10-20x more blocks for your CrowdSec bouncers — 120k+ IPs from 36 free threat feeds
IP blocklist extension for Ubuntu ufw firewall
Install and persist the official CrowdSec firewall bouncer on UniFi OS devices (UDM, UDM SE, UDR) with automatic recovery from firmware updates
🔒 BlackIPforFirewall is a 🤖 script for Mikrotik Router OS that updates a list of IPs with bad reputation in the firewall list. 🛡️ Protect your network from malware, spam, and other unwanted activities! The IPs are regularly updated for maximum protection. 🚀 Fast & easy 2 install, BlackIPforFirewall is your ally in the fight for network security
The open IP-fraud database that never sleeps. 1,200,000+ confirmed-malicious IPs (C2, botnets, phishing, brute force) scored and categorised, caught by our honeypot sensors and community reports, plus 219,000+ disposable email domains. Rebuilt every 30 minutes. Free, MIT, no API key.
Manually curated IP Blocklist. Recommended only to update your firewalls weekly with this list. Please read how to use before implementing.
Automated threat intelligence for UniFi firewalls. Syncs IP lists from Spamhaus, Firehol, abuse.ch into UniFi firewall groups. Free alternative to UniFi Cyber-Secure.
A bash script to ban large numbers of IP addresses published in blacklists.
Threat-feed IP block automation for Linux and macOS firewalls (iptables, nftables, pf) with cron-ready updates, dry-run previews, and package releases.
Automated IPv4 threat intelligence: combined blacklist from 100+ feeds with confidence scoring. Updated every 3h.
🌵 Command and Action routine Server
A collection of IP addresses and hostnames banned by Greek law and global security services like Spamhaus for MikroTik firewall configurations
A blocklist based on sources from Bad Packets Report
Aggregated IP/ASN threat intel. ~20 MB mmap DB + ~5 MB netset blocklist.
Prowl is an API that allows you to send IP and in return obtain the reputation of the IP as well as indicators of attacks and indicators of compromise associated with the address. Lupovis monitors the web in real time and identifies malicious IP addresses for you.
A daily-updated blocklist of IP addresses involved in malicious HTTP attacks that bypassed multiple security layers. Ideal for protecting web servers against probing, exploits, and bot traffic.
An Actix-web middleware for checking IP addresses to identify unglobal, malicious, and TOR connections. It provides the browser with a zero-click Proof of Work (PoW) task, or, if JavaScript is disabled, a one-click CAPTCHA image challenge.
collection of bash scripts to fill iptables with ip addresses
Fast, lightweight in-memory IPv4 blocklist for Nginx with ngx_lua, using a compact /16 prefix index and binary search; blocked requests are closed with Nginx 444.
To associate your repository with the ip-blocklist topic, visit your repo's landing page and select "manage topics."