bitwire-it/ipblocklist

Machine-readable .txt IP blocklist from ThreatFox by Abuse.ch, updated every hour.

Daily feed of bad IPs (with blacklist hit scores)

(Temporarily out of service w.e.f 19 September 2026; ETA: ???) Malicious URLs identified by scanning various public URL sources using the Google Safe Browsing API (over 6 billion URLs scanned daily)

Plaintext blacklist IP, update 4 times a day.

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

Aggregation of lists of malicious IP addresses, to be blocked in the WAN > LAN direction, integrated into firewalls: FortiGate, Palo Alto, pfSense, IPtables ...

Pi-hole and AdguardHome Block lists updated every 24Hrs, we aim for less than 0.01% false positive rate, block malware, C&C infrastructure, phishing and banking threats

Spydi ThreatIntel Feed is built on open-source threat intelligence, community-maintained blocklists, and public security research.

Data-Shield provides maintained IPv4 blocklists for inbound filtering on firewalls, gateways and web application firewalls.