IPsum is a threat intelligence feed based on 30+ different publicly available lists of suspicious and/or malicious IP addresses. All lists are automatically retrieved and parsed on a daily (24h) basis and the final result is pushed to this repository. List is made of IP addresses together with a total number of (black)list occurrence (for each). Greater the number, lesser the chance of false positive detection and/or dropping in (inbound) monitored traffic. Also, list is sorted from most (problematic) to least occurent IP addresses.
As an example, to get a fresh and ready-to-deploy auto-ban list of "bad IPs" that appear on at least 3 (black)lists you can run:
curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1
If you want to try it with ipset, you can do the following:
sudo su
apt -qq install iptables ipset
ipset -q flush ipsum
ipset -q create ipsum hash:net
for ip in $(curl --compressed https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -v -E "\s[1-2]$" | cut -f 1); do ipset add ipsum $ip; done
iptables -I INPUT -m set --match-set ipsum src -j DROP
In directory levels you can find preprocessed raw IP lists based on number of blacklist occurrences (e.g. levels/3.txt holds IP addresses that can be found on 3 or more blacklists).
| IP | DNS lookup | Number of (black)lists |
|---|---|---|
| 185.31.175.220 | - | 10 |
| 205.185.115.39 | mx.learnmorefun.org | 10 |
| 185.220.102.243 | 185-220-102-243.torservers.net | 10 |
| 162.247.74.74 | wiebe.tor-exit.calyxinstitute.org | 10 |
| 185.31.175.252 | - | 10 |
| 171.25.193.25 | tor-exit5-readme.dfri.se | 10 |
| 185.220.102.253 | tor-exit-relay-7.anonymizing-proxy.digitalcourage.de | 10 |
| 116.110.252.176 | - | 10 |
| 185.31.175.226 | - | 9 |
| 5.183.209.217 | - | 9 |
| 167.71.2.26 | - | 9 |
| 185.220.102.244 | 185-220-102-244.torservers.net | 9 |
| 185.220.102.248 | tor-exit-relay-2.anonymizing-proxy.digitalcourage.de | 9 |
| 185.220.101.1 | berlin01.tor-exit.artikel10.org | 9 |
| 128.199.226.249 | - | 9 |
| 45.61.186.123 | - | 9 |
| 212.192.241.124 | - | 9 |
| 221.181.185.111 | - | 9 |
| 185.220.100.254 | tor-exit-3.zbau.f3netze.de | 9 |
| 89.163.249.244 | srv1264.dedicated.server-hosting.expert | 9 |
| 45.88.137.253 | - | 9 |
| 212.192.241.37 | - | 9 |
| 89.163.243.88 | ca011.calcit.dedicated.server-hosting.expert | 9 |
| 141.98.10.246 | while-alerte.flightcrown.com | 9 |
| 205.185.120.71 | - | 9 |
| 221.131.165.33 | - | 9 |
| 209.141.33.121 | - | 9 |
| 221.131.165.75 | - | 9 |
| 185.38.175.132 | - | 9 |
| 221.131.165.50 | - | 9 |
| 195.133.18.210 | - | 9 |
| 179.43.187.37 | - | 9 |
| 164.92.242.15 | - | 9 |
| 185.31.175.207 | - | 9 |
| 45.153.160.132 | - | 9 |
| 45.153.160.135 | - | 9 |
| 45.153.160.134 | - | 9 |
| 209.141.62.185 | - | 9 |
| 116.110.156.69 | - | 9 |
| 185.31.175.228 | - | 8 |
| 107.189.11.153 | luxembourgtor2 | 8 |
| 162.247.74.206 | rosaluxemburg.tor-exit.calyxinstitute.org | 8 |
| 89.234.157.254 | marylou.nos-oignons.net | 8 |
| 185.107.47.215 | tor-exit.r1.ci.ax | 8 |
| 162.247.74.27 | turing.tor-exit.calyxinstitute.org | 8 |
| 199.19.224.231 | server.thewelloff.us | 8 |
| 185.220.102.246 | 185-220-102-246.torservers.net | 8 |
| 185.220.102.247 | 185-220-102-247.torservers.net | 8 |
| 185.220.102.242 | 185-220-102-242.torservers.net | 8 |
| 185.220.102.249 | tor-exit-relay-3.anonymizing-proxy.digitalcourage.de | 8 |
| 211.22.65.18 | 211-22-65-18.hinet-ip.hinet.net | 8 |
| 141.98.10.63 | - | 8 |
| 5.2.69.50 | - | 8 |
| 205.185.114.149 | - | 8 |
| 171.25.193.77 | tor-exit1-readme.dfri.se | 8 |
| 171.25.193.78 | tor-exit4-readme.dfri.se | 8 |
| 206.189.58.12 | - | 8 |
| 178.20.55.16 | marcuse-1.nos-oignons.net | 8 |
| 5.199.143.202 | ca235.calcit.dedicated.server-hosting.expert | 8 |
| 209.141.33.193 | mx.chinadomainregistry.org | 8 |
| 45.153.160.129 | - | 8 |
| 185.220.100.252 | tor-exit-1.zbau.f3netze.de | 8 |
| 83.149.87.180 | - | 8 |
| 176.10.99.200 | accessnow.org | 8 |
| 205.185.114.87 | - | 8 |
| 185.100.87.72 | iclnm.worlpeed.net | 8 |
| 185.220.102.4 | communityexit.torservers.net | 8 |
| 185.130.44.108 | tor-exit-se1.privex.cc | 8 |
| 198.144.121.93 | - | 8 |
| 45.153.160.140 | - | 8 |
| 23.183.82.135 | - | 8 |
| 209.141.44.165 | - | 8 |
| 141.98.10.179 | er.includeswitche.com | 8 |
| 185.243.218.50 | tor.terrahost.no | 8 |
| 185.220.103.7 | anatkamm.tor-exit.calyxinstitute.org | 8 |
| 185.31.175.231 | - | 8 |
| 36.110.228.254 | - | 8 |
| 185.100.86.74 | - | 8 |
| 104.244.77.101 | luxembourgtor8.lu | 8 |
| 171.25.193.20 | tor-exit0-readme.dfri.se | 8 |
| 195.133.18.24 | slot0.epaperitaliait.com | 8 |
| 176.10.104.240 | tor1e1.digitale-gesellschaft.ch | 8 |
| 159.223.54.243 | - | 8 |
| 209.141.47.245 | - | 8 |
| 185.191.124.143 | - | 8 |
| 185.220.102.250 | tor-exit-relay-4.anonymizing-proxy.digitalcourage.de | 8 |
| 80.67.172.162 | algrothendieck.nos-oignons.net | 8 |
| 64.113.32.29 | tor.t-3.net | 8 |
| 89.163.154.91 | srv1258.dedicated.server-hosting.expert | 8 |
| 209.141.32.141 | smtp9.dfsfasfasf.xyz | 8 |
| 163.172.213.212 | trenecito.noconname.org | 8 |
| 185.56.80.65 | onion.xor.sc | 8 |
| 185.129.61.1 | tor-project-exit1.dotsrc.org | 8 |
| 185.220.102.245 | 185-220-102-245.torservers.net | 8 |
| 45.153.160.131 | - | 8 |
| 205.185.119.40 | smtp17.mib360realestate.com | 8 |
| 185.170.114.25 | this-is-a-tor-node---10.artikel5ev.de | 8 |
| 205.185.119.112 | - | 8 |
| 45.88.137.100 | - | 8 |
| 185.220.101.32 | tor-exit-32.for-privacy.net | 8 |
| 185.31.175.243 | - | 8 |
| 185.31.175.240 | - | 8 |
| 185.31.175.247 | - | 8 |
| 23.183.82.180 | - | 8 |
| 209.141.52.25 | jsebean.com | 8 |
| 23.183.81.227 | - | 8 |
| 162.247.73.192 | - | 8 |
| 198.98.51.189 | tor.teitel.net | 8 |
| 107.189.7.175 | luxembourgtor22.lu | 8 |
| 185.31.175.215 | - | 8 |
| 141.98.10.82 | - | 8 |
| 205.185.123.252 | - | 8 |
| 164.92.252.236 | - | 8 |
| 185.100.87.202 | - | 8 |
| 107.189.10.137 | exitrelay21.medvideos-tor.org | 7 |
| 20.206.86.43 | - | 7 |
| 45.155.204.39 | - | 7 |
| 128.31.0.13 | tor-exit.csail.mit.edu | 7 |
| 159.223.2.20 | - | 7 |
| 209.14.131.233 | 209-14-131-233.as270353.com.br | 7 |
| 162.247.74.201 | kunstler.tor-exit.calyxinstitute.org | 7 |
| 162.247.74.200 | kiriakou.tor-exit.calyxinstitute.org | 7 |
| 23.183.81.249 | - | 7 |
| 167.71.12.34 | - | 7 |
| 89.248.168.112 | security.criminalip.com | 7 |
| 109.70.100.20 | tor-exit-anonymizer.appliedprivacy.net | 7 |
| 222.186.30.112 | - | 7 |
| 23.129.64.130 | - | 7 |
| 176.111.173.238 | - | 7 |
| 205.185.122.230 | server.jcolideles.com | 7 |
| 109.201.133.100 | 7 | |
| 221.131.165.62 | - | 7 |
| 221.131.165.65 | - | 7 |
| 205.185.125.72 | - | 7 |
| 198.96.155.3 | exit.tor.uwaterloo.ca | 7 |
| 164.92.242.65 | - | 7 |
| 185.107.47.171 | tor-exit.r2.ci.ax | 7 |
| 185.220.101.7 | berlin01.tor-exit.artikel10.org | 7 |
| 185.220.101.3 | berlin01.tor-exit.artikel10.org | 7 |
| 185.14.97.147 | tor-exit-node.no | 7 |
| 23.129.64.217 | - | 7 |
| 18.27.197.252 | wholesomeserver.media.mit.edu | 7 |
| 45.153.160.2 | - | 7 |
| 80.82.77.139 | dojo.census.shodan.io | 7 |
| 221.181.185.94 | - | 7 |
| 23.183.81.116 | - | 7 |
| 104.244.72.132 | quetzalcoatl-relays.org | 7 |
| 178.20.55.18 | marcuse-2.nos-oignons.net | 7 |
| 185.220.101.4 | berlin01.tor-exit.artikel10.org | 7 |
| 81.17.18.62 | block1-che.interlayer.co.uk | 7 |
| 167.99.130.6 | - | 7 |
| 5.2.73.229 | - | 7 |
| 222.186.42.137 | - | 7 |
| 209.127.17.242 | - | 7 |
| 185.107.70.56 | tor-exit.r3.ci.ax | 7 |
| 209.141.51.224 | - | 7 |
| 192.160.102.170 | ogopogo.relay.coldhak.com | 7 |
| 185.220.100.253 | tor-exit-2.zbau.f3netze.de | 7 |
| 185.220.100.255 | tor-exit-4.zbau.f3netze.de | 7 |
| 195.254.135.76 | - | 7 |
| 91.219.237.21 | 178911033-dedicated.serverastra.com | 7 |
| 104.244.78.168 | luxembourgtor47.lu | 7 |
| 94.230.208.147 | tor3e1.digitale-gesellschaft.ch | 7 |
| 94.230.208.148 | tor3e3.digitale-gesellschaft.ch | 7 |
| 185.165.168.229 | - | 7 |
| 192.42.116.16 | tor-exit.hartvoorinternetvrijheid.nl | 7 |
| 192.42.116.17 | this-is-a-tor-exit-node-hviv117.hviv.nl | 7 |
| 166.70.207.2 | this.is.a.tor.node.xmission.com | 7 |
| 104.244.73.13 | luxembourgtorexit1 | 7 |
| 20.195.196.210 | - | 7 |
| 107.189.14.165 | luxembourgtor33.lu | 7 |
| 185.31.175.213 | - | 7 |
| 222.187.238.58 | - | 7 |
| 185.220.101.137 | tor-exit-137.relayon.org | 7 |
| 81.17.18.59 | block1-che.interlayer.co.uk | 7 |
| 222.186.180.130 | - | 7 |
| 185.220.103.8 | mariellefranco.tor-exit.calyxinstitute.org | 7 |
| 185.31.175.235 | - | 7 |
| 116.105.217.54 | - | 7 |
| 104.244.77.122 | luxembourgtor9.lu | 7 |
| 162.247.74.216 | phoolandevi.tor-exit.calyxinstitute.org | 7 |
| 162.247.74.217 | perry.fellwock.tor-exit.calyxinstitute.org | 7 |
| 162.247.74.213 | snowden.tor-exit.calyxinstitute.org | 7 |
| 178.73.215.171 | 178-73-215-171-static.glesys.net | 7 |
| 107.189.28.100 | luxembourgtor25.lu | 7 |
| 171.227.221.48 | dynamic-ip-adsl.viettel.vn | 7 |
| 45.144.225.69 | - | 7 |
| 222.186.42.7 | - | 7 |
| 222.187.254.41 | - | 7 |
| 116.105.164.98 | - | 7 |
| 164.92.242.50 | - | 7 |
| 164.92.242.51 | - | 7 |
| 20.206.109.196 | - | 7 |
| 116.105.73.105 | - | 7 |
| 185.67.82.114 | tor-ou.effi.org | 7 |
| 178.17.174.14 | 178-17-174-14.static.as43289.net | 7 |
| 104.244.72.168 | luxembourgtor7.lu | 7 |
| 45.13.104.179 | nosoignons.cust.milkywan.net | 7 |
| 199.195.250.77 | ny1.exit.tor.alkyl.eu.org | 7 |
| 164.92.250.114 | - | 7 |
| 179.43.187.36 | - | 7 |
| 62.102.148.69 | - | 7 |
| 104.244.76.13 | tor-exit-node.spongebob.nicdex.com | 7 |
| 185.220.101.61 | tor-exit-61.for-privacy.net | 7 |
| 94.153.161.234 | 94-153-161-234.ip.kyivstar.net | 7 |
| 221.181.185.151 | - | 7 |
| 221.181.185.159 | - | 7 |
| 20.206.135.34 | - | 7 |
| 167.99.39.128 | - | 7 |
| 23.183.81.54 | - | 7 |
| 45.153.160.133 | - | 7 |
| 45.153.160.137 | - | 7 |
| 45.153.160.138 | - | 7 |
| 185.220.100.242 | tor-exit-15.zbau.f3netze.de | 7 |
| 185.220.100.243 | tor-exit-16.zbau.f3netze.de | 7 |
| 185.220.100.241 | tor-exit-14.zbau.f3netze.de | 7 |
| 185.220.100.249 | tor-exit-10.zbau.f3netze.de | 7 |
| 185.31.175.196 | - | 7 |
| 209.127.17.234 | - | 7 |
| 222.186.42.13 | - | 7 |
| 222.187.232.39 | - | 7 |
| 80.82.70.228 | group-ib.ru | 7 |
| 104.244.79.196 | luxembourgtor11.lu | 7 |
| 45.153.160.139 | - | 7 |
| 109.227.63.3 | srv-109-227-63-3.static.a1.hr | 7 |
| 192.42.116.13 | this-is-a-tor-exit-node-hviv113.hviv.nl | 7 |
| 107.189.28.84 | luxembourgtor49.lu | 7 |
| 221.10.33.104 | - | 7 |
| 185.220.102.252 | tor-exit-relay-6.anonymizing-proxy.digitalcourage.de | 7 |
| 138.197.189.44 | - | 7 |
| 104.244.72.7 | luxembourgtor53.lu | 7 |
| 212.192.246.95 | programssearch.earacheevince.com | 7 |
| 107.189.8.65 | lux2.tor-exit-node.net | 7 |
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent