# ------------------------------------------------------------------------------ # pf-badhost Popular Blocklists rev 0.1 October 17 2021 # ------------------------------------------------------------------------------ # Here is a list of URLs to some popular IP blocklists. # The pf-badhost project has no affiliation with these blocklist providers, we're simply # sharing a list of URLs to common, popular blocklists we've used and heard good things about. # You the user are responsible for complying with any licences or restrictions # that may be imposed by the blocklist providers. # URLs may be commented out with a '#' or ';' character. # You can feed a local copy of this list to pf-badhost with the '-l' flag. # Block Lists # Enable/Add/Remove Blocklist URLs as you see fit. # IPv4 supports arbitrarily formated lists such as JSON, XML, CSV, HTML etc # IPv6 requires preformatted lists (1 address per line) ;; Download popular blocklists ;; General lists of botnets, spammers and bruteforcers. https://www.binarydefense.com/banlist.txt https://rules.emergingthreats.net/blockrules/compromised-ips.txt https://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txt https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level2.netset ;; Spamhause DROP lists (Dont Route Or Peer) https://www.spamhaus.org/drop/drop.txt https://www.spamhaus.org/drop/edrop.txt ;; Block Shodan https://isc.sans.edu/api/threatlist/shodan/?text ;; Block botnets + command and control servers https://feodotracker.abuse.ch/downloads/ipblocklist.txt https://sslbl.abuse.ch/blacklist/sslipblacklist.txt ;; StopForumSpam.com Toxic IP Ranges ;; Download Rate limited to 24/day, so disabled by default # https://www.stopforumspam.com/downloads/toxic_ip_cidr.txt ;; Blocklist.de - Attackers by Port/Service ;; Combined list of all blocklist.de lists # https://lists.blocklist.de/lists/all.txt ;; SSH attackers # https://lists.blocklist.de/lists/22.txt # https://lists.blocklist.de/lists/ssh.txt # https://lists.blocklist.de/lists/bruteforcelogin.txt ;; FTP attackers # https://lists.blocklist.de/lists/21.txt # https://lists.blocklist.de/lists/ftp.txt # https://lists.blocklist.de/lists/proftpd.txt ;; HTTP/Apache attackers # https://lists.blocklist.de/lists/80.txt # https://lists.blocklist.de/lists/443.txt # https://lists.blocklist.de/lists/apache.txt ;; SMTP/E-Mail Attackers # https://lists.blocklist.de/lists/25.txt # https://lists.blocklist.de/lists/110.txt # https://lists.blocklist.de/lists/143.txt # https://lists.blocklist.de/lists/993.txt # https://lists.blocklist.de/lists/email.txt # https://lists.blocklist.de/lists/mail.txt # https://lists.blocklist.de/lists/imap.txt # https://lists.blocklist.de/lists/courierimap.txt # https://lists.blocklist.de/lists/courierpop3.txt # https://lists.blocklist.de/lists/pop3.txt # https://lists.blocklist.de/lists/postfix.txt ;; VOIP/SIP Attackers # https://lists.blocklist.de/lists/asterisk.txt # https://lists.blocklist.de/lists/sip.txt ;; IRC / Bots # https://lists.blocklist.de/lists/ircbot.txt # https://lists.blocklist.de/lists/bots.txt