_org_blizzard)|Blizzard IPs.|ipv4 hash:net|8 subnets, 16795139 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ercbntshuthyykfkmhxc&fileformat=p2p&archiveformat=gz)
[iblocklist_org_blizzard](http://iplists.firehol.org/?ipset=iblocklist_org_blizzard)|Blizzard IPs.|ipv4 hash:net|8 subnets, 16795139 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ercbntshuthyykfkmhxc&fileformat=p2p&archiveformat=gz)
[iblocklist_org_crowd_control](http://iplists.firehol.org/?ipset=iblocklist_org_crowd_control)|Crowd Control Productions IPs.|ipv4 hash:net|2 subnets, 768 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=eveiyhgmusglurfmjyag&fileformat=p2p&archiveformat=gz)
[iblocklist_org_crowd_control](http://iplists.firehol.org/?ipset=iblocklist_org_crowd_control)|Crowd Control Productions IPs.|ipv4 hash:net|2 subnets, 768 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=eveiyhgmusglurfmjyag&fileformat=p2p&archiveformat=gz)
[iblocklist_org_electronic_arts](http://iplists.firehol.org/?ipset=iblocklist_org_electronic_arts)|Electronic Arts IPs.|ipv4 hash:net|42 subnets, 69720 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ejqebpcdmffinaetsvxj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_electronic_arts](http://iplists.firehol.org/?ipset=iblocklist_org_electronic_arts)|Electronic Arts IPs.|ipv4 hash:net|42 subnets, 69720 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ejqebpcdmffinaetsvxj&fileformat=p2p&archiveformat=gz)
[iblocklist_org_joost](http://iplists.firehol.org/?ipset=iblocklist_org_joost)|Joost IPs.|ipv4 hash:net|4 subnets, 16779456 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=alxugfmeszbhpxqfdits&fileformat=p2p&archiveformat=gz)
[iblocklist_org_joost](http://iplists.firehol.org/?ipset=iblocklist_org_joost)|Joost IPs.|ipv4 hash:net|4 subnets, 16779456 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=alxugfmeszbhpxqfdits&fileformat=p2p&archiveformat=gz)
[iblocklist_org_linden_lab](http://iplists.firehol.org/?ipset=iblocklist_org_linden_lab)|Linden Lab IPs.|ipv4 hash:net|11 subnets, 23600 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=qnjdimxnaupjmpqolxcv&fileformat=p2p&archiveformat=gz)
[iblocklist_org_linden_lab](http://iplists.firehol.org/?ipset=iblocklist_org_linden_lab)|Linden Lab IPs.|ipv4 hash:net|11 subnets, 23600 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=qnjdimxnaupjmpqolxcv&fileformat=p2p&archiveformat=gz)
[iblocklist_org_logmein](http://iplists.firehol.org/?ipset=iblocklist_org_logmein)|LogMeIn IPs.|ipv4 hash:net|13 subnets, 16781568 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tgbankumtwtrzllndbmb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_logmein](http://iplists.firehol.org/?ipset=iblocklist_org_logmein)|LogMeIn IPs.|ipv4 hash:net|13 subnets, 16781568 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tgbankumtwtrzllndbmb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_microsoft](http://iplists.firehol.org/?ipset=iblocklist_org_microsoft)|Microsoft IP ranges.|ipv4 hash:net|734 subnets, 1848447 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=xshktygkujudfnjfioro&fileformat=p2p&archiveformat=gz)
[iblocklist_org_microsoft](http://iplists.firehol.org/?ipset=iblocklist_org_microsoft)|Microsoft IP ranges.|ipv4 hash:net|734 subnets, 1848447 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=xshktygkujudfnjfioro&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ncsoft](http://iplists.firehol.org/?ipset=iblocklist_org_ncsoft)|NCsoft IPs.|ipv4 hash:net|5 subnets, 12560 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=mwjuwmebrnzyyxpbezxu&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ncsoft](http://iplists.firehol.org/?ipset=iblocklist_org_ncsoft)|NCsoft IPs.|ipv4 hash:net|5 subnets, 12560 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=mwjuwmebrnzyyxpbezxu&fileformat=p2p&archiveformat=gz)
[iblocklist_org_nintendo](http://iplists.firehol.org/?ipset=iblocklist_org_nintendo)|Nintendo IPs.|ipv4 hash:net|40 subnets, 3907 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=pevkykuhgaegqyayzbnr&fileformat=p2p&archiveformat=gz)
[iblocklist_org_nintendo](http://iplists.firehol.org/?ipset=iblocklist_org_nintendo)|Nintendo IPs.|ipv4 hash:net|40 subnets, 3907 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=pevkykuhgaegqyayzbnr&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pandora](http://iplists.firehol.org/?ipset=iblocklist_org_pandora)|Pandora IPs.|ipv4 hash:net|1 subnets, 2048 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aevzidimyvwybzkletsg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pandora](http://iplists.firehol.org/?ipset=iblocklist_org_pandora)|Pandora IPs.|ipv4 hash:net|1 subnets, 2048 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=aevzidimyvwybzkletsg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pirate_bay](http://iplists.firehol.org/?ipset=iblocklist_org_pirate_bay)|The Pirate Bay IPs.|ipv4 hash:net|5 subnets, 323 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=nzldzlpkgrcncdomnttb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_pirate_bay](http://iplists.firehol.org/?ipset=iblocklist_org_pirate_bay)|The Pirate Bay IPs.|ipv4 hash:net|5 subnets, 323 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=nzldzlpkgrcncdomnttb&fileformat=p2p&archiveformat=gz)
[iblocklist_org_punkbuster](http://iplists.firehol.org/?ipset=iblocklist_org_punkbuster)|Punkbuster IPs.|ipv4 hash:net|1 subnets, 1 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=zvwwndvzulqcltsicwdg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_punkbuster](http://iplists.firehol.org/?ipset=iblocklist_org_punkbuster)|Punkbuster IPs.|ipv4 hash:net|1 subnets, 1 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=zvwwndvzulqcltsicwdg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_riot_games](http://iplists.firehol.org/?ipset=iblocklist_org_riot_games)|Riot Games IPs.|ipv4 hash:net|6 subnets, 1792 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=sdlvfabdjvrdttfjotcy&fileformat=p2p&archiveformat=gz)
[iblocklist_org_riot_games](http://iplists.firehol.org/?ipset=iblocklist_org_riot_games)|Riot Games IPs.|ipv4 hash:net|6 subnets, 1792 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=sdlvfabdjvrdttfjotcy&fileformat=p2p&archiveformat=gz)
[iblocklist_org_sony_online](http://iplists.firehol.org/?ipset=iblocklist_org_sony_online)|Sony Online Entertainment IPs.|ipv4 hash:net|7 subnets, 24616 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tukpvrvlubsputmkmiwg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_sony_online](http://iplists.firehol.org/?ipset=iblocklist_org_sony_online)|Sony Online Entertainment IPs.|ipv4 hash:net|7 subnets, 24616 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=tukpvrvlubsputmkmiwg&fileformat=p2p&archiveformat=gz)
[iblocklist_org_square_enix](http://iplists.firehol.org/?ipset=iblocklist_org_square_enix)|Square Enix IPs.|ipv4 hash:net|2 subnets, 4112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=odyaqontcydnodrlyina&fileformat=p2p&archiveformat=gz)
[iblocklist_org_square_enix](http://iplists.firehol.org/?ipset=iblocklist_org_square_enix)|Square Enix IPs.|ipv4 hash:net|2 subnets, 4112 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=odyaqontcydnodrlyina&fileformat=p2p&archiveformat=gz)
[iblocklist_org_steam](http://iplists.firehol.org/?ipset=iblocklist_org_steam)|Steam IPs.|ipv4 hash:net|51 subnets, 596440 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cnxkgiklecdaihzukrud&fileformat=p2p&archiveformat=gz)
[iblocklist_org_steam](http://iplists.firehol.org/?ipset=iblocklist_org_steam)|Steam IPs.|ipv4 hash:net|51 subnets, 596440 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=cnxkgiklecdaihzukrud&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ubisoft](http://iplists.firehol.org/?ipset=iblocklist_org_ubisoft)|Ubisoft IPs.|ipv4 hash:net|9 subnets, 5304 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=etmcrglomupyxtaebzht&fileformat=p2p&archiveformat=gz)
[iblocklist_org_ubisoft](http://iplists.firehol.org/?ipset=iblocklist_org_ubisoft)|Ubisoft IPs.|ipv4 hash:net|9 subnets, 5304 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=etmcrglomupyxtaebzht&fileformat=p2p&archiveformat=gz)
[iblocklist_org_xfire](http://iplists.firehol.org/?ipset=iblocklist_org_xfire)|XFire IPs.|ipv4 hash:net|3 subnets, 3328 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ppqqnyihmcrryraaqsjo&fileformat=p2p&archiveformat=gz)
[iblocklist_org_xfire](http://iplists.firehol.org/?ipset=iblocklist_org_xfire)|XFire IPs.|ipv4 hash:net|3 subnets, 3328 unique IPs|updated every 1 day from [this link](http://list.iblocklist.com/?list=ppqqnyihmcrryraaqsjo&fileformat=p2p&archiveformat=gz)
[iblocklist_pedophiles](http://iplists.firehol.org/?ipset=iblocklist_pedophiles)|IP ranges of people who we have found to be sharing child pornography in the p2p community.|ipv4 hash:net|27395 subnets, 870983 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=dufcxgnbjsdwmwctgfuj&fileformat=p2p&archiveformat=gz)
[iblocklist_proxies](http://iplists.firehol.org/?ipset=iblocklist_proxies)|Open Proxies IPs list (without TOR)|ipv4 hash:ip|673 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=xoebmbyexwuiogmbyprb&fileformat=p2p&archiveformat=gz)
[iblocklist_rangetest](http://iplists.firehol.org/?ipset=iblocklist_rangetest)|Suspicious IPs that are under investigation.|ipv4 hash:net|515 subnets, 4346058 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=plkehquoahljmyxjixpu&fileformat=p2p&archiveformat=gz)
[iblocklist_rangetest](http://iplists.firehol.org/?ipset=iblocklist_rangetest)|Suspicious IPs that are under investigation.|ipv4 hash:net|515 subnets, 4346058 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=plkehquoahljmyxjixpu&fileformat=p2p&archiveformat=gz)
[iblocklist_spamhaus_drop](http://iplists.firehol.org/?ipset=iblocklist_spamhaus_drop)|Spamhaus.org DROP (Don't Route Or Peer) list.|ipv4 hash:net|789 subnets, 25257216 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zbdlwrqkabxbcppvrnos&fileformat=p2p&archiveformat=gz)
[iblocklist_spider](http://iplists.firehol.org/?ipset=iblocklist_spider)|IP list intended to be used by webmasters to block hostile spiders from their web sites.|ipv4 hash:net|734 subnets, 860168 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=mcvxsnihddgutbjfbghy&fileformat=p2p&archiveformat=gz)
[iblocklist_spider](http://iplists.firehol.org/?ipset=iblocklist_spider)|IP list intended to be used by webmasters to block hostile spiders from their web sites.|ipv4 hash:net|734 subnets, 860168 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=mcvxsnihddgutbjfbghy&fileformat=p2p&archiveformat=gz)
[iblocklist_spyware](http://iplists.firehol.org/?ipset=iblocklist_spyware)|Known malicious SPYWARE and ADWARE IP Address ranges. It is compiled from various sources, including other available spyware blacklists, HOSTS files, from research found at many of the top anti-spyware forums, logs of spyware victims, etc.|ipv4 hash:net|3297 subnets, 339021 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=llvtlsjyoyiczbkjsxpf&fileformat=p2p&archiveformat=gz)
[iblocklist_spyware](http://iplists.firehol.org/?ipset=iblocklist_spyware)|Known malicious SPYWARE and ADWARE IP Address ranges. It is compiled from various sources, including other available spyware blacklists, HOSTS files, from research found at many of the top anti-spyware forums, logs of spyware victims, etc.|ipv4 hash:net|3297 subnets, 339021 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=llvtlsjyoyiczbkjsxpf&fileformat=p2p&archiveformat=gz)
[iblocklist_webexploit](http://iplists.firehol.org/?ipset=iblocklist_webexploit)|Web server hack and exploit attempts. IP addresses related to current web server hack and exploit attempts that have been logged or can be found in and cross referenced with other related IP databases. Malicious and other non search engine bots will also be listed here, along with anything found that can have a negative impact on a website or webserver such as proxies being used for negative SEO hijacks, unauthorised site mirroring, harvesting, scraping, snooping and data mining / spy bot / security & copyright enforcement companies that target and continuosly scan webservers.|ipv4 hash:ip|15422 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=ghlzqtqxnzctvvajwwag&fileformat=p2p&archiveformat=gz)
[iblocklist_yoyo_adservers](http://iplists.firehol.org/?ipset=iblocklist_yoyo_adservers)|pgl.yoyo.org ad servers|ipv4 hash:net|10706 subnets, 12186 unique IPs|updated every 12 hours from [this link](http://list.iblocklist.com/?list=zhogegszwduurnvsyhdf&fileformat=p2p&archiveformat=gz)
[id_continent_af](http://iplists.firehol.org/?ipset=id_continent_af)|Continent af, with countries: Burkina Faso (BF), African Regional Industrial Property Organization (AP), São Tomé and Príncipe (ST), Kenya (KE), Zambia (ZM), Mauritius (MU), Mayotte (YT), Guinea-Bissau (GW), Rwanda (RW), Malawi (MW), Republic of the Congo (CG), Ethiopia (ET), Réunion (RE), Somalia (SO), Lesotho (LS), Tanzania (TZ), Tunisia (TN), Libya (LY), Egypt (EG), Benin (BJ), Eritrea (ER), Mali (ML), Niger (NE), Central African Republic (CF), Mauritania (MR), Sierra Leone (SL), Algeria (DZ), Liberia (LR), Angola (AO), Ivory Coast (CI), Chad (TD), Senegal (SN), Comoros (KM), Equatorial Guinea (GQ), Gambia (GM), Burundi (BI), Guinea (GN), Seychelles (SC), South Sudan (SS), Gabon (GA), Botswana (BW), Togo (TG), Swaziland (SZ), Uganda (UG), Zimbabwe (ZW), Cameroon (CM), Nigeria (NG), Congo (CD), Cape Verde (CV), Sudan (SD), Madagascar (MG), Namibia (NA), Mozambique (MZ), Djibouti (DJ), Ghana (GH), South Africa (ZA), Morocco (MA), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|995 subnets, 98126080 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_continent_as](http://iplists.firehol.org/?ipset=id_continent_as)|Continent as, with countries: Qatar (QA), Sri Lanka (LK), Philippines (PH), Yemen (YE), Brunei (BN), Hong Kong (HK), Laos (LA), Japan (JP), Republic of Korea (KR), Kazakhstan (KZ), Tajikistan (TJ), Bangladesh (BD), British Indian Ocean Territory (IO), North Korea (KP), United Arab Emirates (AE), Pakistan (PK), Azerbaijan (AZ), Iraq (IQ), Turkey (TR), Afghanistan (AF), Palestine (PS), Indonesia (ID), Myanmar (Burma) (MM), Georgia (GE), Nepal (NP), Bhutan (BT), Armenia (AM), Bahrain (BH), Hashemite Kingdom of Jordan (JO), Singapore (SG), Turkmenistan (TM), Oman (OM), Mongolia (MN), Israel (IL), Syria (SY), Vietnam (VN), Taiwan (TW), Cambodia (KH), Kyrgyzstan (KG), Thailand (TH), Macao (MO), Kuwait (KW), Saudi Arabia (SA), Uzbekistan (UZ), Iran (IR), India (IN), Malaysia (MY), Lebanon (LB), Maldives (MV), China (CN), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|14844 subnets, 875594016 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_continent_eu](http://iplists.firehol.org/?ipset=id_continent_eu)|Continent eu, with countries: Slovak Republic (SK), Denmark (DK), France (FR), Republic of Lithuania (LT), European Union (EU), Liechtenstein (LI), Bosnia and Herzegovina (BA), Gibraltar (GI), Switzerland (CH), Spain (ES), Italy (IT), Hungary (HU), Vatican City (VA), San Marino (SM), Estonia (EE), Ireland (IE), Germany (DE), Jersey (JE), Latvia (LV), Poland (PL), Greece (GR), Republic of Moldova (MD), Norway (NO), Albania (AL), Guernsey (GG), Andorra (AD), Finland (FI), Romania (RO), Belarus (BY), Cyprus (CY), Slovenia (SI), Russia (RU), Croatia (HR), Serbia (RS), Portugal (PT), Netherlands (NL), Austria (AT), Monaco (MC), Belgium (BE), Czech Republic (CZ), F.Y.R.O.M. (MK), Luxembourg (LU), Isle of Man (IM), Iceland (IS), United Kingdom (GB), Ukraine (UA), Montenegro (ME), Malta (MT), Bulgaria (BG), Sweden (SE), Faroe Islands (FO), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|20435 subnets, 739900056 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_continent_na](http://iplists.firehol.org/?ipset=id_continent_na)|Continent na, with countries: Bahamas (BS), Haiti (HT), Nicaragua (NI), Dominican Republic (DO), Puerto Rico (PR), El Salvador (SV), Anguilla (AI), U.S. Virgin Islands (VI), Guadeloupe (GP), Guatemala (GT), Sint Maarten (SX), United States (US), Trinidad and Tobago (TT), Saint Vincent and the Grenadines (VC), Curaçao (CW), Aruba (AW), Cayman Islands (KY), Saint Martin (MF), Saint Lucia (LC), Dominica (DM), Saint Kitts and Nevis (KN), Costa Rica (CR), Bonaire, Sint Eustatius, and Saba (BQ), Panama (PA), Antigua and Barbuda (AG), Jamaica (JM), Grenada (GD), Greenland (GL), Belize (BZ), Canada (CA), Honduras (HN), Montserrat (MS), British Virgin Islands (VG), Saint Pierre and Miquelon (PM), Cuba (CU), Saint-Barthélemy (BL), Mexico (MX), Martinique (MQ), Turks and Caicos Islands (TC), Barbados (BB), Bermuda (BM), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|11789 subnets, 1724170240 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_continent_oc](http://iplists.firehol.org/?ipset=id_continent_oc)|Continent oc, with countries: Guam (GU), Samoa (WS), East Timor (TL), Tuvalu (TV), New Caledonia (NC), New Zealand (NZ), Nauru (NR), French Polynesia (PF), Marshall Islands (MH), Fiji (FJ), Federated States of Micronesia (FM), Norfolk Island (NF), Wallis and Futuna (WF), Papua New Guinea (PG), Palau (PW), Cook Islands (CK), Solomon Islands (SB), Tonga (TO), Vanuatu (VU), Tokelau (TK), American Samoa (AS), Northern Mariana Islands (MP), Niue (NU), Australia (AU), Kiribati (KI), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5923 subnets, 56182272 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_continent_sa](http://iplists.firehol.org/?ipset=id_continent_sa)|Continent sa, with countries: Argentina (AR), Ecuador (EC), Venezuela (VE), Suriname (SR), French Guiana (GF), Brazil (BR), Chile (CL), Guyana (GY), Paraguay (PY), Uruguay (UY), Bolivia (BO), Peru (PE), Colombia (CO), -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2825 subnets, 146824448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ae](http://iplists.firehol.org/?ipset=id_country_ae)|United Arab Emirates (AE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|130 subnets, 3925120 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_af](http://iplists.firehol.org/?ipset=id_country_af)|Afghanistan (AF) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|75 subnets, 166144 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_al](http://iplists.firehol.org/?ipset=id_country_al)|Albania (AL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|82 subnets, 345856 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_am](http://iplists.firehol.org/?ipset=id_country_am)|Armenia (AM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|101 subnets, 609568 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ao](http://iplists.firehol.org/?ipset=id_country_ao)|Angola (AO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|69 subnets, 1204224 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ap](http://iplists.firehol.org/?ipset=id_country_ap)|African Regional Industrial Property Organization (AP) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|3 subnets, 1024 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ar](http://iplists.firehol.org/?ipset=id_country_ar)|Argentina (AR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|968 subnets, 19070976 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_at](http://iplists.firehol.org/?ipset=id_country_at)|Austria (AT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1237 subnets, 11594336 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_au](http://iplists.firehol.org/?ipset=id_country_au)|Australia (AU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5011 subnets, 48521984 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_aw](http://iplists.firehol.org/?ipset=id_country_aw)|Aruba (AW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5 subnets, 70656 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_az](http://iplists.firehol.org/?ipset=id_country_az)|Azerbaijan (AZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|123 subnets, 754688 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ba](http://iplists.firehol.org/?ipset=id_country_ba)|Bosnia and Herzegovina (BA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|123 subnets, 794368 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bd](http://iplists.firehol.org/?ipset=id_country_bd)|Bangladesh (BD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|614 subnets, 1310976 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_be](http://iplists.firehol.org/?ipset=id_country_be)|Belgium (BE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|723 subnets, 28466816 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bf](http://iplists.firehol.org/?ipset=id_country_bf)|Burkina Faso (BF) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|20 subnets, 96256 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bg](http://iplists.firehol.org/?ipset=id_country_bg)|Bulgaria (BG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|748 subnets, 4433408 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bh](http://iplists.firehol.org/?ipset=id_country_bh)|Bahrain (BH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|52 subnets, 460800 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bj](http://iplists.firehol.org/?ipset=id_country_bj)|Benin (BJ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|23 subnets, 137728 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bm](http://iplists.firehol.org/?ipset=id_country_bm)|Bermuda (BM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|38 subnets, 101888 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bo](http://iplists.firehol.org/?ipset=id_country_bo)|Bolivia (BO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|77 subnets, 1142272 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_br](http://iplists.firehol.org/?ipset=id_country_br)|Brazil (BR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2145 subnets, 82924032 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bs](http://iplists.firehol.org/?ipset=id_country_bs)|Bahamas (BS) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|18 subnets, 136448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bt](http://iplists.firehol.org/?ipset=id_country_bt)|Bhutan (BT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|14 subnets, 28672 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bw](http://iplists.firehol.org/?ipset=id_country_bw)|Botswana (BW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|34 subnets, 136448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_by](http://iplists.firehol.org/?ipset=id_country_by)|Belarus (BY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|83 subnets, 1830144 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_bz](http://iplists.firehol.org/?ipset=id_country_bz)|Belize (BZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|59 subnets, 160768 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ca](http://iplists.firehol.org/?ipset=id_country_ca)|Canada (CA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|4031 subnets, 70268160 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cd](http://iplists.firehol.org/?ipset=id_country_cd)|Congo (CD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|40 subnets, 146688 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cg](http://iplists.firehol.org/?ipset=id_country_cg)|Republic of the Congo (CG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|16 subnets, 53760 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ch](http://iplists.firehol.org/?ipset=id_country_ch)|Switzerland (CH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1761 subnets, 19937976 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ci](http://iplists.firehol.org/?ipset=id_country_ci)|Ivory Coast (CI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|31 subnets, 906240 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cl](http://iplists.firehol.org/?ipset=id_country_cl)|Chile (CL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|461 subnets, 10177536 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cm](http://iplists.firehol.org/?ipset=id_country_cm)|Cameroon (CM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|36 subnets, 446720 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cn](http://iplists.firehol.org/?ipset=id_country_cn)|China (CN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|4618 subnets, 338083328 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_co](http://iplists.firehol.org/?ipset=id_country_co)|Colombia (CO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|311 subnets, 17288192 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cr](http://iplists.firehol.org/?ipset=id_country_cr)|Costa Rica (CR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|149 subnets, 2578688 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cy](http://iplists.firehol.org/?ipset=id_country_cy)|Cyprus (CY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|178 subnets, 1048896 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_cz](http://iplists.firehol.org/?ipset=id_country_cz)|Czech Republic (CZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1058 subnets, 9239424 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_de](http://iplists.firehol.org/?ipset=id_country_de)|Germany (DE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5341 subnets, 119254144 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_dk](http://iplists.firehol.org/?ipset=id_country_dk)|Denmark (DK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|861 subnets, 12642664 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_do](http://iplists.firehol.org/?ipset=id_country_do)|Dominican Republic (DO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|78 subnets, 1570816 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_dz](http://iplists.firehol.org/?ipset=id_country_dz)|Algeria (DZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|37 subnets, 4791040 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ec](http://iplists.firehol.org/?ipset=id_country_ec)|Ecuador (EC) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|156 subnets, 2574848 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ee](http://iplists.firehol.org/?ipset=id_country_ee)|Estonia (EE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|193 subnets, 1222200 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_eg](http://iplists.firehol.org/?ipset=id_country_eg)|Egypt (EG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|154 subnets, 19953408 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_es](http://iplists.firehol.org/?ipset=id_country_es)|Spain (ES) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1588 subnets, 30083648 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_et](http://iplists.firehol.org/?ipset=id_country_et)|Ethiopia (ET) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5 subnets, 361472 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_eu](http://iplists.firehol.org/?ipset=id_country_eu)|European Union (EU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|303 subnets, 6292232 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_fi](http://iplists.firehol.org/?ipset=id_country_fi)|Finland (FI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|787 subnets, 13599744 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_fj](http://iplists.firehol.org/?ipset=id_country_fj)|Fiji (FJ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|29 subnets, 142336 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_fo](http://iplists.firehol.org/?ipset=id_country_fo)|Faroe Islands (FO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|12 subnets, 43008 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_fr](http://iplists.firehol.org/?ipset=id_country_fr)|France (FR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2642 subnets, 80222256 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gb](http://iplists.firehol.org/?ipset=id_country_gb)|United Kingdom (GB) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5576 subnets, 121944344 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gd](http://iplists.firehol.org/?ipset=id_country_gd)|Grenada (GD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|9 subnets, 9728 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ge](http://iplists.firehol.org/?ipset=id_country_ge)|Georgia (GE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|141 subnets, 1199104 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gf](http://iplists.firehol.org/?ipset=id_country_gf)|French Guiana (GF) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|4 subnets, 20480 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gh](http://iplists.firehol.org/?ipset=id_country_gh)|Ghana (GH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|89 subnets, 1132544 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gi](http://iplists.firehol.org/?ipset=id_country_gi)|Gibraltar (GI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|29 subnets, 81664 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gl](http://iplists.firehol.org/?ipset=id_country_gl)|Greenland (GL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|8 subnets, 23552 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gm](http://iplists.firehol.org/?ipset=id_country_gm)|Gambia (GM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|15 subnets, 258560 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gq](http://iplists.firehol.org/?ipset=id_country_gq)|Equatorial Guinea (GQ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|8 subnets, 15360 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gr](http://iplists.firehol.org/?ipset=id_country_gr)|Greece (GR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|311 subnets, 5593344 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gt](http://iplists.firehol.org/?ipset=id_country_gt)|Guatemala (GT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|58 subnets, 608512 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gu](http://iplists.firehol.org/?ipset=id_country_gu)|Guam (GU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|26 subnets, 218624 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_gy](http://iplists.firehol.org/?ipset=id_country_gy)|Guyana (GY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|11 subnets, 60416 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_hk](http://iplists.firehol.org/?ipset=id_country_hk)|Hong Kong (HK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1767 subnets, 11716352 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_hn](http://iplists.firehol.org/?ipset=id_country_hn)|Honduras (HN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|132 subnets, 483840 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_hr](http://iplists.firehol.org/?ipset=id_country_hr)|Croatia (HR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|175 subnets, 2153024 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ht](http://iplists.firehol.org/?ipset=id_country_ht)|Haiti (HT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|19 subnets, 160768 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_hu](http://iplists.firehol.org/?ipset=id_country_hu)|Hungary (HU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|448 subnets, 5890304 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_id](http://iplists.firehol.org/?ipset=id_country_id)|Indonesia (ID) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1485 subnets, 17949696 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ie](http://iplists.firehol.org/?ipset=id_country_ie)|Ireland (IE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|471 subnets, 6562128 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_il](http://iplists.firehol.org/?ipset=id_country_il)|Israel (IL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|403 subnets, 7625472 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_im](http://iplists.firehol.org/?ipset=id_country_im)|Isle of Man (IM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|16 subnets, 22016 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_in](http://iplists.firehol.org/?ipset=id_country_in)|India (IN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|3567 subnets, 40782848 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_iq](http://iplists.firehol.org/?ipset=id_country_iq)|Iraq (IQ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|131 subnets, 646144 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ir](http://iplists.firehol.org/?ipset=id_country_ir)|Iran (IR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1054 subnets, 12404224 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_is](http://iplists.firehol.org/?ipset=id_country_is)|Iceland (IS) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|113 subnets, 870912 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_it](http://iplists.firehol.org/?ipset=id_country_it)|Italy (IT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2003 subnets, 54012992 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_je](http://iplists.firehol.org/?ipset=id_country_je)|Jersey (JE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|13 subnets, 57344 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_jm](http://iplists.firehol.org/?ipset=id_country_jm)|Jamaica (JM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|42 subnets, 213760 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_jo](http://iplists.firehol.org/?ipset=id_country_jo)|Hashemite Kingdom of Jordan (JO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|103 subnets, 668544 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_jp](http://iplists.firehol.org/?ipset=id_country_jp)|Japan (JP) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2704 subnets, 203122432 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ke](http://iplists.firehol.org/?ipset=id_country_ke)|Kenya (KE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|146 subnets, 4898560 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_kg](http://iplists.firehol.org/?ipset=id_country_kg)|Kyrgyzstan (KG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|65 subnets, 271104 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_kh](http://iplists.firehol.org/?ipset=id_country_kh)|Cambodia (KH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|144 subnets, 297728 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ki](http://iplists.firehol.org/?ipset=id_country_ki)|Kiribati (KI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|5 subnets, 4608 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_km](http://iplists.firehol.org/?ipset=id_country_km)|Comoros (KM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2 subnets, 5120 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_kr](http://iplists.firehol.org/?ipset=id_country_kr)|Republic of Korea (KR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|890 subnets, 112427008 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_kw](http://iplists.firehol.org/?ipset=id_country_kw)|Kuwait (KW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|113 subnets, 1948160 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_kz](http://iplists.firehol.org/?ipset=id_country_kz)|Kazakhstan (KZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|247 subnets, 2897408 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_la](http://iplists.firehol.org/?ipset=id_country_la)|Laos (LA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|30 subnets, 71168 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lb](http://iplists.firehol.org/?ipset=id_country_lb)|Lebanon (LB) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|169 subnets, 560640 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_li](http://iplists.firehol.org/?ipset=id_country_li)|Liechtenstein (LI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|46 subnets, 94240 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lk](http://iplists.firehol.org/?ipset=id_country_lk)|Sri Lanka (LK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|46 subnets, 541696 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lr](http://iplists.firehol.org/?ipset=id_country_lr)|Liberia (LR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|10 subnets, 27136 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lt](http://iplists.firehol.org/?ipset=id_country_lt)|Republic of Lithuania (LT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|254 subnets, 2273280 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lu](http://iplists.firehol.org/?ipset=id_country_lu)|Luxembourg (LU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|181 subnets, 1411072 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_lv](http://iplists.firehol.org/?ipset=id_country_lv)|Latvia (LV) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|310 subnets, 1726720 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ly](http://iplists.firehol.org/?ipset=id_country_ly)|Libya (LY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|23 subnets, 364544 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ma](http://iplists.firehol.org/?ipset=id_country_ma)|Morocco (MA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|47 subnets, 9900288 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mc](http://iplists.firehol.org/?ipset=id_country_mc)|Monaco (MC) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|11 subnets, 57600 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_md](http://iplists.firehol.org/?ipset=id_country_md)|Republic of Moldova (MD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|288 subnets, 1299968 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_me](http://iplists.firehol.org/?ipset=id_country_me)|Montenegro (ME) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|38 subnets, 223232 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mk](http://iplists.firehol.org/?ipset=id_country_mk)|F.Y.R.O.M. (MK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|80 subnets, 682752 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mm](http://iplists.firehol.org/?ipset=id_country_mm)|Myanmar (Burma) (MM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|68 subnets, 114176 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mn](http://iplists.firehol.org/?ipset=id_country_mn)|Mongolia (MN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|71 subnets, 225536 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mr](http://iplists.firehol.org/?ipset=id_country_mr)|Mauritania (MR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|7 subnets, 42496 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mt](http://iplists.firehol.org/?ipset=id_country_mt)|Malta (MT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|89 subnets, 619008 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mu](http://iplists.firehol.org/?ipset=id_country_mu)|Mauritius (MU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|79 subnets, 1825792 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mv](http://iplists.firehol.org/?ipset=id_country_mv)|Maldives (MV) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|18 subnets, 60672 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mw](http://iplists.firehol.org/?ipset=id_country_mw)|Malawi (MW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|28 subnets, 418048 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mx](http://iplists.firehol.org/?ipset=id_country_mx)|Mexico (MX) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|517 subnets, 28824320 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_my](http://iplists.firehol.org/?ipset=id_country_my)|Malaysia (MY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|508 subnets, 6709504 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_mz](http://iplists.firehol.org/?ipset=id_country_mz)|Mozambique (MZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|42 subnets, 428800 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_na](http://iplists.firehol.org/?ipset=id_country_na)|Namibia (NA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|30 subnets, 459008 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_nc](http://iplists.firehol.org/?ipset=id_country_nc)|New Caledonia (NC) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|37 subnets, 161024 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ng](http://iplists.firehol.org/?ipset=id_country_ng)|Nigeria (NG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|208 subnets, 2509056 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ni](http://iplists.firehol.org/?ipset=id_country_ni)|Nicaragua (NI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|39 subnets, 403712 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_nl](http://iplists.firehol.org/?ipset=id_country_nl)|Netherlands (NL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2872 subnets, 46992352 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_no](http://iplists.firehol.org/?ipset=id_country_no)|Norway (NO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|961 subnets, 15895440 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_np](http://iplists.firehol.org/?ipset=id_country_np)|Nepal (NP) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|93 subnets, 512512 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_nr](http://iplists.firehol.org/?ipset=id_country_nr)|Nauru (NR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|6 subnets, 9728 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_nz](http://iplists.firehol.org/?ipset=id_country_nz)|New Zealand (NZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|895 subnets, 6871808 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pa](http://iplists.firehol.org/?ipset=id_country_pa)|Panama (PA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|116 subnets, 1878528 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pe](http://iplists.firehol.org/?ipset=id_country_pe)|Peru (PE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|131 subnets, 3169024 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pg](http://iplists.firehol.org/?ipset=id_country_pg)|Papua New Guinea (PG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|32 subnets, 57344 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ph](http://iplists.firehol.org/?ipset=id_country_ph)|Philippines (PH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|416 subnets, 5384448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pk](http://iplists.firehol.org/?ipset=id_country_pk)|Pakistan (PK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|309 subnets, 5315584 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pl](http://iplists.firehol.org/?ipset=id_country_pl)|Poland (PL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|3153 subnets, 20749896 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pr](http://iplists.firehol.org/?ipset=id_country_pr)|Puerto Rico (PR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|130 subnets, 1037824 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ps](http://iplists.firehol.org/?ipset=id_country_ps)|Palestine (PS) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|116 subnets, 642304 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_pt](http://iplists.firehol.org/?ipset=id_country_pt)|Portugal (PT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|338 subnets, 6626592 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_py](http://iplists.firehol.org/?ipset=id_country_py)|Paraguay (PY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|59 subnets, 1081600 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_qa](http://iplists.firehol.org/?ipset=id_country_qa)|Qatar (QA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|27 subnets, 833792 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_re](http://iplists.firehol.org/?ipset=id_country_re)|Réunion (RE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|11 subnets, 301056 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ro](http://iplists.firehol.org/?ipset=id_country_ro)|Romania (RO) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2268 subnets, 8584448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_rs](http://iplists.firehol.org/?ipset=id_country_rs)|Serbia (RS) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|293 subnets, 2273280 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ru](http://iplists.firehol.org/?ipset=id_country_ru)|Russia (RU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|6631 subnets, 45122816 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_rw](http://iplists.firehol.org/?ipset=id_country_rw)|Rwanda (RW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|17 subnets, 345600 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sa](http://iplists.firehol.org/?ipset=id_country_sa)|Saudi Arabia (SA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|341 subnets, 8836096 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sc](http://iplists.firehol.org/?ipset=id_country_sc)|Seychelles (SC) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|48 subnets, 7928576 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sd](http://iplists.firehol.org/?ipset=id_country_sd)|Sudan (SD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|23 subnets, 1271040 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_se](http://iplists.firehol.org/?ipset=id_country_se)|Sweden (SE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1562 subnets, 29980520 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sg](http://iplists.firehol.org/?ipset=id_country_sg)|Singapore (SG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|1081 subnets, 6699264 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_si](http://iplists.firehol.org/?ipset=id_country_si)|Slovenia (SI) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|417 subnets, 2600448 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sk](http://iplists.firehol.org/?ipset=id_country_sk)|Slovak Republic (SK) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|315 subnets, 2637824 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sl](http://iplists.firehol.org/?ipset=id_country_sl)|Sierra Leone (SL) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|13 subnets, 51200 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sm](http://iplists.firehol.org/?ipset=id_country_sm)|San Marino (SM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|15 subnets, 34560 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sn](http://iplists.firehol.org/?ipset=id_country_sn)|Senegal (SN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|15 subnets, 359936 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sr](http://iplists.firehol.org/?ipset=id_country_sr)|Suriname (SR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|9 subnets, 80128 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ss](http://iplists.firehol.org/?ipset=id_country_ss)|South Sudan (SS) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|13 subnets, 14336 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sv](http://iplists.firehol.org/?ipset=id_country_sv)|El Salvador (SV) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|56 subnets, 656640 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sx](http://iplists.firehol.org/?ipset=id_country_sx)|Sint Maarten (SX) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|9 subnets, 26112 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_sy](http://iplists.firehol.org/?ipset=id_country_sy)|Syria (SY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|146 subnets, 1048576 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tc](http://iplists.firehol.org/?ipset=id_country_tc)|Turks and Caicos Islands (TC) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|7 subnets, 10496 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_td](http://iplists.firehol.org/?ipset=id_country_td)|Chad (TD) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|10 subnets, 19968 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tg](http://iplists.firehol.org/?ipset=id_country_tg)|Togo (TG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|7 subnets, 304128 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_th](http://iplists.firehol.org/?ipset=id_country_th)|Thailand (TH) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|458 subnets, 9046784 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tj](http://iplists.firehol.org/?ipset=id_country_tj)|Tajikistan (TJ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|23 subnets, 68096 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tn](http://iplists.firehol.org/?ipset=id_country_tn)|Tunisia (TN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|18 subnets, 5227008 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tr](http://iplists.firehol.org/?ipset=id_country_tr)|Turkey (TR) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|778 subnets, 16442368 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tt](http://iplists.firehol.org/?ipset=id_country_tt)|Trinidad and Tobago (TT) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|43 subnets, 530432 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tw](http://iplists.firehol.org/?ipset=id_country_tw)|Taiwan (TW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|437 subnets, 35503360 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_tz](http://iplists.firehol.org/?ipset=id_country_tz)|Tanzania (TZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|102 subnets, 1043200 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ua](http://iplists.firehol.org/?ipset=id_country_ua)|Ukraine (UA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|2705 subnets, 11704672 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ug](http://iplists.firehol.org/?ipset=id_country_ug)|Uganda (UG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|51 subnets, 886016 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_us](http://iplists.firehol.org/?ipset=id_country_us)|United States (US) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|16170 subnets, 1613089792 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_uy](http://iplists.firehol.org/?ipset=id_country_uy)|Uruguay (UY) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|47 subnets, 2440192 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_uz](http://iplists.firehol.org/?ipset=id_country_uz)|Uzbekistan (UZ) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|59 subnets, 229888 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_va](http://iplists.firehol.org/?ipset=id_country_va)|Vatican City (VA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|7 subnets, 13824 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_ve](http://iplists.firehol.org/?ipset=id_country_ve)|Venezuela (VE) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|154 subnets, 6794752 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_vg](http://iplists.firehol.org/?ipset=id_country_vg)|British Virgin Islands (VG) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|131 subnets, 190720 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_vn](http://iplists.firehol.org/?ipset=id_country_vn)|Vietnam (VN) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|436 subnets, 15848192 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_vu](http://iplists.firehol.org/?ipset=id_country_vu)|Vanuatu (VU) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|16 subnets, 16128 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_za](http://iplists.firehol.org/?ipset=id_country_za)|South Africa (ZA) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|918 subnets, 27708416 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_zm](http://iplists.firehol.org/?ipset=id_country_zm)|Zambia (ZM) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|30 subnets, 1096192 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[id_country_zw](http://iplists.firehol.org/?ipset=id_country_zw)|Zimbabwe (ZW) -- [IPDeny.com](http://www.ipdeny.com/)|ipv4 hash:net|30 subnets, 88576 unique IPs|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[ip2location_continent_af](http://iplists.firehol.org/?ipset=ip2location_continent_af)|Rwanda (RW), Gabon (GA), Djibouti (DJ), Uganda (UG), Gambia (GM), Namibia (NA), Guinea (GN), Ethiopia (ET), Nigeria (NG), Ghana (GH), Eritrea (ER), Mayotte (YT), Niger (NE), Guinea-Bissau (GW), Reunion (RE), Kenya (KE), Equatorial Guinea (GQ), Algeria (DZ), Egypt (EG), Comoros (KM), Angola (AO), Malawi (MW), Burkina Faso (BF), Mauritius (MU), Zambia (ZM), Sierra Leone (SL), Mauritania (MR), Tanzania (TZ), Somalia (SO), Senegal (SN), Seychelles (SC), Benin (BJ), Sudan (SD), Mozambique (MZ), South Africa (ZA), Cabo Verde (CV), Burundi (BI), Madagascar (MG), Cote D'ivoire (CI), Botswana (BW), Tunisia (TN), Swaziland (SZ), Cameroon (CM), Morocco (MA), Liberia (LR), Lesotho (LS), Chad (TD), Zimbabwe (ZW), South Sudan (SS), Togo (TG), Mali (ML), Sao Tome and Principe (ST), Libya (LY), Congo (CD), Congo (CG), Central African Republic (CF), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|4177 subnets, 94595328 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_aq](http://iplists.firehol.org/?ipset=ip2location_continent_aq)|Antarctica (AQ), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|5 subnets, 1280 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_as](http://iplists.firehol.org/?ipset=ip2location_continent_as)|Georgia (GE), Korea (KP), Qatar (QA), Korea (KR), Kuwait (KW), Azerbaijan (AZ), Kazakhstan (KZ), Oman (OM), Hong Kong (HK), Uzbekistan (UZ), Afghanistan (AF), Kyrgyzstan (KG), United Arab Emirates (AE), Cambodia (KH), Nepal (NP), Yemen (YE), Armenia (AM), Maldives (MV), Bangladesh (BD), Palestine (PS), British Indian Ocean Territory (IO), Lao People's Democratic Republic (LA), India (IN), Lebanon (LB), Israel (IL), Saudi Arabia (SA), Brunei Darussalam (BN), Taiwan (TW), Viet Nam (VN), Turkey (TR), Singapore (SG), Malaysia (MY), Japan (JP), Bahrain (BH), Sri Lanka (LK), Indonesia (ID), Syrian Arab Republic (SY), Turkmenistan (TM), Jordan (JO), Bhutan (BT), Thailand (TH), Tajikistan (TJ), China (CN), Philippines (PH), Macao (MO), Mongolia (MN), Iran (IR), Myanmar (MM), Iraq (IQ), Pakistan (PK), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|40866 subnets, 868459264 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_eu](http://iplists.firehol.org/?ipset=ip2location_continent_eu)|Guernsey (GG), Russian Federation (RU), Serbia (RS), Norway (NO), Netherlands (NL), United Kingdom (GB), Denmark (DK), Austria (AT), Germany (DE), Croatia (HR), Aland Islands (AX), Gibraltar (GI), Spain (ES), Hungary (HU), Ukraine (UA), South Georgia and The South Sandwich Islands (GS), Greece (GR), Andorra (AD), Romania (RO), Estonia (EE), Albania (AL), Slovenia (SI), France (FR), Cyprus (CY), Bulgaria (BG), Slovakia (SK), Holy See (VA), Malta (MT), Czech Republic (CZ), Belgium (BE), San Marino (SM), Portugal (PT), Isle of Man (IM), Bosnia and Herzegovina (BA), Sweden (SE), Liechtenstein (LI), Ireland (IE), Lithuania (LT), Luxembourg (LU), Switzerland (CH), Montenegro (ME), Latvia (LV), Moldova (MD), Monaco (MC), Iceland (IS), Jersey (JE), Finland (FI), Poland (PL), F.Y.R.O.M. (MK), Faroe Islands (FO), Italy (IT), Belarus (BY), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|86405 subnets, 736124416 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_na](http://iplists.firehol.org/?ipset=ip2location_continent_na)|Grenada (GD), Dominica (DM), United States Minor Outlying Islands (UM), Nicaragua (NI), Dominican Republic (DO), Aruba (AW), Cayman Islands (KY), Greenland (GL), Haiti (HT), Guatemala (GT), Antigua and Barbuda (AG), Guadeloupe (GP), Honduras (HN), Anguilla (AI), United States (US), Saint Kitts and Nevis (KN), Saint Vincent and The Grenadines (VC), Puerto Rico (PR), Montserrat (MS), Barbados (BB), Virgin Islands (VG), Martinique (MQ), Saint Lucia (LC), Trinidad and Tobago (TT), Saint Barthelemy (BL), Virgin Islands (VI), Costa Rica (CR), Bermuda (BM), Cuba (CU), Curacao (CW), Mexico (MX), Sint Maarten (Dutch Part) (SX), Panama (PA), Saint Martin (French Part) (MF), Jamaica (JM), Bahamas (BS), Bonaire (BQ), Canada (CA), Belize (BZ), Saint Pierre and Miquelon (PM), Turks and Caicos Islands (TC), El Salvador (SV), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|66013 subnets, 1735584768 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_oc](http://iplists.firehol.org/?ipset=ip2location_continent_oc)|American Samoa (AS), Australia (AU), New Caledonia (NC), Norfolk Island (NF), New Zealand (NZ), Guam (GU), Nauru (NR), Kiribati (KI), Niue (NU), Samoa (WS), Palau (PW), Northern Mariana Islands (MP), Tuvalu (TV), Solomon Islands (SB), Timor-Leste (TL), Cook Islands (CK), Wallis and Futuna (WF), Tonga (TO), French Polynesia (PF), Vanuatu (VU), Tokelau (TK), Papua New Guinea (PG), Fiji (FJ), Marshall Islands (MH), Micronesia (FM), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|8067 subnets, 58444288 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_continent_sa](http://iplists.firehol.org/?ipset=ip2location_continent_sa)|Argentina (AR), French Guiana (GF), Uruguay (UY), Guyana (GY), Ecuador (EC), Venezuela (VE), Paraguay (PY), Bolivia (BO), Brazil (BR), Peru (PE), Chile (CL), Colombia (CO), Falkland Islands (Malvinas) (FK), Suriname (SR), -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6080 subnets, 147273728 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country](https://github.com/ktsaou/blocklist-ipsets/tree/master/ip2location_country)|[IP2Location.com](http://lite.ip2location.com/database-ip-country) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ad](http://iplists.firehol.org/?ipset=ip2location_country_ad)|Andorra (AD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12 subnets, 42496 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ae](http://iplists.firehol.org/?ipset=ip2location_country_ae)|United Arab Emirates (AE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|277 subnets, 4001536 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_af](http://iplists.firehol.org/?ipset=ip2location_country_af)|Afghanistan (AF) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|104 subnets, 205056 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ag](http://iplists.firehol.org/?ipset=ip2location_country_ag)|Antigua and Barbuda (AG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|40 subnets, 25088 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ai](http://iplists.firehol.org/?ipset=ip2location_country_ai)|Anguilla (AI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|25 subnets, 13312 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_al](http://iplists.firehol.org/?ipset=ip2location_country_al)|Albania (AL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|123 subnets, 331264 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_am](http://iplists.firehol.org/?ipset=ip2location_country_am)|Armenia (AM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|107 subnets, 616704 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ao](http://iplists.firehol.org/?ipset=ip2location_country_ao)|Angola (AO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|110 subnets, 1229056 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_aq](http://iplists.firehol.org/?ipset=ip2location_country_aq)|Antarctica (AQ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|5 subnets, 1280 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ar](http://iplists.firehol.org/?ipset=ip2location_country_ar)|Argentina (AR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1229 subnets, 19039232 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_as](http://iplists.firehol.org/?ipset=ip2location_country_as)|American Samoa (AS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|22 subnets, 11776 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_at](http://iplists.firehol.org/?ipset=ip2location_country_at)|Austria (AT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1673 subnets, 11003392 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_au](http://iplists.firehol.org/?ipset=ip2location_country_au)|Australia (AU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6691 subnets, 50322176 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_aw](http://iplists.firehol.org/?ipset=ip2location_country_aw)|Aruba (AW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|18 subnets, 87808 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ax](http://iplists.firehol.org/?ipset=ip2location_country_ax)|Aland Islands (AX) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|33 subnets, 36352 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_az](http://iplists.firehol.org/?ipset=ip2location_country_az)|Azerbaijan (AZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|127 subnets, 760320 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ba](http://iplists.firehol.org/?ipset=ip2location_country_ba)|Bosnia and Herzegovina (BA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|142 subnets, 830208 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bb](http://iplists.firehol.org/?ipset=ip2location_country_bb)|Barbados (BB) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|140 subnets, 149760 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bd](http://iplists.firehol.org/?ipset=ip2location_country_bd)|Bangladesh (BD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|640 subnets, 1318400 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_be](http://iplists.firehol.org/?ipset=ip2location_country_be)|Belgium (BE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2329 subnets, 12236032 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bf](http://iplists.firehol.org/?ipset=ip2location_country_bf)|Burkina Faso (BF) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|26 subnets, 101632 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bg](http://iplists.firehol.org/?ipset=ip2location_country_bg)|Bulgaria (BG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|953 subnets, 4336384 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bh](http://iplists.firehol.org/?ipset=ip2location_country_bh)|Bahrain (BH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|75 subnets, 462848 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bi](http://iplists.firehol.org/?ipset=ip2location_country_bi)|Burundi (BI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|18 subnets, 40448 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bj](http://iplists.firehol.org/?ipset=ip2location_country_bj)|Benin (BJ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|28 subnets, 142848 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bl](http://iplists.firehol.org/?ipset=ip2location_country_bl)|Saint Barthelemy (BL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|5 subnets, 1536 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bm](http://iplists.firehol.org/?ipset=ip2location_country_bm)|Bermuda (BM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|62 subnets, 127488 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bn](http://iplists.firehol.org/?ipset=ip2location_country_bn)|Brunei Darussalam (BN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|29 subnets, 208896 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bo](http://iplists.firehol.org/?ipset=ip2location_country_bo)|Bolivia (BO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|95 subnets, 1151744 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bq](http://iplists.firehol.org/?ipset=ip2location_country_bq)|Bonaire (BQ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12 subnets, 24320 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_br](http://iplists.firehol.org/?ipset=ip2location_country_br)|Brazil (BR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2612 subnets, 83163648 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bs](http://iplists.firehol.org/?ipset=ip2location_country_bs)|Bahamas (BS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|51 subnets, 159488 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bt](http://iplists.firehol.org/?ipset=ip2location_country_bt)|Bhutan (BT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|15 subnets, 32768 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bw](http://iplists.firehol.org/?ipset=ip2location_country_bw)|Botswana (BW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|42 subnets, 144640 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_by](http://iplists.firehol.org/?ipset=ip2location_country_by)|Belarus (BY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|146 subnets, 1921280 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_bz](http://iplists.firehol.org/?ipset=ip2location_country_bz)|Belize (BZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|57 subnets, 120320 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ca](http://iplists.firehol.org/?ipset=ip2location_country_ca)|Canada (CA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7133 subnets, 71590656 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cc](http://iplists.firehol.org/?ipset=ip2location_country_cc)|Cocos (Keeling) Islands (CC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cd](http://iplists.firehol.org/?ipset=ip2location_country_cd)|Congo (CD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|70 subnets, 164608 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cf](http://iplists.firehol.org/?ipset=ip2location_country_cf)|Central African Republic (CF) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|8 subnets, 11776 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cg](http://iplists.firehol.org/?ipset=ip2location_country_cg)|Congo (CG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|26 subnets, 60672 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ch](http://iplists.firehol.org/?ipset=ip2location_country_ch)|Switzerland (CH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2639 subnets, 20104448 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ci](http://iplists.firehol.org/?ipset=ip2location_country_ci)|Cote D'ivoire (CI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|39 subnets, 914432 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cl](http://iplists.firehol.org/?ipset=ip2location_country_cl)|Chile (CL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|619 subnets, 10012160 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cm](http://iplists.firehol.org/?ipset=ip2location_country_cm)|Cameroon (CM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|45 subnets, 450560 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cn](http://iplists.firehol.org/?ipset=ip2location_country_cn)|China (CN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|4721 subnets, 337653248 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_co](http://iplists.firehol.org/?ipset=ip2location_country_co)|Colombia (CO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|584 subnets, 17414400 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_countryless](http://iplists.firehol.org/?ipset=ip2location_country_countryless)|IPs that do not belong to any country (COUNTRYLESS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6097 subnets, 654484224 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cr](http://iplists.firehol.org/?ipset=ip2location_country_cr)|Costa Rica (CR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|205 subnets, 2573056 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cu](http://iplists.firehol.org/?ipset=ip2location_country_cu)|Cuba (CU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|18 subnets, 261120 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cv](http://iplists.firehol.org/?ipset=ip2location_country_cv)|Cabo Verde (CV) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|15 subnets, 34304 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cw](http://iplists.firehol.org/?ipset=ip2location_country_cw)|Curacao (CW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|56 subnets, 190208 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cy](http://iplists.firehol.org/?ipset=ip2location_country_cy)|Cyprus (CY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|250 subnets, 865024 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_cz](http://iplists.firehol.org/?ipset=ip2location_country_cz)|Czech Republic (CZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1443 subnets, 8900352 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_de](http://iplists.firehol.org/?ipset=ip2location_country_de)|Germany (DE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|10617 subnets, 121672192 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_dj](http://iplists.firehol.org/?ipset=ip2location_country_dj)|Djibouti (DJ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|23 subnets, 72960 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_dk](http://iplists.firehol.org/?ipset=ip2location_country_dk)|Denmark (DK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1213 subnets, 13155584 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_dm](http://iplists.firehol.org/?ipset=ip2location_country_dm)|Dominica (DM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 17152 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_do](http://iplists.firehol.org/?ipset=ip2location_country_do)|Dominican Republic (DO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|91 subnets, 1577216 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_dz](http://iplists.firehol.org/?ipset=ip2location_country_dz)|Algeria (DZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|70 subnets, 4799744 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ec](http://iplists.firehol.org/?ipset=ip2location_country_ec)|Ecuador (EC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|258 subnets, 2659072 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ee](http://iplists.firehol.org/?ipset=ip2location_country_ee)|Estonia (EE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|280 subnets, 1478656 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_eg](http://iplists.firehol.org/?ipset=ip2location_country_eg)|Egypt (EG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|212 subnets, 19962368 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_er](http://iplists.firehol.org/?ipset=ip2location_country_er)|Eritrea (ER) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2 subnets, 8192 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_es](http://iplists.firehol.org/?ipset=ip2location_country_es)|Spain (ES) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2648 subnets, 32262144 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_et](http://iplists.firehol.org/?ipset=ip2location_country_et)|Ethiopia (ET) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7 subnets, 365824 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_fi](http://iplists.firehol.org/?ipset=ip2location_country_fi)|Finland (FI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1262 subnets, 13500672 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_fj](http://iplists.firehol.org/?ipset=ip2location_country_fj)|Fiji (FJ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|29 subnets, 146176 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_fk](http://iplists.firehol.org/?ipset=ip2location_country_fk)|Falkland Islands (Malvinas) (FK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6 subnets, 2048 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_fo](http://iplists.firehol.org/?ipset=ip2location_country_fo)|Faroe Islands (FO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12 subnets, 43008 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_fr](http://iplists.firehol.org/?ipset=ip2location_country_fr)|France (FR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|5756 subnets, 82445824 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ga](http://iplists.firehol.org/?ipset=ip2location_country_ga)|Gabon (GA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|46 subnets, 414208 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gb](http://iplists.firehol.org/?ipset=ip2location_country_gb)|United Kingdom (GB) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12625 subnets, 123619840 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gd](http://iplists.firehol.org/?ipset=ip2location_country_gd)|Grenada (GD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|41 subnets, 25088 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ge](http://iplists.firehol.org/?ipset=ip2location_country_ge)|Georgia (GE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|178 subnets, 1224704 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gf](http://iplists.firehol.org/?ipset=ip2location_country_gf)|French Guiana (GF) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|66 subnets, 56832 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gg](http://iplists.firehol.org/?ipset=ip2location_country_gg)|Guernsey (GG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|37 subnets, 73728 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gh](http://iplists.firehol.org/?ipset=ip2location_country_gh)|Ghana (GH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|109 subnets, 1131264 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gi](http://iplists.firehol.org/?ipset=ip2location_country_gi)|Gibraltar (GI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|48 subnets, 73216 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gl](http://iplists.firehol.org/?ipset=ip2location_country_gl)|Greenland (GL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|8 subnets, 23552 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gm](http://iplists.firehol.org/?ipset=ip2location_country_gm)|Gambia (GM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|16 subnets, 262656 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gn](http://iplists.firehol.org/?ipset=ip2location_country_gn)|Guinea (GN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12 subnets, 29696 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gp](http://iplists.firehol.org/?ipset=ip2location_country_gp)|Guadeloupe (GP) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|127 subnets, 124928 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gq](http://iplists.firehol.org/?ipset=ip2location_country_gq)|Equatorial Guinea (GQ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12 subnets, 20736 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gr](http://iplists.firehol.org/?ipset=ip2location_country_gr)|Greece (GR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|452 subnets, 5797888 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gt](http://iplists.firehol.org/?ipset=ip2location_country_gt)|Guatemala (GT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|122 subnets, 629760 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gu](http://iplists.firehol.org/?ipset=ip2location_country_gu)|Guam (GU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|67 subnets, 237056 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gw](http://iplists.firehol.org/?ipset=ip2location_country_gw)|Guinea-Bissau (GW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|4 subnets, 10240 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_gy](http://iplists.firehol.org/?ipset=ip2location_country_gy)|Guyana (GY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|15 subnets, 65792 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_hk](http://iplists.firehol.org/?ipset=ip2location_country_hk)|Hong Kong (HK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|3845 subnets, 13210368 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_hn](http://iplists.firehol.org/?ipset=ip2location_country_hn)|Honduras (HN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|238 subnets, 509440 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_hr](http://iplists.firehol.org/?ipset=ip2location_country_hr)|Croatia (HR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|268 subnets, 2699008 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ht](http://iplists.firehol.org/?ipset=ip2location_country_ht)|Haiti (HT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|30 subnets, 163072 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_hu](http://iplists.firehol.org/?ipset=ip2location_country_hu)|Hungary (HU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|711 subnets, 5862912 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_id](http://iplists.firehol.org/?ipset=ip2location_country_id)|Indonesia (ID) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1583 subnets, 18030848 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ie](http://iplists.firehol.org/?ipset=ip2location_country_ie)|Ireland (IE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1488 subnets, 10284032 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_il](http://iplists.firehol.org/?ipset=ip2location_country_il)|Israel (IL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|700 subnets, 8204800 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_im](http://iplists.firehol.org/?ipset=ip2location_country_im)|Isle of Man (IM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|46 subnets, 100352 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_in](http://iplists.firehol.org/?ipset=ip2location_country_in)|India (IN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|4248 subnets, 42206464 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_io](http://iplists.firehol.org/?ipset=ip2location_country_io)|British Indian Ocean Territory (IO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|4 subnets, 3584 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_iq](http://iplists.firehol.org/?ipset=ip2location_country_iq)|Iraq (IQ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|188 subnets, 674304 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ir](http://iplists.firehol.org/?ipset=ip2location_country_ir)|Iran (IR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1099 subnets, 12421376 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_is](http://iplists.firehol.org/?ipset=ip2location_country_is)|Iceland (IS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|130 subnets, 891136 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_it](http://iplists.firehol.org/?ipset=ip2location_country_it)|Italy (IT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|3017 subnets, 54234624 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_je](http://iplists.firehol.org/?ipset=ip2location_country_je)|Jersey (JE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|39 subnets, 78336 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_jm](http://iplists.firehol.org/?ipset=ip2location_country_jm)|Jamaica (JM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|176 subnets, 205312 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_jo](http://iplists.firehol.org/?ipset=ip2location_country_jo)|Jordan (JO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|115 subnets, 686336 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_jp](http://iplists.firehol.org/?ipset=ip2location_country_jp)|Japan (JP) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|12701 subnets, 189951232 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ke](http://iplists.firehol.org/?ipset=ip2location_country_ke)|Kenya (KE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|249 subnets, 4976384 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kg](http://iplists.firehol.org/?ipset=ip2location_country_kg)|Kyrgyzstan (KG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|71 subnets, 272896 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kh](http://iplists.firehol.org/?ipset=ip2location_country_kh)|Cambodia (KH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|148 subnets, 302592 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ki](http://iplists.firehol.org/?ipset=ip2location_country_ki)|Kiribati (KI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7 subnets, 9216 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_km](http://iplists.firehol.org/?ipset=ip2location_country_km)|Comoros (KM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6 subnets, 10240 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kn](http://iplists.firehol.org/?ipset=ip2location_country_kn)|Saint Kitts and Nevis (KN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|38 subnets, 29184 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kp](http://iplists.firehol.org/?ipset=ip2location_country_kp)|Korea (KP) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2 subnets, 9216 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kr](http://iplists.firehol.org/?ipset=ip2location_country_kr)|Korea (KR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1094 subnets, 112654848 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kw](http://iplists.firehol.org/?ipset=ip2location_country_kw)|Kuwait (KW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|154 subnets, 1964800 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ky](http://iplists.firehol.org/?ipset=ip2location_country_ky)|Cayman Islands (KY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|70 subnets, 196352 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_kz](http://iplists.firehol.org/?ipset=ip2location_country_kz)|Kazakhstan (KZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|322 subnets, 3117568 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_la](http://iplists.firehol.org/?ipset=ip2location_country_la)|Lao People's Democratic Republic (LA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|34 subnets, 75520 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lb](http://iplists.firehol.org/?ipset=ip2location_country_lb)|Lebanon (LB) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|220 subnets, 590080 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lc](http://iplists.firehol.org/?ipset=ip2location_country_lc)|Saint Lucia (LC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|30 subnets, 19456 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_li](http://iplists.firehol.org/?ipset=ip2location_country_li)|Liechtenstein (LI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|78 subnets, 104960 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lk](http://iplists.firehol.org/?ipset=ip2location_country_lk)|Sri Lanka (LK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|60 subnets, 562176 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lr](http://iplists.firehol.org/?ipset=ip2location_country_lr)|Liberia (LR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|23 subnets, 34560 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ls](http://iplists.firehol.org/?ipset=ip2location_country_ls)|Lesotho (LS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|25 subnets, 110592 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lt](http://iplists.firehol.org/?ipset=ip2location_country_lt)|Lithuania (LT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|503 subnets, 3065344 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lu](http://iplists.firehol.org/?ipset=ip2location_country_lu)|Luxembourg (LU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|343 subnets, 1555200 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_lv](http://iplists.firehol.org/?ipset=ip2location_country_lv)|Latvia (LV) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|452 subnets, 2052096 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ly](http://iplists.firehol.org/?ipset=ip2location_country_ly)|Libya (LY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|38 subnets, 373760 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ma](http://iplists.firehol.org/?ipset=ip2location_country_ma)|Morocco (MA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|66 subnets, 9905152 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mc](http://iplists.firehol.org/?ipset=ip2location_country_mc)|Monaco (MC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 51200 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_md](http://iplists.firehol.org/?ipset=ip2location_country_md)|Moldova (MD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|310 subnets, 1309184 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_me](http://iplists.firehol.org/?ipset=ip2location_country_me)|Montenegro (ME) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|82 subnets, 186624 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mf](http://iplists.firehol.org/?ipset=ip2location_country_mf)|Saint Martin (French Part) (MF) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|23 subnets, 20480 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mg](http://iplists.firehol.org/?ipset=ip2location_country_mg)|Madagascar (MG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|23 subnets, 172544 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mh](http://iplists.firehol.org/?ipset=ip2location_country_mh)|Marshall Islands (MH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6 subnets, 8704 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mk](http://iplists.firehol.org/?ipset=ip2location_country_mk)|F.Y.R.O.M. (MK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|107 subnets, 683264 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ml](http://iplists.firehol.org/?ipset=ip2location_country_ml)|Mali (ML) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|23 subnets, 80128 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mm](http://iplists.firehol.org/?ipset=ip2location_country_mm)|Myanmar (MM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|69 subnets, 117504 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mn](http://iplists.firehol.org/?ipset=ip2location_country_mn)|Mongolia (MN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|89 subnets, 228608 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mo](http://iplists.firehol.org/?ipset=ip2location_country_mo)|Macao (MO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|41 subnets, 358400 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mp](http://iplists.firehol.org/?ipset=ip2location_country_mp)|Northern Mariana Islands (MP) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|11 subnets, 18176 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mq](http://iplists.firehol.org/?ipset=ip2location_country_mq)|Martinique (MQ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|85 subnets, 97536 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mr](http://iplists.firehol.org/?ipset=ip2location_country_mr)|Mauritania (MR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|16 subnets, 49920 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mt](http://iplists.firehol.org/?ipset=ip2location_country_mt)|Malta (MT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|105 subnets, 612608 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mu](http://iplists.firehol.org/?ipset=ip2location_country_mu)|Mauritius (MU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|159 subnets, 1347072 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mv](http://iplists.firehol.org/?ipset=ip2location_country_mv)|Maldives (MV) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|19 subnets, 64768 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mw](http://iplists.firehol.org/?ipset=ip2location_country_mw)|Malawi (MW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|41 subnets, 422656 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mx](http://iplists.firehol.org/?ipset=ip2location_country_mx)|Mexico (MX) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|742 subnets, 29049344 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_my](http://iplists.firehol.org/?ipset=ip2location_country_my)|Malaysia (MY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|662 subnets, 5953280 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_mz](http://iplists.firehol.org/?ipset=ip2location_country_mz)|Mozambique (MZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|64 subnets, 454144 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_na](http://iplists.firehol.org/?ipset=ip2location_country_na)|Namibia (NA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|45 subnets, 457984 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_nc](http://iplists.firehol.org/?ipset=ip2location_country_nc)|New Caledonia (NC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|40 subnets, 164096 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ne](http://iplists.firehol.org/?ipset=ip2location_country_ne)|Niger (NE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|14 subnets, 46080 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ng](http://iplists.firehol.org/?ipset=ip2location_country_ng)|Nigeria (NG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|329 subnets, 2553856 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ni](http://iplists.firehol.org/?ipset=ip2location_country_ni)|Nicaragua (NI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|75 subnets, 436224 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_nl](http://iplists.firehol.org/?ipset=ip2location_country_nl)|Netherlands (NL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7320 subnets, 50727168 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_no](http://iplists.firehol.org/?ipset=ip2location_country_no)|Norway (NO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1856 subnets, 15708672 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_np](http://iplists.firehol.org/?ipset=ip2location_country_np)|Nepal (NP) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|99 subnets, 520448 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_nr](http://iplists.firehol.org/?ipset=ip2location_country_nr)|Nauru (NR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7 subnets, 13824 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_nz](http://iplists.firehol.org/?ipset=ip2location_country_nz)|New Zealand (NZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1044 subnets, 7245312 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_om](http://iplists.firehol.org/?ipset=ip2location_country_om)|Oman (OM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|55 subnets, 924416 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pa](http://iplists.firehol.org/?ipset=ip2location_country_pa)|Panama (PA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|176 subnets, 1879040 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pe](http://iplists.firehol.org/?ipset=ip2location_country_pe)|Peru (PE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|184 subnets, 3231488 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pg](http://iplists.firehol.org/?ipset=ip2location_country_pg)|Papua New Guinea (PG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|33 subnets, 61440 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ph](http://iplists.firehol.org/?ipset=ip2location_country_ph)|Philippines (PH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|549 subnets, 5459712 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pk](http://iplists.firehol.org/?ipset=ip2location_country_pk)|Pakistan (PK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|343 subnets, 5316864 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pl](http://iplists.firehol.org/?ipset=ip2location_country_pl)|Poland (PL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|6468 subnets, 22711552 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pr](http://iplists.firehol.org/?ipset=ip2location_country_pr)|Puerto Rico (PR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|542 subnets, 1403136 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ps](http://iplists.firehol.org/?ipset=ip2location_country_ps)|Palestine (PS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|131 subnets, 652032 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_pt](http://iplists.firehol.org/?ipset=ip2location_country_pt)|Portugal (PT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|436 subnets, 6697472 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_py](http://iplists.firehol.org/?ipset=ip2location_country_py)|Paraguay (PY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|76 subnets, 1105920 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_qa](http://iplists.firehol.org/?ipset=ip2location_country_qa)|Qatar (QA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|45 subnets, 851456 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_re](http://iplists.firehol.org/?ipset=ip2location_country_re)|Reunion (RE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|160 subnets, 430080 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ro](http://iplists.firehol.org/?ipset=ip2location_country_ro)|Romania (RO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2479 subnets, 8752640 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_rs](http://iplists.firehol.org/?ipset=ip2location_country_rs)|Serbia (RS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|387 subnets, 2351872 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ru](http://iplists.firehol.org/?ipset=ip2location_country_ru)|Russian Federation (RU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7839 subnets, 45218816 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_rw](http://iplists.firehol.org/?ipset=ip2location_country_rw)|Rwanda (RW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|45 subnets, 378624 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sa](http://iplists.firehol.org/?ipset=ip2location_country_sa)|Saudi Arabia (SA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|396 subnets, 8984832 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sb](http://iplists.firehol.org/?ipset=ip2location_country_sb)|Solomon Islands (SB) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|7 subnets, 15616 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sc](http://iplists.firehol.org/?ipset=ip2location_country_sc)|Seychelles (SC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|88 subnets, 1118976 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sd](http://iplists.firehol.org/?ipset=ip2location_country_sd)|Sudan (SD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|30 subnets, 1274880 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_se](http://iplists.firehol.org/?ipset=ip2location_country_se)|Sweden (SE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|3054 subnets, 28189440 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sg](http://iplists.firehol.org/?ipset=ip2location_country_sg)|Singapore (SG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2523 subnets, 8903168 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_si](http://iplists.firehol.org/?ipset=ip2location_country_si)|Slovenia (SI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|486 subnets, 2634240 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sk](http://iplists.firehol.org/?ipset=ip2location_country_sk)|Slovakia (SK) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|422 subnets, 2714880 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sl](http://iplists.firehol.org/?ipset=ip2location_country_sl)|Sierra Leone (SL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 55808 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sm](http://iplists.firehol.org/?ipset=ip2location_country_sm)|San Marino (SM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|17 subnets, 36352 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sn](http://iplists.firehol.org/?ipset=ip2location_country_sn)|Senegal (SN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 364288 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_so](http://iplists.firehol.org/?ipset=ip2location_country_so)|Somalia (SO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 26368 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sr](http://iplists.firehol.org/?ipset=ip2location_country_sr)|Suriname (SR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|13 subnets, 83456 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ss](http://iplists.firehol.org/?ipset=ip2location_country_ss)|South Sudan (SS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|18 subnets, 14848 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sv](http://iplists.firehol.org/?ipset=ip2location_country_sv)|El Salvador (SV) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|115 subnets, 685568 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sx](http://iplists.firehol.org/?ipset=ip2location_country_sx)|Sint Maarten (Dutch Part) (SX) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|15 subnets, 35840 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sy](http://iplists.firehol.org/?ipset=ip2location_country_sy)|Syrian Arab Republic (SY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|163 subnets, 1122816 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_sz](http://iplists.firehol.org/?ipset=ip2location_country_sz)|Swaziland (SZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 54016 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tc](http://iplists.firehol.org/?ipset=ip2location_country_tc)|Turks and Caicos Islands (TC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|22 subnets, 13312 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_td](http://iplists.firehol.org/?ipset=ip2location_country_td)|Chad (TD) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|13 subnets, 24576 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tg](http://iplists.firehol.org/?ipset=ip2location_country_tg)|Togo (TG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|11 subnets, 309248 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_th](http://iplists.firehol.org/?ipset=ip2location_country_th)|Thailand (TH) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|594 subnets, 9205760 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tj](http://iplists.firehol.org/?ipset=ip2location_country_tj)|Tajikistan (TJ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|31 subnets, 77824 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tl](http://iplists.firehol.org/?ipset=ip2location_country_tl)|Timor-Leste (TL) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|17 subnets, 16384 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tm](http://iplists.firehol.org/?ipset=ip2location_country_tm)|Turkmenistan (TM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|9 subnets, 22784 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tn](http://iplists.firehol.org/?ipset=ip2location_country_tn)|Tunisia (TN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|20 subnets, 5231360 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_to](http://iplists.firehol.org/?ipset=ip2location_country_to)|Tonga (TO) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|8 subnets, 13824 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tr](http://iplists.firehol.org/?ipset=ip2location_country_tr)|Turkey (TR) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|940 subnets, 16411904 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tt](http://iplists.firehol.org/?ipset=ip2location_country_tt)|Trinidad and Tobago (TT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|45 subnets, 533504 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tv](http://iplists.firehol.org/?ipset=ip2location_country_tv)|Tuvalu (TV) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|2 subnets, 12288 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tw](http://iplists.firehol.org/?ipset=ip2location_country_tw)|Taiwan (TW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|690 subnets, 35607808 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_tz](http://iplists.firehol.org/?ipset=ip2location_country_tz)|Tanzania (TZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|148 subnets, 1084672 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ua](http://iplists.firehol.org/?ipset=ip2location_country_ua)|Ukraine (UA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|3235 subnets, 11865088 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ug](http://iplists.firehol.org/?ipset=ip2location_country_ug)|Uganda (UG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|85 subnets, 908032 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_um](http://iplists.firehol.org/?ipset=ip2location_country_um)|United States Minor Outlying Islands (UM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1 subnets, 256 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_us](http://iplists.firehol.org/?ipset=ip2location_country_us)|United States (US) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|55172 subnets, 1622356736 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_uy](http://iplists.firehol.org/?ipset=ip2location_country_uy)|Uruguay (UY) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|73 subnets, 2478592 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_uz](http://iplists.firehol.org/?ipset=ip2location_country_uz)|Uzbekistan (UZ) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|77 subnets, 257024 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_va](http://iplists.firehol.org/?ipset=ip2location_country_va)|Holy See (VA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|13 subnets, 15104 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_vc](http://iplists.firehol.org/?ipset=ip2location_country_vc)|Saint Vincent and The Grenadines (VC) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|39 subnets, 33536 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ve](http://iplists.firehol.org/?ipset=ip2location_country_ve)|Venezuela (VE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|250 subnets, 6809344 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_vg](http://iplists.firehol.org/?ipset=ip2location_country_vg)|Virgin Islands (VG) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|78 subnets, 69888 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_vi](http://iplists.firehol.org/?ipset=ip2location_country_vi)|Virgin Islands (VI) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|67 subnets, 120320 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_vn](http://iplists.firehol.org/?ipset=ip2location_country_vn)|Viet Nam (VN) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|453 subnets, 15852288 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_vu](http://iplists.firehol.org/?ipset=ip2location_country_vu)|Vanuatu (VU) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|19 subnets, 20480 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ws](http://iplists.firehol.org/?ipset=ip2location_country_ws)|Samoa (WS) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|15 subnets, 23040 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_ye](http://iplists.firehol.org/?ipset=ip2location_country_ye)|Yemen (YE) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|27 subnets, 142080 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_yt](http://iplists.firehol.org/?ipset=ip2location_country_yt)|Mayotte (YT) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|9 subnets, 19712 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_za](http://iplists.firehol.org/?ipset=ip2location_country_za)|South Africa (ZA) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|1279 subnets, 30598912 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_zm](http://iplists.firehol.org/?ipset=ip2location_country_zm)|Zambia (ZM) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|61 subnets, 1148416 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ip2location_country_zw](http://iplists.firehol.org/?ipset=ip2location_country_zw)|Zimbabwe (ZW) -- [IP2Location.com](http://lite.ip2location.com/database-ip-country)|ipv4 hash:net|63 subnets, 170240 unique IPs|updated every 1 day from [this link](http://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP)
[ipblacklistcloud_recent](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|35 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_1d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_1d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|35 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_30d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_30d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|450 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_recent_7d](http://iplists.firehol.org/?ipset=ipblacklistcloud_recent_7d)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the most recent IP addresses that have been blacklisted by websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|123 unique IPs|updated every 4 hours from [this link](http://www.ip-finder.me/download/)
[ipblacklistcloud_top](http://iplists.firehol.org/?ipset=ipblacklistcloud_top)|[IP Blacklist Cloud](http://www.ip-finder.me/) These are the top IP addresses that have been blacklisted by many websites. IP Blacklist Cloud plugin protects your WordPress based website from spam comments, gives details about login attacks which you don't even know are happening without this plugin!|ipv4 hash:ip|200 unique IPs|updated every 1 day from [this link](http://www.ip-finder.me/ip-full-list/)
[ipdeny_country](https://github.com/firehol/blocklist-ipsets/tree/master/ipdeny_country)|[IPDeny.com](http://www.ipdeny.com/) geolocation database|ipv4 hash:net|All the world|updated every 1 day from [this link](http://www.ipdeny.com/ipblocks/data/countries/all-zones.tar.gz)
[iw_spamlist](http://iplists.firehol.org/?ipset=iw_spamlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending spam, in the last 3 days|ipv4 hash:ip|3313 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/spamlist)
[iw_wormlist](http://iplists.firehol.org/?ipset=iw_wormlist)|[ImproWare Antispam](http://antispam.imp.ch/) IPs sending emails with viruses or worms, in the last 3 days|ipv4 hash:ip|1 unique IPs|updated every 1 hour from [this link](http://antispam.imp.ch/wormlist)
[jigsaw_attacks](http://iplists.firehol.org/?ipset=jigsaw_attacks)|[Jigsaw Security Enterprise](http://www.jigsawsecurityenterprise.com/#!open-blacklist/kafsx) IP Address Sources of Attack. Information on this blacklist is low fidelity meaning we do not update these indicators that often and there is no validation of the data. These are raw feeds that have not been processed. In order to get the most up to date data and to remove false positives you should consider subscribing to our Jigsaw Enterprise Solution.|ipv4 hash:ip|27109 unique IPs|updated every 1 day from [this link](http://www.slcsecurity.com/feedspublic/IP/malicious-ip-src.txt)
[jigsaw_malware](http://iplists.firehol.org/?ipset=jigsaw_malware)|[Jigsaw Security Enterprise](http://www.jigsawsecurityenterprise.com/#!open-blacklist/kafsx) Malicious IP Destinations usually C2 or botnet activity or malicious payloads. Information on this blacklist is low fidelity meaning we do not update these indicators that often and there is no validation of the data. These are raw feeds that have not been processed. In order to get the most up to date data and to remove false positives you should consider subscribing to our Jigsaw Enterprise Solution.|ipv4 hash:ip|59614 unique IPs|updated every 1 day from [this link](http://www.slcsecurity.com/feedspublic/IP/malicious-ip-dst.txt)
[lashback_ubl](http://iplists.firehol.org/?ipset=lashback_ubl)|[The LashBack UBL](http://blacklist.lashback.com/) The Unsubscribe Blacklist (UBL) is a real-time blacklist of IP addresses which are sending email to names harvested from suppression files (this is a big list, more than 500.000 IPs)|ipv4 hash:ip|3127356 unique IPs|updated every 1 day from [this link](http://www.unsubscore.com/blacklist.txt)
[malc0de](http://iplists.firehol.org/?ipset=malc0de)|[Malc0de.com](http://malc0de.com) malicious IPs of the last 30 days|ipv4 hash:ip|289 unique IPs|updated every 1 day from [this link](http://malc0de.com/bl/IP_Blacklist.txt)
[malwaredomainlist](http://iplists.firehol.org/?ipset=malwaredomainlist)|[malwaredomainlist.com](http://www.malwaredomainlist.com) list of malware active ip addresses|ipv4 hash:ip|1155 unique IPs|updated every 12 hours from [this link](http://www.malwaredomainlist.com/hostslist/ip.txt)
[maxmind_proxy_fraud](http://iplists.firehol.org/?ipset=maxmind_proxy_fraud)|[MaxMind.com](https://www.maxmind.com/en/anonymous-proxy-fraudulent-ip-address-list) list of anonymous proxy fraudelent IP addresses.|ipv4 hash:ip|455 unique IPs|updated every 4 hours from [this link](https://www.maxmind.com/en/anonymous-proxy-fraudulent-ip-address-list)
[myip](http://iplists.firehol.org/?ipset=myip)|[myip.ms](http://www.myip.ms/info/about) IPs identified as web bots in the last 10 days, using several sites that require human action|ipv4 hash:ip|2521 unique IPs|updated every 1 day from [this link](http://www.myip.ms/files/blacklist/csf/latest_blacklist.txt)
[nixspam](http://iplists.firehol.org/?ipset=nixspam)|[NiX Spam](http://www.heise.de/ix/NiX-Spam-DNSBL-and-blacklist-for-download-499637.html) IP addresses that sent spam in the last hour - automatically generated entries without distinguishing open proxies from relays, dialup gateways, and so on. All IPs are removed after 12 hours if there is no spam from there.|ipv4 hash:ip|39831 unique IPs|updated every 15 mins from [this link](http://www.dnsbl.manitu.net/download/nixspam-ip.dump.gz)
[nt_malware_dns](http://iplists.firehol.org/?ipset=nt_malware_dns)|[No Think](http://www.nothink.org/) Malware DNS (the original list includes hostnames and domains, which are ignored)|ipv4 hash:ip|235 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_dns.txt)
[nt_malware_dns](http://iplists.firehol.org/?ipset=nt_malware_dns)|[No Think](http://www.nothink.org/) Malware DNS (the original list includes hostnames and domains, which are ignored)|ipv4 hash:ip|235 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_dns.txt)
[nt_malware_http](http://iplists.firehol.org/?ipset=nt_malware_http)|[No Think](http://www.nothink.org/) Malware HTTP|ipv4 hash:ip|69 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_http.txt)
[nt_malware_http](http://iplists.firehol.org/?ipset=nt_malware_http)|[No Think](http://www.nothink.org/) Malware HTTP|ipv4 hash:ip|69 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_http.txt)
[nt_malware_irc](http://iplists.firehol.org/?ipset=nt_malware_irc)|[No Think](http://www.nothink.org/) Malware IRC|ipv4 hash:ip|43 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_irc.txt)
[nt_malware_irc](http://iplists.firehol.org/?ipset=nt_malware_irc)|[No Think](http://www.nothink.org/) Malware IRC|ipv4 hash:ip|43 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_malware_irc.txt)
[nt_ssh_7d](http://iplists.firehol.org/?ipset=nt_ssh_7d)|[NoThink](http://www.nothink.org/) Last 7 days SSH attacks|ipv4 hash:ip|203 unique IPs|updated every 1 hour from [this link](http://www.nothink.org/blacklist/blacklist_ssh_week.txt)
[nullsecure](http://iplists.firehol.org/?ipset=nullsecure)|[nullsecure.org](http://nullsecure.org/) This is a free threat feed provided for use in any acceptable manner. This feed was aggregated using the [Tango Honeypot Intelligence Splunk App](https://github.com/aplura/Tango) by Brian Warehime, a Senior Security Analyst at Defense Point Security.|ipv4 hash:ip|29439 unique IPs|updated every 8 hours from [this link](http://nullsecure.org/threatfeed/master.txt)
openbl|[OpenBL.org](http://www.openbl.org/) default blacklist (currently it is the same with 90 days). OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications|ipv4 hash:ip|disabled|updated every 4 hours from [this link](http://www.openbl.org/lists/base.txt)
[openbl_180d](http://iplists.firehol.org/?ipset=openbl_180d)|[OpenBL.org](http://www.openbl.org/) last 180 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|11553 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_180days.txt)
[openbl_1d](http://iplists.firehol.org/?ipset=openbl_1d)|[OpenBL.org](http://www.openbl.org/) last 24 hours IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|147 unique IPs|updated every 1 hour from [this link](http://www.openbl.org/lists/base_1days.txt)
[openbl_30d](http://iplists.firehol.org/?ipset=openbl_30d)|[OpenBL.org](http://www.openbl.org/) last 30 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|3121 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_30days.txt)
[openbl_360d](http://iplists.firehol.org/?ipset=openbl_360d)|[OpenBL.org](http://www.openbl.org/) last 360 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|20137 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_360days.txt)
[openbl_60d](http://iplists.firehol.org/?ipset=openbl_60d)|[OpenBL.org](http://www.openbl.org/) last 60 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|5157 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_60days.txt)
[openbl_7d](http://iplists.firehol.org/?ipset=openbl_7d)|[OpenBL.org](http://www.openbl.org/) last 7 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|856 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_7days.txt)
[openbl_90d](http://iplists.firehol.org/?ipset=openbl_90d)|[OpenBL.org](http://www.openbl.org/) last 90 days IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|6995 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_90days.txt)
[openbl_all](http://iplists.firehol.org/?ipset=openbl_all)|[OpenBL.org](http://www.openbl.org/) last all IPs. OpenBL.org is detecting, logging and reporting various types of internet abuse. Currently they monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications.|ipv4 hash:ip|128087 unique IPs|updated every 4 hours from [this link](http://www.openbl.org/lists/base_all.txt)
[packetmail](http://iplists.firehol.org/?ipset=packetmail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 206.82.85.196/30 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|2995 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep.txt)
[packetmail_carisirt](http://iplists.firehol.org/?ipset=packetmail_carisirt)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 66.240.206.5 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|550 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_CARISIRT.txt)
[packetmail_emerging_ips](http://iplists.firehol.org/?ipset=packetmail_emerging_ips)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected as potentially of interest based on the number of unique users of the packetmail IP Reputation system. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|33 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_emerging_ips.txt)
[packetmail_mail](http://iplists.firehol.org/?ipset=packetmail_mail)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing behavior not in compliance with the requirements this system enforces for email acceptance. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|218 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_mail.txt)
[packetmail_ramnode](http://iplists.firehol.org/?ipset=packetmail_ramnode)|[PacketMail.net](https://www.packetmail.net/) IP addresses that have been detected performing TCP SYN to 81.4.103.251 to a non-listening service or daemon. No assertion is made, nor implied, that any of the below listed IP addresses are accurate, malicious, hostile, or engaged in nefarious acts. Use this list at your own risk.|ipv4 hash:ip|793 unique IPs|updated every 4 hours from [this link](https://www.packetmail.net/iprep_ramnode.txt)
[palevo](http://iplists.firehol.org/?ipset=palevo)|[Abuse.ch Palevo tracker](https://palevotracker.abuse.ch) worm includes IPs which are being used as botnet C&C for the Palevo crimeware|ipv4 hash:ip|12 unique IPs|updated every 30 mins from [this link](https://palevotracker.abuse.ch/blocklists.php?download=ipblocklist)
php_bad|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) bad web hosts (this list is composed using an RSS feed)|ipv4 hash:ip|disabled|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=b&rss=1)
[php_commenters](http://iplists.firehol.org/?ipset=php_commenters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_1d](http://iplists.firehol.org/?ipset=php_commenters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_30d](http://iplists.firehol.org/?ipset=php_commenters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|851 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_commenters_7d](http://iplists.firehol.org/?ipset=php_commenters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) comment spammers (this list is composed using an RSS feed)|ipv4 hash:ip|270 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=c&rss=1)
[php_dictionary](http://iplists.firehol.org/?ipset=php_dictionary)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_1d](http://iplists.firehol.org/?ipset=php_dictionary_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|96 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_30d](http://iplists.firehol.org/?ipset=php_dictionary_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|1255 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_dictionary_7d](http://iplists.firehol.org/?ipset=php_dictionary_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) directory attackers (this list is composed using an RSS feed)|ipv4 hash:ip|360 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1)
[php_harvesters](http://iplists.firehol.org/?ipset=php_harvesters)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_1d](http://iplists.firehol.org/?ipset=php_harvesters_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_30d](http://iplists.firehol.org/?ipset=php_harvesters_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|505 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_harvesters_7d](http://iplists.firehol.org/?ipset=php_harvesters_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) harvesters (IPs that surf the internet looking for email addresses) (this list is composed using an RSS feed)|ipv4 hash:ip|165 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=h&rss=1)
[php_spammers](http://iplists.firehol.org/?ipset=php_spammers)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_1d](http://iplists.firehol.org/?ipset=php_spammers_1d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|50 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_30d](http://iplists.firehol.org/?ipset=php_spammers_30d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|1211 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[php_spammers_7d](http://iplists.firehol.org/?ipset=php_spammers_7d)|[projecthoneypot.org](http://www.projecthoneypot.org/?rf=192670) spam servers (IPs used by spammers to send messages) (this list is composed using an RSS feed)|ipv4 hash:ip|329 unique IPs|updated every 1 hour from [this link](http://www.projecthoneypot.org/list_of_ips.php?t=s&rss=1)
[proxylists](http://iplists.firehol.org/?ipset=proxylists)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|1121 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_1d](http://iplists.firehol.org/?ipset=proxylists_1d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|2591 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_30d](http://iplists.firehol.org/?ipset=proxylists_30d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|8767 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxylists_7d](http://iplists.firehol.org/?ipset=proxylists_7d)|[proxylists.net](http://www.proxylists.net/) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|5450 unique IPs|updated every 1 hour from [this link](http://www.proxylists.net/proxylists.xml)
[proxyrss](http://iplists.firehol.org/?ipset=proxyrss)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|982 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_1d](http://iplists.firehol.org/?ipset=proxyrss_1d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|2365 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_30d](http://iplists.firehol.org/?ipset=proxyrss_30d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|8452 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyrss_7d](http://iplists.firehol.org/?ipset=proxyrss_7d)|[proxyrss.com](http://www.proxyrss.com) open proxies syndicated from multiple sources.|ipv4 hash:ip|5257 unique IPs|updated every 4 hours from [this link](http://www.proxyrss.com/proxylists/all.gz)
[proxyspy](http://iplists.firehol.org/?ipset=proxyspy)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|298 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_1d](http://iplists.firehol.org/?ipset=proxyspy_1d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|1203 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_30d](http://iplists.firehol.org/?ipset=proxyspy_30d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|6216 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxyspy_7d](http://iplists.firehol.org/?ipset=proxyspy_7d)|[ProxySpy](http://spys.ru/en/) open proxies (updated hourly)|ipv4 hash:ip|2882 unique IPs|updated every 1 hour from [this link](http://txt.proxyspy.net/proxy.txt)
[proxz](http://iplists.firehol.org/?ipset=proxz)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|25 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_1d](http://iplists.firehol.org/?ipset=proxz_1d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|239 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_30d](http://iplists.firehol.org/?ipset=proxz_30d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|2552 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[proxz_7d](http://iplists.firehol.org/?ipset=proxz_7d)|[proxz.com](http://www.proxz.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|969 unique IPs|updated every 1 hour from [this link](http://www.proxz.com/proxylists.xml)
[pushing_inertia_blocklist](http://iplists.firehol.org/?ipset=pushing_inertia_blocklist)|[Pushing Inertia](https://github.com/pushinginertia/ip-blacklist) IPs of hosting providers that are known to host various bots, spiders, scrapers, etc. to block access from these providers to web servers.|ipv4 hash:net|864 subnets, 50729096 unique IPs|updated every 1 day from [this link](https://raw.githubusercontent.com/pushinginertia/ip-blacklist/master/ip_blacklist.conf)
[ransomware_cryptowall_ps](http://iplists.firehol.org/?ipset=ransomware_cryptowall_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is CW_PS_IPBL: CryptoWall Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|0 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/CW_PS_IPBL.txt)
[ransomware_feed](http://iplists.firehol.org/?ipset=ransomware_feed)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. The IPs in this list have been extracted from the tracker data feed.|ipv4 hash:ip|4034 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_locky_c2](http://iplists.firehol.org/?ipset=ransomware_locky_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is LY_C2_IPBL: Locky Ransomware C2 URL blocklist.|ipv4 hash:ip|213 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_C2_IPBL.txt)
[ransomware_locky_ps](http://iplists.firehol.org/?ipset=ransomware_locky_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is LY_PS_IPBL: Locky Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|6 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/LY_PS_IPBL.txt)
[ransomware_online](http://iplists.firehol.org/?ipset=ransomware_online)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. The IPs in this list have been extracted from the tracker data feed, filtering only online IPs.|ipv4 hash:ip|948 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/feeds/csv/)
[ransomware_rw](http://iplists.firehol.org/?ipset=ransomware_rw)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list includes TC_PS_IPBL, LY_C2_IPBL, TL_C2_IPBL, TL_PS_IPBL and it is the recommended blocklist. It might not catch everything, but the false positive rate should be low. However, false positives are possible, especially with regards to RW_IPBL. IP addresses associated with Ransomware Payment Sites (*_PS_IPBL) or Locky botnet C&Cs (LY_C2_IPBL) stay listed on RW_IPBL for a time of 30 days after the last appearence. This means that an IP address stays listed on RW_IPBL even after the threat has been eliminated (e.g. the VPS / server has been suspended by the hosting provider) for another 30 days.|ipv4 hash:ip|11462 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt)
[ransomware_teslacrypt_ps](http://iplists.firehol.org/?ipset=ransomware_teslacrypt_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is TC_PS_IPBL: TeslaCrypt Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|10998 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TC_PS_IPBL.txt)
[ransomware_torrentlocker_c2](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_c2)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is TL_C2_IPBL: TorrentLocker Ransomware C2 IP blocklist.|ipv4 hash:ip|27 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_C2_IPBL.txt)
[ransomware_torrentlocker_ps](http://iplists.firehol.org/?ipset=ransomware_torrentlocker_ps)|[Abuse.ch Ransomware Tracker](https://ransomwaretracker.abuse.ch) Ransomware Tracker tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. By using data provided by Ransomware Tracker, hosting- and internet service provider (ISPs), as well as national CERTs/CSIRTs, law enforcement agencies (LEA) and security researchers can receive an overview on infrastructure used by Ransomware and whether these are actively being used by miscreant to commit fraud. This list is TL_PS_IPBL: TorrentLocker Ransomware Payment Sites IP blocklist.|ipv4 hash:ip|130 unique IPs|updated every 5 mins from [this link](https://ransomwaretracker.abuse.ch/downloads/TL_PS_IPBL.txt)
[ri_connect_proxies](http://iplists.firehol.org/?ipset=ri_connect_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|150 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_1d](http://iplists.firehol.org/?ipset=ri_connect_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|308 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_30d](http://iplists.firehol.org/?ipset=ri_connect_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|1821 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_connect_proxies_7d](http://iplists.firehol.org/?ipset=ri_connect_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open CONNECT proxies (this list is composed using an RSS feed)|ipv4 hash:ip|967 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/plab100.xml)
[ri_web_proxies](http://iplists.firehol.org/?ipset=ri_web_proxies)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|144 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_1d](http://iplists.firehol.org/?ipset=ri_web_proxies_1d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|456 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_30d](http://iplists.firehol.org/?ipset=ri_web_proxies_30d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|4452 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[ri_web_proxies_7d](http://iplists.firehol.org/?ipset=ri_web_proxies_7d)|[rosinstrument.com](http://www.rosinstrument.com) open HTTP proxies (this list is composed using an RSS feed)|ipv4 hash:ip|1523 unique IPs|updated every 1 hour from [this link](http://tools.rosinstrument.com/proxy/l100.xml)
[satellite](http://iplists.firehol.org/?ipset=satellite)|Satellite Service Providers -- [MaxMind GeoLite2](http://dev.maxmind.com/geoip/geoip2/geolite2/)|ipv4 hash:net|43 subnets, 11112 unique IPs|updated every 7 days from [this link](http://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip)
[sblam](http://iplists.firehol.org/?ipset=sblam)|[sblam.com](http://sblam.com) IPs used by web form spammers, during the last month|ipv4 hash:ip|10678 unique IPs|updated every 1 day from [this link](http://sblam.com/blacklist.txt)
[shunlist](http://iplists.firehol.org/?ipset=shunlist)|[AutoShun.org](http://autoshun.org/) IPs identified as hostile by correlating logs from distributed snort installations running the autoshun plugin|ipv4 hash:ip|500 unique IPs|updated every 4 hours from [this link](http://www.autoshun.org/files/shunlist.csv)
[snort_ipfilter](http://iplists.firehol.org/?ipset=snort_ipfilter)|[labs.snort.org](https://labs.snort.org/) supplied IP blacklist (this list seems to be updated frequently, but we found no information about it)|ipv4 hash:ip|2323 unique IPs|updated every 12 hours from [this link](http://labs.snort.org/feeds/ip-filter.blf)
[socks_proxy](http://iplists.firehol.org/?ipset=socks_proxy)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|80 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_1d](http://iplists.firehol.org/?ipset=socks_proxy_1d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|4664 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_30d](http://iplists.firehol.org/?ipset=socks_proxy_30d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|19564 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[socks_proxy_7d](http://iplists.firehol.org/?ipset=socks_proxy_7d)|[socks-proxy.net](http://www.socks-proxy.net/) open SOCKS proxies|ipv4 hash:ip|9125 unique IPs|updated every 10 mins from [this link](http://www.socks-proxy.net/)
[sorbs_anonymizers](http://iplists.firehol.org/?ipset=sorbs_anonymizers)|[Sorbs.net](https://www.sorbs.net/) List of open HTTP and SOCKS proxies.|ipv4 hash:net|595861 subnets, 607896 unique IPs|
sorbs_block|[Sorbs.net](https://www.sorbs.net/) List of hosts demanding that they never be tested by SORBS.|ipv4 hash:net|disabled|
[sorbs_dul](http://iplists.firehol.org/?ipset=sorbs_dul)|[Sorbs.net](https://www.sorbs.net/) Dynamic IP Addresses.|ipv4 hash:net|546217 subnets, 375579270 unique IPs|
[sorbs_escalations](http://iplists.firehol.org/?ipset=sorbs_escalations)|[Sorbs.net](https://www.sorbs.net/) Netblocks of spam supporting service providers, including those who provide websites, DNS or drop boxes for a spammer. Spam supporters are added on a 'third strike and you are out' basis, where the third spam will cause the supporter to be added to the list.|ipv4 hash:net|8 subnets, 2304 unique IPs|
[sorbs_new_spam](http://iplists.firehol.org/?ipset=sorbs_new_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 48 hours|ipv4 hash:net|101833 subnets, 103181 unique IPs|
[sorbs_noserver](http://iplists.firehol.org/?ipset=sorbs_noserver)|[Sorbs.net](https://www.sorbs.net/) IP addresses and Netblocks of where system administrators and ISPs owning the network have indicated that servers should not be present.|ipv4 hash:net|14896 subnets, 22981734 unique IPs|
[sorbs_recent_spam](http://iplists.firehol.org/?ipset=sorbs_recent_spam)|[Sorbs.net](https://www.sorbs.net/) List of hosts that have been noted as sending spam/UCE/UBE within the last 28 days (includes sorbs_new_spam)|ipv4 hash:net|1646557 subnets, 1735280 unique IPs|
[sorbs_smtp](http://iplists.firehol.org/?ipset=sorbs_smtp)|[Sorbs.net](https://www.sorbs.net/) List of SMTP Open Relays.|ipv4 hash:net|1684 subnets, 1691 unique IPs|
[sorbs_web](http://iplists.firehol.org/?ipset=sorbs_web)|[Sorbs.net](https://www.sorbs.net/) List of IPs which have spammer abusable vulnerabilities (e.g. FormMail scripts)|ipv4 hash:net|5807180 subnets, 6203733 unique IPs|
[sorbs_zombie](http://iplists.firehol.org/?ipset=sorbs_zombie)|[Sorbs.net](https://www.sorbs.net/) List of networks hijacked from their original owners, some of which have already used for spamming.|ipv4 hash:net|79 subnets, 1969412 unique IPs|
[sp_anti_infringement](http://iplists.firehol.org/?ipset=sp_anti_infringement)|IPs of Anti-Infringement organizations. (The site states they re-distribute this IP List from iblocklist.com)|ipv4 hash:net|10803 subnets, 136184374 unique IPs|updated every 1 day from [this link](https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=anti-infringement)
[sp_atma](http://iplists.firehol.org/?ipset=sp_atma)|Attackers who try to spy or remotely control others' computers by means such as Microsoft remote terminal, SSH, Telnet or shared desktops. Threats for email servers or users: spiders/bots, account hijacking, etc. Sites spreading virus, trojans, spyware, etc. or just being used by them to let their authors know that a new computer has been infected. Threats for servers: exploits, fake identities/agents, DDoS attackers, etc. Port scans, which are the first step towards more dangerous actions. Malicious P2P sharers or bad peers who spread malware, inject bad traffic or share fake archives. (The site states they re-distribute this IP List from iblocklist.com).|ipv4 hash:net|7421 subnets, 8771 unique IPs|updated every 1 day from [this link](https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=atma)
[sp_spammers](http://iplists.firehol.org/?ipset=sp_spammers)|Spammers. (The site states they re-distribute this IP List from iblocklist.com)|ipv4 hash:net|311 subnets, 312 unique IPs|updated every 1 day from [this link](https://blocklist.sigmaprojects.org/api.cfc?method=getList&lists=spammers)
[spamhaus_drop](http://iplists.firehol.org/?ipset=spamhaus_drop)|[Spamhaus.org](http://www.spamhaus.org) DROP list (according to their site this list should be dropped at tier-1 ISPs globally)|ipv4 hash:net|797 subnets, 25275392 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/drop.txt)
[spamhaus_edrop](http://iplists.firehol.org/?ipset=spamhaus_edrop)|[Spamhaus.org](http://www.spamhaus.org) EDROP (extended matches that should be used with DROP)|ipv4 hash:net|61 subnets, 807680 unique IPs|updated every 12 hours from [this link](http://www.spamhaus.org/drop/edrop.txt)
[sslbl](http://iplists.firehol.org/?ipset=sslbl)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) bad SSL traffic related to malware or botnet activities|ipv4 hash:ip|118 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist.csv)
[sslbl_aggressive](http://iplists.firehol.org/?ipset=sslbl_aggressive)|[Abuse.ch SSL Blacklist](https://sslbl.abuse.ch/) The aggressive version of the SSL IP Blacklist contains all IPs that SSLBL ever detected being associated with a malicious SSL certificate. Since IP addresses can be reused (e.g. when the customer changes), this blacklist may cause false positives. Hence I highly recommend you to use the standard version instead of the aggressive one.|ipv4 hash:ip|2322 unique IPs|updated every 30 mins from [this link](https://sslbl.abuse.ch/blacklist/sslipblacklist_aggressive.csv)
[sslproxies](http://iplists.firehol.org/?ipset=sslproxies)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|100 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_1d](http://iplists.firehol.org/?ipset=sslproxies_1d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|217 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_30d](http://iplists.firehol.org/?ipset=sslproxies_30d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|2667 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[sslproxies_7d](http://iplists.firehol.org/?ipset=sslproxies_7d)|[SSLProxies.org](http://www.sslproxies.org/) open SSL proxies|ipv4 hash:ip|742 unique IPs|updated every 10 mins from [this link](http://www.sslproxies.org/)
[stopforumspam](http://iplists.firehol.org/?ipset=stopforumspam)|[StopForumSpam.com](http://www.stopforumspam.com) Banned IPs used by forum spammers|ipv4 hash:ip|147439 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/bannedips.zip)
[stopforumspam_180d](http://iplists.firehol.org/?ipset=stopforumspam_180d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 180 days)|ipv4 hash:ip|289408 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_180.zip)
[stopforumspam_1d](http://iplists.firehol.org/?ipset=stopforumspam_1d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers in the last 24 hours|ipv4 hash:ip|4289 unique IPs|updated every 1 hour from [this link](http://www.stopforumspam.com/downloads/listed_ip_1.zip)
[stopforumspam_30d](http://iplists.firehol.org/?ipset=stopforumspam_30d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 30 days)|ipv4 hash:ip|59183 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_30.zip)
[stopforumspam_365d](http://iplists.firehol.org/?ipset=stopforumspam_365d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 365 days)|ipv4 hash:ip|581232 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_365.zip)
[stopforumspam_7d](http://iplists.firehol.org/?ipset=stopforumspam_7d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 7 days)|ipv4 hash:ip|19941 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_7.zip)
[stopforumspam_90d](http://iplists.firehol.org/?ipset=stopforumspam_90d)|[StopForumSpam.com](http://www.stopforumspam.com) IPs used by forum spammers (last 90 days)|ipv4 hash:ip|148906 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/listed_ip_90.zip)
[stopforumspam_toxic](http://iplists.firehol.org/?ipset=stopforumspam_toxic)|[StopForumSpam.com](http://www.stopforumspam.com) Networks that have large amounts of spambots and are flagged as toxic. Toxic IP ranges are infrequently changed.|ipv4 hash:net|82 subnets, 553047 unique IPs|updated every 1 day from [this link](http://www.stopforumspam.com/downloads/toxic_ip_cidr.txt)
[taichung](http://iplists.firehol.org/?ipset=taichung)|[Taichung Education Center](https://www.tc.edu.tw/net/netflow/lkout/recent/30) Blocked IP Addresses (attacks and bots).|ipv4 hash:ip|11530 unique IPs|updated every 1 day from [this link](https://www.tc.edu.tw/net/netflow/lkout/recent/30)
[talosintel_ipfilter](http://iplists.firehol.org/?ipset=talosintel_ipfilter)|[TalosIntel.com](http://talosintel.com/additional-resources/) List of known malicious network threats|ipv4 hash:ip|2302 unique IPs|updated every 15 mins from [this link](http://talosintel.com/feeds/ip-filter.blf)
[threatcrowd](http://iplists.firehol.org/?ipset=threatcrowd)|[Crowdsourced IP feed from ThreatCrowd](http://threatcrowd.blogspot.gr/2016/02/crowdsourced-feeds-from-threatcrowd.html). These feeds are not a substitute for the scale of auto-extracted command and control domains or the quality of some commercially provided feeds. But crowd-sourcing does go some way towards the quick sharing of threat intelligence between the community.|ipv4 hash:ip|6383 unique IPs|updated every 1 hour from [this link](https://www.threatcrowd.org/feeds/ips.txt)
[tor_exits](http://iplists.firehol.org/?ipset=tor_exits)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1034 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_1d](http://iplists.firehol.org/?ipset=tor_exits_1d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1085 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_30d](http://iplists.firehol.org/?ipset=tor_exits_30d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|2714 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[tor_exits_7d](http://iplists.firehol.org/?ipset=tor_exits_7d)|[TorProject.org](https://www.torproject.org) list of all current TOR exit points (TorDNSEL)|ipv4 hash:ip|1412 unique IPs|updated every 5 mins from [this link](https://check.torproject.org/exit-addresses)
[trustedsec_atif](http://iplists.firehol.org/?ipset=trustedsec_atif)|Artillery Threat Intelligence Feed and Banlist Feed|ipv4 hash:ip|1148 unique IPs|updated every 1 day from [this link](https://www.trustedsec.com/banlist.txt)
[turris_greylist](http://iplists.firehol.org/?ipset=turris_greylist)|[Turris Greylist](https://www.turris.cz/en/greylist) IPs that are blocked on the firewalls of Turris routers. The data are processed and clasified every week and behaviour of IP addresses that accessed a larger number of Turris routers is evaluated. The result is a list of addresses that have tried to obtain information about services on the router or tried to gain access to them. We do not recommend to use these data as a list of addresses that should be blocked but it can be used for example in analysis of the traffic in other networks.|ipv4 hash:ip|33276 unique IPs|updated every 7 days from [this link](https://www.turris.cz/greylist-data/greylist-latest.csv)
[urlvir](http://iplists.firehol.org/?ipset=urlvir)|[URLVir.com](http://www.urlvir.com/) Active Malicious IP Addresses Hosting Malware. URLVir is an online security service developed by NoVirusThanks Company Srl that automatically monitors changes of malicious URLs (executable files).|ipv4 hash:ip|76 unique IPs|updated every 1 day from [this link](http://www.urlvir.com/export-ip-addresses/)
[virbl](http://iplists.firehol.org/?ipset=virbl)|[VirBL](http://virbl.bit.nl/) is a project of which the idea was born during the RIPE-48 meeting. The plan was to get reports of virusscanning mailservers, and put the IP-addresses that were reported to send viruses on a blacklist.|ipv4 hash:ip|297 unique IPs|updated every 1 hour from [this link](http://virbl.bit.nl/download/virbl.dnsbl.bit.nl.txt)
[voipbl](http://iplists.firehol.org/?ipset=voipbl)|[VoIPBL.org](http://www.voipbl.org/) a distributed VoIP blacklist that is aimed to protects against VoIP Fraud and minimizing abuse for network that have publicly accessible PBX's. Several algorithms, external sources and manual confirmation are used before they categorize something as an attack and determine the threat level.|ipv4 hash:net|19896 subnets, 21057 unique IPs|updated every 4 hours from [this link](http://www.voipbl.org/update/)
[vxvault](http://iplists.firehol.org/?ipset=vxvault)|[VxVault](http://vxvault.net) The latest 100 additions of VxVault.|ipv4 hash:ip|67 unique IPs|updated every 12 hours from [this link](http://vxvault.net/ViriList.php?s=0&m=100)
[xroxy](http://iplists.firehol.org/?ipset=xroxy)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|58 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_1d](http://iplists.firehol.org/?ipset=xroxy_1d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|157 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_30d](http://iplists.firehol.org/?ipset=xroxy_30d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|764 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[xroxy_7d](http://iplists.firehol.org/?ipset=xroxy_7d)|[xroxy.com](http://www.xroxy.com) open proxies (this list is composed using an RSS feed)|ipv4 hash:ip|360 unique IPs|updated every 1 hour from [this link](http://www.xroxy.com/proxyrss.xml)
[yoyo_adservers](http://iplists.firehol.org/?ipset=yoyo_adservers)|[Yoyo.org](http://pgl.yoyo.org/adservers/) IPs of ad servers|ipv4 hash:ip|12870 unique IPs|updated every 12 hours from [this link](http://pgl.yoyo.org/adservers/iplist.php?ipformat=plain&showintro=0&mimetype=plaintext)
[zeus](http://iplists.firehol.org/?ipset=zeus)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) standard, contains the same data as the ZeuS IP blocklist (zeus_badips) but with the slight difference that it doesn't exclude hijacked websites (level 2) and free web hosting providers (level 3). This means that this blocklist contains all IPv4 addresses associated with ZeuS C&Cs which are currently being tracked by ZeuS Tracker. Hence this blocklist will likely cause some false positives.|ipv4 hash:ip|155 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist)
[zeus_badips](http://iplists.firehol.org/?ipset=zeus_badips)|[Abuse.ch Zeus tracker](https://zeustracker.abuse.ch) badips includes IPv4 addresses that are used by the ZeuS trojan. It is the recommened blocklist if you want to block only ZeuS IPs. It excludes IP addresses that ZeuS Tracker believes to be hijacked (level 2) or belong to a free web hosting provider (level 3). Hence the false postive rate should be much lower compared to the standard ZeuS IP blocklist.|ipv4 hash:ip|139 unique IPs|updated every 30 mins from [this link](https://zeustracker.abuse.ch/blocklist.php?download=badips)
Reference in New Issue View Git Blame Copy Permalink