Attribution
Where the data comes from
This page credits 1009 feeds, retired ones included: who publishes each one, under which licence, and where the upstream file lives. It exists because most open licences ask for exactly that, and because a verdict you cannot trace is not evidence.
722 active feeds, 287 retired or disabled entries kept for the record
Licence labels are the registry's reading of each provider's terms on the audit date; the linked upstream page is authoritative. Feeds marked share-alike or attribution carry those obligations into anything we redistribute.
Vulnerability data
The CVE catalogue has its own upstreams (CVE Program, NVD, CISA KEV, OSV, GitHub advisories, CERT-FR…), its own licences and the notices every copy carries.
CVE data sources and licencesFeeds by provider
FireHOL148
| Feed | Licence | Last successful fetch |
|---|---|---|
| FireHOL - Bds Atifinactive | not stated | — |
| FireHOL - Bitcoin Nodesinactive | not stated | — |
| FireHOL - Bitcoin Nodes 1dinactive | not stated | — |
| FireHOL - Bitcoin Nodes 30dinactive | not stated | — |
| FireHOL - Bitcoin Nodes 7dinactive | not stated | — |
| FireHOL - Blocklist De | not stated | — |
| FireHOL - Blocklist De Apache | not stated | — |
| FireHOL - Blocklist De Bots | not stated | — |
| FireHOL - Blocklist De Bruteforce | not stated | — |
| FireHOL - Blocklist De Ftp | not stated | — |
| FireHOL - Blocklist De Imap | not stated | — |
| FireHOL - Blocklist De Mail | not stated | — |
| FireHOL - Blocklist De Sip | not stated | — |
| FireHOL - Blocklist De Ssh | not stated | — |
| FireHOL - Blocklist De Strongips | not stated | — |
| FireHOL - Blocklist Net Ua | not stated | — |
| FireHOL - Botscout | not stated | — |
| FireHOL - Botscout 1dinactive | not stated | — |
| FireHOL - Botscout 30dinactive | not stated | — |
| FireHOL - Botscout 7dinactive | not stated | — |
| FireHOL - Botvrij Dst | no commercial grant | — |
| FireHOL - Botvrij Src | no commercial grant | — |
| FireHOL - Bruteforceblocker | not stated | — |
| FireHOL - Ciarmy | not stated | — |
| FireHOL - Cidr Report Bogons | not stated | — |
| FireHOL - Cleantalkinactive | not stated | — |
| FireHOL - Cleantalk 1dinactive | not stated | — |
| FireHOL - Cleantalk 30dinactive | not stated | — |
| FireHOL - Cleantalk 7dinactive | not stated | — |
| FireHOL - Cleantalk Newinactive | not stated | — |
| FireHOL - Cleantalk New 1dinactive | not stated | — |
| FireHOL - Cleantalk New 30dinactive | not stated | — |
| FireHOL - Cleantalk New 7dinactive | not stated | — |
| FireHOL - Cleantalk Top20inactive | not stated | — |
| FireHOL - Cleantalk Updatedinactive | not stated | — |
| FireHOL - Cleantalk Updated 1dinactive | not stated | — |
| FireHOL - Cleantalk Updated 30dinactive | not stated | — |
| FireHOL - Cleantalk Updated 7dinactive | not stated | — |
| FireHOL - Cta Cryptowallinactive | not stated | — |
| FireHOL - Cybercrimeinactive | not stated | — |
| FireHOL - Darklist Deinactive | not stated | — |
| FireHOL - Dm Tor | not stated | — |
| FireHOL - Dshield | not stated | — |
| FireHOL - Dshield 1dinactive | not stated | — |
| FireHOL - Dshield 30dinactive | not stated | — |
| FireHOL - Dshield 7dinactive | not stated | — |
| FireHOL - Et Block | not stated | — |
| FireHOL - Et Compromised | not stated | — |
| FireHOL - Et Dshield | not stated | — |
| FireHOL - Et Spamhaus | no commercial grant | — |
| FireHOL - Et Tor | not stated | — |
| FireHOL - Feodo Badips | no commercial grant | — |
| FireHOL - Firehol Abusers 1dinactive | not stated | — |
| FireHOL - Firehol Abusers 30d | not stated | — |
| FireHOL - Firehol Anonymous | not stated | — |
| FireHOL - Firehol Level1 | not stated | — |
| FireHOL - Firehol Level2 | not stated | — |
| FireHOL - Firehol Level3 | not stated | — |
| FireHOL - Firehol Level4 | not stated | — |
| FireHOL - Firehol Proxies | not stated | — |
| FireHOL - Firehol Webclient | not stated | — |
| FireHOL - Firehol Webserver | not stated | — |
| FireHOL - Gpf Comics | not stated | — |
| FireHOL - Graphiclineweb | not stated | — |
| FireHOL - Greensnow | no commercial grant | — |
| FireHOL - Iblocklist Abuse Palevoinactive | not stated | — |
| FireHOL - Iblocklist Abuse Spyeyeinactive | not stated | — |
| FireHOL - Iblocklist Abuse Zeusinactive | not stated | — |
| FireHOL - Iblocklist Ciarmy Malicious | not stated | — |
| FireHOL - Iblocklist Cidr Report Bogons | not stated | — |
| FireHOL - Iblocklist Cruzit Web Attacks | not stated | — |
| FireHOL - Iblocklist Isp Aolinactive | not stated | — |
| FireHOL - Iblocklist Isp Attinactive | not stated | — |
| FireHOL - Iblocklist Isp Cablevisioninactive | not stated | — |
| FireHOL - Iblocklist Isp Charterinactive | not stated | — |
| FireHOL - Iblocklist Isp Comcastinactive | not stated | — |
| FireHOL - Iblocklist Isp Embarqinactive | not stated | — |
| FireHOL - Iblocklist Isp Qwestinactive | not stated | — |
| FireHOL - Iblocklist Isp Sprintinactive | not stated | — |
| FireHOL - Iblocklist Isp Suddenlinkinactive | not stated | — |
| FireHOL - Iblocklist Isp Twcinactive | not stated | — |
| FireHOL - Iblocklist Isp Verizoninactive | not stated | — |
| FireHOL - Iblocklist Malc0de | not stated | — |
| FireHOL - Iblocklist Onion Router | not stated | — |
| FireHOL - Iblocklist Org Activisioninactive | not stated | — |
| FireHOL - Iblocklist Org Appleinactive | not stated | — |
| FireHOL - Iblocklist Org Blizzardinactive | not stated | — |
| FireHOL - Iblocklist Org Crowd Controlinactive | not stated | — |
| FireHOL - Iblocklist Org Electronic Artsinactive | not stated | — |
| FireHOL - Iblocklist Org Joostinactive | not stated | — |
| FireHOL - Iblocklist Org Linden Labinactive | not stated | — |
| FireHOL - Iblocklist Org Logmeininactive | not stated | — |
| FireHOL - Iblocklist Org Ncsoftinactive | not stated | — |
| FireHOL - Iblocklist Org Nintendoinactive | not stated | — |
| FireHOL - Iblocklist Org Pandorainactive | not stated | — |
| FireHOL - Iblocklist Org Pirate Bayinactive | not stated | — |
| FireHOL - Iblocklist Org Punkbusterinactive | not stated | — |
| FireHOL - Iblocklist Org Riot Gamesinactive | not stated | — |
| FireHOL - Iblocklist Org Sony Onlineinactive | not stated | — |
| FireHOL - Iblocklist Org Square Enixinactive | not stated | — |
| FireHOL - Iblocklist Org Steaminactive | not stated | — |
| FireHOL - Iblocklist Org Ubisoftinactive | not stated | — |
| FireHOL - Iblocklist Org Xfireinactive | not stated | — |
| FireHOL - Iblocklist Pedophilesinactive | not stated | — |
| FireHOL - Iblocklist Spamhaus Drop | no commercial grant | — |
| FireHOL - Iblocklist Yoyo Adservers | not stated | — |
| FireHOL - Myip | not stated | — |
| FireHOL - Php Commenters | not stated | — |
| FireHOL - Php Commenters 1dinactive | not stated | — |
| FireHOL - Php Commenters 30dinactive | not stated | — |
| FireHOL - Php Commenters 7dinactive | not stated | — |
| FireHOL - Php Dictionary | not stated | — |
| FireHOL - Php Dictionary 1dinactive | not stated | — |
| FireHOL - Php Dictionary 30dinactive | not stated | — |
| FireHOL - Php Dictionary 7dinactive | not stated | — |
| FireHOL - Php Harvesters | not stated | — |
| FireHOL - Php Harvesters 1dinactive | not stated | — |
| FireHOL - Php Harvesters 30dinactive | not stated | — |
| FireHOL - Php Harvesters 7dinactive | not stated | — |
| FireHOL - Php Spammers | not stated | — |
| FireHOL - Php Spammers 1dinactive | not stated | — |
| FireHOL - Php Spammers 30dinactive | not stated | — |
| FireHOL - Php Spammers 7dinactive | not stated | — |
| FireHOL - Sblam | not stated | — |
| FireHOL - Socks Proxy | not stated | — |
| FireHOL - Socks Proxy 1dinactive | not stated | — |
| FireHOL - Socks Proxy 30dinactive | not stated | — |
| FireHOL - Socks Proxy 7dinactive | not stated | — |
| FireHOL - Spamhaus Drop | no commercial grant | — |
| FireHOL - Spamhaus Edrop | no commercial grant | — |
| FireHOL - Sslproxies | not stated | — |
| FireHOL - Sslproxies 1dinactive | not stated | — |
| FireHOL - Sslproxies 30dinactive | not stated | — |
| FireHOL - Sslproxies 7dinactive | not stated | — |
| FireHOL - Stopforumspam | no commercial grant | — |
| FireHOL - Stopforumspam 180d | no commercial grant | — |
| FireHOL - Stopforumspam 1dinactive | no commercial grant | — |
| FireHOL - Stopforumspam 30dinactive | no commercial grant | — |
| FireHOL - Stopforumspam 365d | no commercial grant | — |
| FireHOL - Stopforumspam 7dinactive | no commercial grant | — |
| FireHOL - Stopforumspam 90d | no commercial grant | — |
| FireHOL - Stopforumspam Toxic | no commercial grant | — |
| FireHOL - Tor Exits | not stated | — |
| FireHOL - Tor Exits 1dinactive | not stated | — |
| FireHOL - Tor Exits 30dinactive | not stated | — |
| FireHOL - Tor Exits 7dinactive | not stated | — |
| FireHOL - Vxvault | not stated | — |
| FireHOL - Yoyo Adservers | not stated | — |
Independent maintainers103
| Feed | Licence | Last successful fetch |
|---|---|---|
| AdAway Default Blocklist | unverified | — |
| AdAway Hostsinactive | not stated | — |
| AdGuard DNS Domains | not stated | — |
| AdGuard DNS Filter (raw)inactive | GPL-3.0 | — |
| AFAT Malicious IPs Feed | no commercial grant | — |
| Alienvault Reputation Generic | no commercial grant | — |
| Badd‑Boyz Hosts | no commercial grant | — |
| Bambenek DGA Feed High | no commercial grant | — |
| BarbBlock Hosts File | MIT | — |
| Blocklist Project Fraud (NL)inactive | Unlicense | — |
| Blocklist Project Phishing (NL)inactive | Unlicense | — |
| CINSSCORE Bad Guys | not stated | — |
| CoinBlockerLists All | GPL-3.0 | — |
| CoinBlockerLists Browser | GPL-3.0 | — |
| CoinBlockerLists Optionalinactive | not stated | — |
| CyberCure Blocked URL Feedinactive | not stated | — |
| CyberCure Hash Feedinactive | not stated | — |
| CyberCure IP Feedinactive | not stated | — |
| CyberHost Malware & Phishing Blocklist | CC-BY-SA-4.0 | — |
| Dan Pollock’s hosts (someonewhocares.org) | no commercial grant | — |
| Dandelion Sprout Anti‑Malware (AdGuard Home) | unverified | — |
| Data-Shield IPv4 Blocklist | no commercial grant | — |
| DeveloperDan Ads & Tracking (extended) | Apache-2.0 | — |
| DeveloperDan AMP Hosts (extended) | Apache-2.0 | — |
| DeveloperDan Dating Services (extended)inactive | Apache-2.0 | — |
| DeveloperDan Hate & Junk (extended)inactive | Apache-2.0 | — |
| DeveloperDan Tracking Aggressive (extended) | Apache-2.0 | — |
| Disposable Email Blocklist | unverified | — |
| Disposable Email Domains (disposable.github.io) | MIT | — |
| DNS CH TXT Version Bind | no commercial grant | — |
| DNS Recursion Desired | no commercial grant | — |
| DNS Recursion Desired ANY | no commercial grant | — |
| EasyList Domains | not stated | — |
| EasyPrivacy Domains | not stated | — |
| ELLIO IP Feed Community | no commercial grant | — |
| Emerging Threats Compromised IPs | no commercial grant | — |
| FadeMind add.Dead | MIT | — |
| FadeMind add.Risk | MIT | — |
| Feodo IP Blocklistinactive | no commercial grant | — |
| Feodo Tracker (Abuse.ch) | no commercial grant | — |
| Frellwit’s Swedish Hosts File | GPL-3.0 | — |
| Infoblox Threat Intelligence | CC-BY-4.0 | — |
| IP Protocol 41 | no commercial grant | — |
| IPSpamList Public Feed | no commercial grant | — |
| IPsum Level 1 | Unlicense | — |
| IPsum Level 2 | Unlicense | — |
| IPsum Level 3 | Unlicense | — |
| IPsum Level 4 | Unlicense | — |
| IPsum Level 5 | Unlicense | — |
| IPsum Level 6 | Unlicense | — |
| IPsum Level 7 | Unlicense | — |
| IPsum Level 8 | Unlicense | — |
| Macedonian Pi‑hole Blocklist | not stated | — |
| MalSilo Domain Listinactive | not stated | — |
| MalSilo IP List | not stated | — |
| Matomo Referrer Spam Blacklist | not stated | — |
| Metasploit CVE Exploits | not stated | — |
| MMotti Pi‑hole Regexinactive | MIT | — |
| MontySecurity C2 Trackerinactive | not stated | — |
| MVPS Hosts | no commercial grant | — |
| MVPS HOSTSinactive | no commercial grant | — |
| NoCoin Domains | not stated | — |
| NoCoin Filter List (hosts) | MIT | — |
| OpenPhish Feedinactive | no commercial grant | — |
| OpenPhish URL List | no commercial grant | — |
| Peter Lowe’s Ad Servers List | not stated | — |
| Phishing URL Blocklist | unverified | — |
| Polish Pi‑hole Filter | no commercial grant | — |
| POP3 Gropers | not stated | — |
| S3 Amazonaws - Simple Ad.txt | GPL-3.0 | — |
| S3 Amazonaws - Simple Malvertising.txt | GPL-3.0 | — |
| S3 Amazonaws - Simple Tracking.txt | GPL-3.0 | — |
| Scam Blocklist (DurableNapkin) | MIT | — |
| Shreshta NRD Monthlyinactive | no commercial grant | — |
| Shreshta NRD Weeklyinactive | no commercial grant | — |
| SIP Invitation | no commercial grant | — |
| SIP Query | no commercial grant | — |
| SIP Registration | no commercial grant | — |
| SMTP Data | no commercial grant | — |
| SMTP Greet | no commercial grant | — |
| Snort IP Block Listinactive | unverified | — |
| Spam404 Online Scams List | not stated | — |
| SSH Bruteforce IPs | not stated | — |
| SSH Password Auth | no commercial grant | — |
| StopForumSpam Toxic Domainsinactive | no commercial grant | — |
| Telnet Bruteforce IPs | not stated | — |
| Telnet Login | no commercial grant | — |
| Threatview C2 Hunt Feed | no commercial grant | — |
| Threatview Domain Blocklist | no commercial grant | — |
| Threatview IP Blocklist | no commercial grant | — |
| Threatview MD5 Hash Blocklist | no commercial grant | — |
| Threatview OSINT Threat Feed | no commercial grant | — |
| Threatview SHA File Hash Blocklist | no commercial grant | — |
| Threatview URL Blocklist | no commercial grant | — |
| Tor ALL Nodes | not stated | — |
| Tor Exit Nodes | not stated | — |
| URL Seen in Honeypots | not stated | — |
| URLhaus Host File | no commercial grant | — |
| URLHaus Malware URLsinactive | no commercial grant | — |
| URLhaus MISP | no commercial grant | — |
| VeleSila yHosts | no commercial grant | — |
| VNC RFB | no commercial grant | — |
| VXvault URL Listinactive | not stated | — |
VirusShare61
| Feed | Licence | Last successful fetch |
|---|---|---|
| VirusShare - Archive MD5 Lists | not stated | — |
| VirusShare - Sample MD5 List 00440inactive | not stated | — |
| VirusShare - Sample MD5 List 00441inactive | not stated | — |
| VirusShare - Sample MD5 List 00442inactive | not stated | — |
| VirusShare - Sample MD5 List 00443inactive | not stated | — |
| VirusShare - Sample MD5 List 00444inactive | not stated | — |
| VirusShare - Sample MD5 List 00445inactive | not stated | — |
| VirusShare - Sample MD5 List 00446inactive | not stated | — |
| VirusShare - Sample MD5 List 00447inactive | not stated | — |
| VirusShare - Sample MD5 List 00448inactive | not stated | — |
| VirusShare - Sample MD5 List 00449inactive | not stated | — |
| VirusShare - Sample MD5 List 00450inactive | not stated | — |
| VirusShare - Sample MD5 List 00451inactive | not stated | — |
| VirusShare - Sample MD5 List 00452inactive | not stated | — |
| VirusShare - Sample MD5 List 00453inactive | not stated | — |
| VirusShare - Sample MD5 List 00454inactive | not stated | — |
| VirusShare - Sample MD5 List 00455inactive | not stated | — |
| VirusShare - Sample MD5 List 00456inactive | not stated | — |
| VirusShare - Sample MD5 List 00457inactive | not stated | — |
| VirusShare - Sample MD5 List 00458inactive | not stated | — |
| VirusShare - Sample MD5 List 00459inactive | not stated | — |
| VirusShare - Sample MD5 List 00460inactive | not stated | — |
| VirusShare - Sample MD5 List 00461inactive | not stated | — |
| VirusShare - Sample MD5 List 00462inactive | not stated | — |
| VirusShare - Sample MD5 List 00463inactive | not stated | — |
| VirusShare - Sample MD5 List 00464inactive | not stated | — |
| VirusShare - Sample MD5 List 00465inactive | not stated | — |
| VirusShare - Sample MD5 List 00466inactive | not stated | — |
| VirusShare - Sample MD5 List 00467inactive | not stated | — |
| VirusShare - Sample MD5 List 00468inactive | not stated | — |
| VirusShare - Sample MD5 List 00469inactive | not stated | — |
| VirusShare - Sample MD5 List 00470inactive | not stated | — |
| VirusShare - Sample MD5 List 00471inactive | not stated | — |
| VirusShare - Sample MD5 List 00472inactive | not stated | — |
| VirusShare - Sample MD5 List 00473inactive | not stated | — |
| VirusShare - Sample MD5 List 00474inactive | not stated | — |
| VirusShare - Sample MD5 List 00475inactive | not stated | — |
| VirusShare - Sample MD5 List 00476inactive | not stated | — |
| VirusShare - Sample MD5 List 00477inactive | not stated | — |
| VirusShare - Sample MD5 List 00478inactive | not stated | — |
| VirusShare - Sample MD5 List 00479inactive | not stated | — |
| VirusShare - Sample MD5 List 00480inactive | not stated | — |
| VirusShare - Sample MD5 List 00481inactive | not stated | — |
| VirusShare - Sample MD5 List 00482inactive | not stated | — |
| VirusShare - Sample MD5 List 00483inactive | not stated | — |
| VirusShare - Sample MD5 List 00484inactive | not stated | — |
| VirusShare - Sample MD5 List 00485inactive | not stated | — |
| VirusShare - Sample MD5 List 00486inactive | not stated | — |
| VirusShare - Sample MD5 List 00487inactive | not stated | — |
| VirusShare - Sample MD5 List 00488inactive | not stated | — |
| VirusShare - Sample MD5 List 00489inactive | not stated | — |
| VirusShare - Sample MD5 List 00490inactive | not stated | — |
| VirusShare - Sample MD5 List 00491inactive | not stated | — |
| VirusShare - Sample MD5 List 00492inactive | not stated | — |
| VirusShare - Sample MD5 List 00493inactive | not stated | — |
| VirusShare - Sample MD5 List 00494inactive | not stated | — |
| VirusShare - Sample MD5 List 00495inactive | not stated | — |
| VirusShare - Sample MD5 List 00496inactive | not stated | — |
| VirusShare - Sample MD5 List 00497inactive | not stated | — |
| VirusShare - Sample MD5 List 00498inactive | not stated | — |
| VirusShare - Sample MD5 List 00499inactive | not stated | — |
ShadowWhisperer37
| Feed | Licence | Last successful fetch |
|---|---|---|
| ShadowWhisperer - Ads | Unlicense | — |
| ShadowWhisperer - Adultinactive | Unlicense | — |
| ShadowWhisperer - Apple Bloat | Unlicense | — |
| ShadowWhisperer - Bloatinactive | not stated | — |
| ShadowWhisperer - Chatinactive | Unlicense | — |
| ShadowWhisperer - Cryptocurrency | Unlicense | — |
| ShadowWhisperer - Datinginactive | Unlicense | — |
| ShadowWhisperer - DNS | Unlicense | — |
| ShadowWhisperer - Dynamic DNS | Unlicense | — |
| ShadowWhisperer - Fonts | Unlicense | — |
| ShadowWhisperer - Free Hosting | Unlicense | — |
| ShadowWhisperer - Gamblinginactive | Unlicense | — |
| ShadowWhisperer - IPs Probes | Unlicense | — |
| ShadowWhisperer - IPs Scanners | Unlicense | — |
| ShadowWhisperer - IPs Threats | Unlicense | — |
| ShadowWhisperer - IPs Threats Unclassified | Unlicense | — |
| ShadowWhisperer - IPs Tunnels (VPN) | Unlicense | — |
| ShadowWhisperer - Junk | Unlicense | — |
| ShadowWhisperer - Malware | Unlicense | — |
| ShadowWhisperer - Marketing | Unlicense | — |
| ShadowWhisperer - Microsoft Bloat | Unlicense | — |
| ShadowWhisperer - Remote Control | Unlicense | — |
| ShadowWhisperer - Risk | Unlicense | — |
| ShadowWhisperer - Scam | Unlicense | — |
| ShadowWhisperer - Shockinactive | Unlicense | — |
| ShadowWhisperer - Top Level Domainsinactive | Unlicense | — |
| ShadowWhisperer - Tracking | Unlicense | — |
| ShadowWhisperer - Tunnels | Unlicense | — |
| ShadowWhisperer - Typosquatting | Unlicense | — |
| ShadowWhisperer - URL Shorteners | Unlicense | — |
| ShadowWhisperer - Wild Ads | Unlicense | — |
| ShadowWhisperer - Wild Apple | Unlicense | — |
| ShadowWhisperer - Wild Chatinactive | Unlicense | — |
| ShadowWhisperer - Wild Fonts | Unlicense | — |
| ShadowWhisperer - Wild Microsoft | Unlicense | — |
| ShadowWhisperer - Wild Tracking | Unlicense | — |
| ShadowWhisperer - Wild Tunnel | Unlicense | — |
Blocklist Project24
| Feed | Licence | Last successful fetch |
|---|---|---|
| Blocklist Project - Abuse List.txt | Unlicense | — |
| Blocklist Project - Ads List.txt | Unlicense | — |
| Blocklist Project - Crypto List.txt | Unlicense | — |
| Blocklist Project - Drugs List.txtinactive | Unlicense | — |
| Blocklist Project - Everything List.txtinactive | Unlicense | — |
| Blocklist Project - Facebook List.txtinactive | Unlicense | — |
| Blocklist Project - Fraud List.txt | Unlicense | — |
| Blocklist Project - Gambling List.txtinactive | Unlicense | — |
| Blocklist Project - Malware List.txt | Unlicense | — |
| Blocklist Project - Phishing List.txt | Unlicense | — |
| Blocklist Project - Piracy List.txtinactive | Unlicense | — |
| Blocklist Project - Porn List.txtinactive | Unlicense | — |
| Blocklist Project - Ransomware List.txt | Unlicense | — |
| Blocklist Project - Redirect List.txt | Unlicense | — |
| Blocklist Project - Scam List.txt | Unlicense | — |
| Blocklist Project - Tiktok List.txtinactive | Unlicense | — |
| Blocklist Project - Torrent List.txtinactive | Unlicense | — |
| Blocklist Project - Tracking List.txt | Unlicense | — |
| Blocklist Project – Crypto | Unlicense | — |
| Blocklist Project – Drugsinactive | Unlicense | — |
| Blocklist Project – Ransomware | Unlicense | — |
| Blocklist Project – Redirect | Unlicense | — |
| Blocklist Project – Tracking | Unlicense | — |
| Blocklist Project – Vapinginactive | Unlicense | — |
gluetun-servers (qdm12)21
| Feed | Licence | Last successful fetch |
|---|---|---|
| gluetun-servers - airvpn VPN server IPs | MIT | — |
| gluetun-servers - cyberghost VPN server IPs | MIT | — |
| gluetun-servers - expressvpn VPN server IPs | MIT | — |
| gluetun-servers - fastestvpn VPN server IPs | MIT | — |
| gluetun-servers - hidemyass VPN server IPs | MIT | — |
| gluetun-servers - ipvanish VPN server IPs | MIT | — |
| gluetun-servers - ivpn VPN server IPs | MIT | — |
| gluetun-servers - mullvad VPN server IPs | MIT | — |
| gluetun-servers - nordvpn VPN server IPs | MIT | — |
| gluetun-servers - privado VPN server IPs | MIT | — |
| gluetun-servers - private internet access VPN server IPs | MIT | — |
| gluetun-servers - privatevpn VPN server IPs | MIT | — |
| gluetun-servers - protonvpn VPN server IPs | MIT | — |
| gluetun-servers - purevpn VPN server IPs | MIT | — |
| gluetun-servers - slickvpn VPN server IPs | MIT | — |
| gluetun-servers - surfshark VPN server IPs | MIT | — |
| gluetun-servers - torguard VPN server IPs | MIT | — |
| gluetun-servers - vpn unlimited VPN server IPs | MIT | — |
| gluetun-servers - vpnsecure VPN server IPs | MIT | — |
| gluetun-servers - vyprvpn VPN server IPs | MIT | — |
| gluetun-servers - windscribe VPN server IPs | MIT | — |
Hectorm21
| Feed | Licence | Last successful fetch |
|---|---|---|
| Hectorm - Hmirror - Adaway.org | MIT | — |
| Hectorm - Hmirror - Adblock-nocoin-list | MIT | — |
| Hectorm - Hmirror - Adguard-simplified | MIT | — |
| Hectorm - Hmirror - Anudeepnd-adservers | MIT | — |
| Hectorm - Hmirror - Easylist | MIT | — |
| Hectorm - Hmirror - Easyprivacy | MIT | — |
| Hectorm - Hmirror - Eth-phishing-detectinactive | not stated | — |
| Hectorm - Hmirror - Fademind-add.2o7net | MIT | — |
| Hectorm - Hmirror - Fademind-add.dead | MIT | — |
| Hectorm - Hmirror - Fademind-add.risk | MIT | — |
| Hectorm - Hmirror - Fademind-add.spam | MIT | — |
| Hectorm - Hmirror - Kadhosts | MIT | — |
| Hectorm - Hmirror - Matomo.org-spammers | MIT | — |
| Hectorm - Hmirror - Mitchellkrogza-badd-boyz-hosts | MIT | — |
| Hectorm - Hmirror - Pgl.yoyo.org | MIT | — |
| Hectorm - Hmirror - Ransomwaretracker.abuse.chinactive | not stated | — |
| Hectorm - Hmirror - Someonewhocares.org | MIT | — |
| Hectorm - Hmirror - Spam404.com | MIT | — |
| Hectorm - Hmirror - Stevenblack | MIT | — |
| Hectorm - Hmirror - Winhelp2002.mvps.org | no commercial grant | — |
| Hectorm - Hmirror - Zerodot1-coinblockerlists-browserinactive | not stated | — |
MISP warninglists20
| Feed | Licence | Last successful fetch |
|---|---|---|
| MISP Warninglist - Alpha Strike Labs scanner ranges | CC0-1.0 | — |
| MISP Warninglist - BinaryEdge scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Bitsight scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Censys scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Criminal IP scanner ranges | CC0-1.0 | — |
| MISP Warninglist - FOFA scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Internet Census (Bitsight) scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Intrinsec scanner ranges | CC0-1.0 | — |
| MISP Warninglist - IPinfo scanner ranges | CC0-1.0 | — |
| MISP Warninglist - LeakIX (MISP) scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Mandiant ASM scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Netlas scanner ranges | CC0-1.0 | — |
| MISP Warninglist - ONYPHE scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Quake scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Rapid7 scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Recyber scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Shadowserver scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Shodan scanner ranges | CC0-1.0 | — |
| MISP Warninglist - Stretchoid scanner ranges | CC0-1.0 | — |
| MISP Warninglist - ZoomEye scanner ranges | CC0-1.0 | — |
JPCERT/CC17
| Feed | Licence | Last successful fetch |
|---|---|---|
| JPCERT/CC - Phishing URLs 2025-01 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-02 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-03 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-04 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-05 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-06 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-07 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-08 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-09 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-10 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-11 | not stated | — |
| JPCERT/CC - Phishing URLs 2025-12 | not stated | — |
| JPCERT/CC - Phishing URLs 2026-01 | not stated | — |
| JPCERT/CC - Phishing URLs 2026-02 | not stated | — |
| JPCERT/CC - Phishing URLs 2026-03 | not stated | — |
| JPCERT/CC - Phishing URLs 2026-04 | not stated | — |
| JPCERT/CC - Phishing URLs 2026-05 | not stated | — |
abuse.ch13
| Feed | Licence | Last successful fetch |
|---|---|---|
| abuse.ch - SSL Blacklist (SHA1 Fingerprints) | no commercial grant | — |
| abuse.ch - SSLBL JA3 Fingerprintsinactive | no commercial grant | — |
| Feodo Tracker - Botnet C2 IPs | no commercial grant | — |
| MalwareBazaar - Full CSV (file metadata) | no commercial grant | — |
| MalwareBazaar - Full MD5 Hashes | no commercial grant | — |
| MalwareBazaar - Full SHA-1 Hashes | no commercial grant | — |
| MalwareBazaar - Full SHA-256 Hashes | no commercial grant | — |
| MalwareBazaar - Recent Malware Hashesinactive | no commercial grant | — |
| MalwareBazaar - Recent MD5 Hashes | no commercial grant | — |
| MalwareBazaar - Recent SHA-1 Hashes | no commercial grant | — |
| MalwareBazaar - Recent SHA-256 Hashes | no commercial grant | — |
| URLhaus - 90-Day Malicious URLs | no commercial grant | — |
| URLhaus - Recent Malicious URLs | no commercial grant | — |
InfinityTec12
| Feed | Licence | Last successful fetch |
|---|---|---|
| InfinityTec – Adfilters | MIT | — |
| InfinityTec – Ads & Trackers | MIT | — |
| InfinityTec – Annoyances (pop‑ups & cookies)inactive | MIT | — |
| InfinityTec – Bad TLDsinactive | MIT | — |
| InfinityTec – Clickbait Sitesinactive | MIT | — |
| InfinityTec – Extra‑Strict | MIT | — |
| InfinityTec – Medical Pseudoscienceinactive | MIT | — |
| InfinityTec – Multi‑Level Marketing (MLM) Blocklistinactive | MIT | — |
| InfinityTec – Reddit Blocklistinactive | MIT | — |
| InfinityTec – Rednote (Xiaohongshu) Blocklistinactive | MIT | — |
| InfinityTec – Scams & Phishing | MIT | — |
| InfinityTec – TikTok Blocklistinactive | MIT | — |
Maltrail (stamparm)10
| Feed | Licence | Last successful fetch |
|---|---|---|
| Maltrail - Bitcoin Ransomware Trailsinactive | open | — |
| Maltrail - BlackCat/ALPHV Ransomware Trailsinactive | open | — |
| Maltrail - Cerber Ransomware Trails | open | — |
| Maltrail - Conti Ransomware Trails | open | — |
| Maltrail - LockBit Ransomware Trails | open | — |
| Maltrail - Locky Ransomware Trails | open | — |
| Maltrail - Ransomware Trailsinactive | open | — |
| Maltrail - REvil/Sodinokibi Ransomware Trails | open | — |
| Maltrail - Ryuk Ransomware Trails | open | — |
| Maltrail - WannaCry Ransomware Trails | open | — |
OSV.dev10
| Feed | Licence | Last successful fetch |
|---|---|---|
| OSV.dev - Malicious crates.io Packages | free, attribution | — |
| OSV.dev - Malicious GitHub Actions | free, attribution | — |
| OSV.dev - Malicious Go Modules | free, attribution | — |
| OSV.dev - Malicious Hex Packages | free, attribution | — |
| OSV.dev - Malicious Maven Packages | free, attribution | — |
| OSV.dev - Malicious npm Packages | free, attribution | — |
| OSV.dev - Malicious NuGet Packages | free, attribution | — |
| OSV.dev - Malicious Packagist Packages | free, attribution | — |
| OSV.dev - Malicious PyPI Packages | free, attribution | — |
| OSV.dev - Malicious RubyGems Packages | free, attribution | — |
Phishing.Database10
| Feed | Licence | Last successful fetch |
|---|---|---|
| Free OSINT Pack - Phishing.Database Active IPs | open | — |
| Free OSINT Pack - Phishing.Database Active Now URLs | open | — |
| Free OSINT Pack - Phishing.Database New Domains Last Hourinactive | open | — |
| Phishing.Database - Active Phishing Domains | open | — |
| Phishing.Database - Active Phishing Domains | MIT | — |
| Phishing.Database - Active Phishing Links | MIT | — |
| Phishing.Database - Active Phishing URLs | open | — |
| Phishing.Database - New Domains Today | MIT | — |
| Phishing.Database - New Links Today | MIT | — |
| Phishing.Database - New Phishing Domains (Today) | open | — |
Blocklist9
| Feed | Licence | Last successful fetch |
|---|---|---|
| Blocklist - All Apache attacks (48h) | not stated | — |
| Blocklist - All Attacks (48h) | not stated | — |
| Blocklist - All FTP attacks (48h) | not stated | — |
| Blocklist - All IMAP attacks (1h) | not stated | — |
| Blocklist - All Mail attacks (48h) | not stated | — |
| Blocklist - All RFI-Attacks, REG-Bots, IRC-Bots or BadBots attacks (48h) | not stated | — |
| Blocklist - All SIP/VoIP/Asterisk attacks (48h) | not stated | — |
| Blocklist - All SSH attacks (48h) | not stated | — |
| Blocklist - All StrongIPs attacks (2 month + 5k attacks) | not stated | — |
RPiList9
| Feed | Licence | Last successful fetch |
|---|---|---|
| RPiList – Child Protectioninactive | no commercial grant | — |
| RPiList – Corona Blocklist | no commercial grant | — |
| RPiList – Crypto Scams | no commercial grant | — |
| RPiList – Fake Scienceinactive | no commercial grant | — |
| RPiList – Malware | no commercial grant | — |
| RPiList – MS‑Office Telemetry | no commercial grant | — |
| RPiList – Overblockinactive | no commercial grant | — |
| RPiList – Samsung Ads & Telemetry | no commercial grant | — |
| RPiList – Streaming & Piracyinactive | no commercial grant | — |
Firebog8
| Feed | Licence | Last successful fetch |
|---|---|---|
| Firebog - Admiral | not stated | — |
| Firebog - Easylist Dutch | not stated | — |
| Firebog - Kowabit | not stated | — |
| Firebog - Neohostsbasic | not stated | — |
| Firebog - Prigent Adultinactive | not stated | — |
| Firebog - Prigent Crypto | not stated | — |
| Firebog - Rpilist Malware | not stated | — |
| Firebog - Rpilist Phishing | not stated | — |
Opendbl Net8
| Feed | Licence | Last successful fetch |
|---|---|---|
| Opendbl Net - Blocklistde All.list | not stated | — |
| Opendbl Net - Bruteforce.list | not stated | — |
| Opendbl Net - Dshield.list | not stated | — |
| Opendbl Net - Etknown.list | not stated | — |
| Opendbl Net - Ipsum.list | not stated | — |
| Opendbl Net - Sslblock.listinactive | not stated | — |
| Opendbl Net - Talos.listinactive | not stated | — |
| Opendbl Net - Tor Exit.list | not stated | — |
Romain Marcoux8
| Feed | Licence | Last successful fetch |
|---|---|---|
| Romain Marcoux - Full Domains Aa.txt | MIT | — |
| Romain Marcoux - Full Domains Ab.txt | MIT | — |
| Romain Marcoux - Malicious IPs | MIT | — |
| Romain Marcoux - Malicious IPs | MIT | — |
| Romain Marcoux - Malicious IPs | MIT | — |
| Romain Marcoux - Malicious Outgoing IPsinactive | not stated | — |
| Romain Marcoux - Malicious Outgoing IPs | MIT | — |
| Romain Marcoux - Malicious Outgoing IPs | MIT | — |
VulnCheck7
| Feed | Licence | Last successful fetch |
|---|---|---|
| VulnCheck - Attacker Infrastructure: Attack Tooling | API key | — |
| VulnCheck - Attacker Infrastructure: Botnet Nodes | API key | — |
| VulnCheck - Attacker Infrastructure: C2 Servers | API key | — |
| VulnCheck - Attacker Infrastructure: Canary Attackers | API key | — |
| VulnCheck - Initial Access Exploits | API key | — |
| VulnCheck KEV - Known Exploited Vulnerabilities | API key | — |
| VulnCheck KEV - Known Exploited Vulnerabilities (Ransomware Campaign Use) | API key | — |
cyb3rko6
| Feed | Licence | Last successful fetch |
|---|---|---|
| cyb3rko – Discord Hostsinactive | not stated | — |
| cyb3rko – Instagram Hostsinactive | not stated | — |
| cyb3rko – Pinterest Hostsinactive | not stated | — |
| cyb3rko – Telegram Hostsinactive | not stated | — |
| cyb3rko – TikTok Hostsinactive | not stated | — |
| cyb3rko – Twitter Hostsinactive | not stated | — |
Malicious-Hash-Threat-List6
| Feed | Licence | Last successful fetch |
|---|---|---|
| Malicious-Hash-Threat-List - MD5 part aa | MIT | — |
| Malicious-Hash-Threat-List - MD5 part ab | MIT | — |
| Malicious-Hash-Threat-List - SHA-1 part aa | MIT | — |
| Malicious-Hash-Threat-List - SHA-256 part aa | MIT | — |
| Malicious-Hash-Threat-List - SHA-256 part ab | MIT | — |
| Malicious-Hash-Threat-List - SHA-256 part ac (growing) | MIT | — |
Malware-Filter6
| Feed | Licence | Last successful fetch |
|---|---|---|
| Malware-Filter - Botnet Filter | unverified | — |
| Malware-Filter - Botnet Filter IPs | unverified | — |
| Malware-Filter - Phishing Domains | unverified | — |
| Malware-Filter - Phishing Hosts.txt | unverified | — |
| Malware-Filter - Tracking Filter | unverified | — |
| Malware-Filter - URLhaus Domains | unverified | — |
Steven Black6
| Feed | Licence | Last successful fetch |
|---|---|---|
| Steven Black - 2o7Net | MIT | — |
| Steven Black - Hosts | MIT | — |
| Steven Black - KADhosts | MIT | — |
| Steven Black - Risk | MIT | — |
| Steven Black - Spam | MIT | — |
| Steven Black - UncheckyAds | MIT | — |
V Firebog Net6
| Feed | Licence | Last successful fetch |
|---|---|---|
| V Firebog Net - Adguard DNS.txt | not stated | — |
| V Firebog Net - Bill Stearns.txt | not stated | — |
| V Firebog Net - Easylist.txt | not stated | — |
| V Firebog Net - Easyprivacy.txt | not stated | — |
| V Firebog Net - Prigent Ads.txt | not stated | — |
| V Firebog Net - Prigent Malware.txt | not stated | — |
Frogeye5
| Feed | Licence | Last successful fetch |
|---|---|---|
| Frogeye - First Party Trackers | MIT | — |
| Frogeye – First‑Party Only Trackersinactive | not stated | — |
| Frogeye – First‑Party Trackers Hosts | MIT | — |
| Frogeye – Multi‑Party Only Trackers | MIT | — |
| Frogeye – Multi‑Party Trackers Hosts | MIT | — |
InterServer5
| Feed | Licence | Last successful fetch |
|---|---|---|
| InterServer - Bad IPs (1-week window) | not stated | — |
| InterServer - Bad IPs RBL (full) | not stated | — |
| InterServer - Bad IPs slim (48h window) | not stated | — |
| InterServer - Known malware MD5 (ClamAV hdb, legacy) | not stated | — |
| InterServer - Known malware SHA-256 (ClamAV hdb) | not stated | — |
PhishDestroy5
| Feed | Licence | Last successful fetch |
|---|---|---|
| PhishDestroy - Active Domains | MIT | — |
| PhishDestroy - Destroylist Domains | MIT | — |
| PhishDestroy - Destroylist Domains JSON | MIT | — |
| PhishDestroy - NiceNIC registrar malicious domains | MIT | — |
| PhishDestroy - ShortDot zone abuse IOCs | MIT | — |
UT Capitole5
| Feed | Licence | Last successful fetch |
|---|---|---|
| UT Capitole - cryptojacking | CC-BY-SA-4.0 | — |
| UT Capitole - ddos | CC-BY-SA-4.0 | — |
| UT Capitole - hacking | CC-BY-SA-4.0 | — |
| UT Capitole - phishing | CC-BY-SA-4.0 | — |
| UT Capitole - stalkerware | CC-BY-SA-4.0 | — |
CriticalPathSecurity4
| Feed | Licence | Last successful fetch |
|---|---|---|
| Free OSINT Pack - CriticalPathSecurity Cobalt Strike IPs | MIT | — |
| Free OSINT Pack - CriticalPathSecurity Collected IOCs | MIT | — |
| Free OSINT Pack - CriticalPathSecurity Miraiinactive | MIT | — |
| Free OSINT Pack - CriticalPathSecurity OpenPhish URLs | no commercial grant | — |
DigitalSide-IT4
| Feed | Licence | Last successful fetch |
|---|---|---|
| DigitalSide-IT OSINT - Latest Malicious Domainsinactive | open | — |
| DigitalSide-IT OSINT - Latest Malicious IPsinactive | open | — |
| DigitalSide-IT OSINT - Latest Malicious URLsinactive | open | — |
| DigitalSide-IT OSINT - Latest Malware SHA-256inactive | open | — |
MalShare4
| Feed | Licence | Last successful fetch |
|---|---|---|
| MalShare - Daily Sample Lists | free | — |
| MalShare - Recent APK Hashesinactive | API key | — |
| MalShare - Recent Malware Hashesinactive | API key | — |
| MalShare - Recent Sample Sources | API key | — |
OFAC4
| Feed | Licence | Last successful fetch |
|---|---|---|
| OFAC SDN - BTC Addresses | open | — |
| OFAC SDN - ETH Addresses | open | — |
| OFAC SDN - LTC Addresses | open | — |
| OFAC SDN - TRX Addresses | open | — |
OpenAI4
| Feed | Licence | Last successful fetch |
|---|---|---|
| OpenAI - AdsBot IP Ranges | free | — |
| OpenAI - ChatGPT-User IP Ranges | free | — |
| OpenAI - GPTBot IP Ranges | free | — |
| OpenAI - OAI-SearchBot IP Ranges | free | — |
RST Cloud4
| Feed | Licence | Last successful fetch |
|---|---|---|
| RST Cloud - Free Sample DOMAIN IOCs (random 100)inactive | unverified | — |
| RST Cloud - Free Sample HASH IOCs (random 100)inactive | unverified | — |
| RST Cloud - Free Sample IP IOCs (random 100)inactive | unverified | — |
| RST Cloud - Free Sample URL IOCs (random 100)inactive | unverified | — |
Tempest Solutions Company4
| Feed | Licence | Last successful fetch |
|---|---|---|
| Tempest Solutions Company - Banking Trojan | no commercial grant | — |
| Tempest Solutions Company - C2 Servers | no commercial grant | — |
| Tempest Solutions Company - Malware | no commercial grant | — |
| Tempest Solutions Company - Phishing | no commercial grant | — |
AnudeepND3
| Feed | Licence | Last successful fetch |
|---|---|---|
| AnudeepND – Adserversinactive | not stated | — |
| AnudeepND – CoinMiner | MIT | — |
| AnudeepND – Facebook Domainsinactive | MIT | — |
Cybercrime Tracker3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Cybercrime Tracker - Atmos Gatesinactive | not stated | — |
| Cybercrime Tracker - Atmos Sample Hashes (SHA1)inactive | not stated | — |
| Cybercrime Tracker - Pony/Fareit Gatesinactive | not stated | — |
Datadog3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Datadog - IP Ranges | free | — |
| Datadog - Malicious npm Packages | Apache-2.0 | — |
| Datadog - Malicious PyPI Packages | Apache-2.0 | — |
Google3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Google - Googlebot IP Ranges | free | — |
| Google - Special Crawlers IP Ranges | free | — |
| Google - User-Triggered Fetchers IP Ranges | free | — |
HaGeZi3
| Feed | Licence | Last successful fetch |
|---|---|---|
| HaGeZi - Gambling Domains (DNS Blocklist)inactive | no commercial grant | — |
| HaGeZi TIF - Threat Intelligence Feed Domains | no commercial grant | — |
| HaGeZi TIF - Threat Intelligence Feed IPs | no commercial grant | — |
Intercom3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Intercom - IP Ranges (AU) | free | — |
| Intercom - IP Ranges (EU) | free | — |
| Intercom - IP Ranges (US) | free | — |
IPnoise3
| Feed | Licence | Last successful fetch |
|---|---|---|
| IPnoise - Honeypot Attackers (1d) | free | — |
| IPnoise - Honeypot Attackers (30d) | free | — |
| IPnoise - Honeypot Attackers (7d) | free | — |
Nickoppen3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Nickoppen – Activision Blocklistinactive | not stated | — |
| Nickoppen – Advertisers (adotmob) Blocklist | not stated | — |
| Nickoppen – Blizzard Blocklistinactive | not stated | — |
Phishing Army3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Phishing Army - Blocklist | no commercial grant | — |
| Phishing Army - Blocklist Extended.txt | no commercial grant | — |
| Phishing Army – Extended Blocklistinactive | not stated | — |
Smokingwheels Github Io3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Smokingwheels Github Io - Fromlogtoshinactive | unverified | — |
| Smokingwheels Github Io - Searchengineinactive | unverified | — |
| Smokingwheels Github Io - Searchengine1inactive | unverified | — |
Spamhaus3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Spamhaus - ASN-DROPinactive | no commercial grant | — |
| Spamhaus DROP - IPv4 (direct) | no commercial grant | — |
| Spamhaus DROP - IPv6 (direct) | no commercial grant | — |
Stratosphere Lab (CTU Prague)3
| Feed | Licence | Last successful fetch |
|---|---|---|
| Stratosphere Lab (CTU Prague) - AIP Attackers Last 24h | GPL-3.0 | — |
| Stratosphere Lab (CTU Prague) - AIP Prioritize Consistent | GPL-3.0 | — |
| Stratosphere Lab (CTU Prague) - AIP Prioritize New | GPL-3.0 | — |
T1453
| Feed | Licence | Last successful fetch |
|---|---|---|
| T145 - Black Mirror Domain Blocklist | AGPL-3.0 | — |
| T145 - Black Mirror IPv4 Blocklist | AGPL-3.0 | — |
| T145 - Black Mirror IPv6 Blocklist | AGPL-3.0 | — |
Aabyss-Team (CN)2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Aabyss-Team (CN) - Ban-Hacker-IP-Plan DDoS/CC IPv4 | GPL-3.0 | — |
| Aabyss-Team (CN) - Ban-Hacker-IP-Plan Intrusion IPv4 | GPL-3.0 | — |
AlienVault OTX2
| Feed | Licence | Last successful fetch |
|---|---|---|
| AlienVault - IP Reputation Feed | no commercial grant | — |
| AlienVault OTX - Subscribed Pulse Indicators | API key | — |
Andre Vich2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Andre Vich - Community | MIT | — |
| Andre Vich - Domains All | MIT | — |
Apple2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Apple - Applebot IP Ranges | free | — |
| Apple - iCloud Private Relay Egress IP Ranges | free | — |
BBcan1772
| Feed | Licence | Last successful fetch |
|---|---|---|
| BBcan177 - DNSBL Malicious Domains (pfBlockerNG) | not stated | — |
| BBcan177 - Malicious IPs (pfBlockerNG) | not stated | — |
BitOK2
| Feed | Licence | Last successful fetch |
|---|---|---|
| BitOK - Tether Blacklist Events (Ethereum) | CC-BY-4.0 | — |
| BitOK - Tether Blacklist Events (Tron) | CC-BY-4.0 | — |
Bitwire2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Bitwire - Inbound Blocklist | MIT | — |
| Bitwire - Outbound Blocklist | MIT | — |
BlockConvert2
| Feed | Licence | Last successful fetch |
|---|---|---|
| BlockConvert - Domain Blocklist | MIT | — |
| BlockConvert - Malware Domainsinactive | MIT | — |
Borestad2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Borestad - AbuseIPDB Blocklist (1d) | no commercial grant | — |
| Borestad - AbuseIPDB Blocklist (30d) | no commercial grant | — |
dibdot2
| Feed | Licence | Last successful fetch |
|---|---|---|
| dibdot - DoH server domains | GPL-3.0 | — |
| dibdot - DoH server IPv4 | GPL-3.0 | — |
drb-ra2
| Feed | Licence | Last successful fetch |
|---|---|---|
| C2IntelFeeds - C2 Domains (30 day) | free, attribution | — |
| C2IntelFeeds - C2 IPs (30 day) | free, attribution | — |
elliotwutingfeng2
| Feed | Licence | Last successful fetch |
|---|---|---|
| elliotwutingfeng - Inversion DNSBL (GSB-flagged hostnames) | CC-BY-NC-SA-4.0 | — |
| elliotwutingfeng - Inversion DNSBL (GSB-flagged IPv4) | CC-BY-NC-SA-4.0 | — |
Gitlab2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Gitlab - Notrack Blocklist.txt | no commercial grant | — |
| Gitlab - Notrack Malware.txt | no commercial grant | — |
HoneyLabs2
| Feed | Licence | Last successful fetch |
|---|---|---|
| HoneyLabs - Active Exploiter IPs | no commercial grant | — |
| HoneyLabs - Malware Infrastructure IPs | no commercial grant | — |
Hybrid Analysis (CrowdStrike Falcon Sandbox)2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Hybrid Analysis - Malicious Samples | unverified | — |
| Hybrid Analysis - Public Feed (last 24h)inactive | unverified | — |
InfinitumIT2
| Feed | Licence | Last successful fetch |
|---|---|---|
| InfinitumIT - Attacker IPs (IOAs) | not stated | — |
| InfinitumIT - Attacker tool hashes (IOAs) | not stated | — |
Neo23x0 (Florian Roth)2
| Feed | Licence | Last successful fetch |
|---|---|---|
| signature-base - C2 IOCs | free, attribution | — |
| signature-base - Hash IOCs | free, attribution | — |
NetAPI2
| Feed | Licence | Last successful fetch |
|---|---|---|
| NetAPI - Compromised Domains/URLs (current) | CC-BY-4.0 | — |
| NetAPI - Compromised IPs (current) | CC-BY-4.0 | — |
NickSpaargaren2
| Feed | Licence | Last successful fetch |
|---|---|---|
| NickSpaargaren – No Amazoninactive | not stated | — |
| NickSpaargaren – No Google (Pi‑hole Google)inactive | Unlicense | — |
Pingdom2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Pingdom - Probe IPv4 | free | — |
| Pingdom - Probe IPv6 | free | — |
polkadot-js2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Polkadot-js - Phishing Site Domains | Apache-2.0 | — |
| Polkadot-js - Scam Crypto Addresses | Apache-2.0 | — |
Rectifyq2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Rectifyq - MISP Feed 2025 | not stated | — |
| Rectifyq - MISP Feed 2026 | not stated | — |
ScamSniffer2
| Feed | Licence | Last successful fetch |
|---|---|---|
| ScamSniffer - Scam Crypto Addresses | no commercial grant | — |
| ScamSniffer - Scam Domains | no commercial grant | — |
SecOps Institute2
| Feed | Licence | Last successful fetch |
|---|---|---|
| SecOps Institute - Tor All Nodes | not stated | — |
| SecOps Institute - Tor Exit Nodes | not stated | — |
Sefinek2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Sefinek - Blacklisted Emails | MIT | — |
| Sefinek - Malicious IP Addresses | MIT | — |
Sinfonietta2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Sinfonietta – Gambling Hostsinactive | MIT | — |
| Sinfonietta – Pornography Hostsinactive | MIT | — |
Stamparm2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Stamparm - Blackbook.txt | no commercial grant | — |
| Stamparm – Blackbookinactive | no commercial grant | — |
stamparm/maltrail2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Free OSINT Pack - Maltrail Malware Domainsinactive | open | — |
| Free OSINT Pack - Maltrail Static Trailsinactive | open | — |
StopForumSpam2
| Feed | Licence | Last successful fetch |
|---|---|---|
| StopForumSpam - Listed IPs (365d) | non-commercial | — |
| StopForumSpam - Toxic IP CIDR | non-commercial | — |
Team Cymru2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Team Cymru - Full Bogons (IPv4) | free | — |
| Team Cymru - Full Bogons (IPv6) | free | — |
The Block List Project2
| Feed | Licence | Last successful fetch |
|---|---|---|
| The Block List Project - Phishing List | Unlicense | — |
| The Block List Project - Ransomware Listinactive | Unlicense | — |
Tor Project2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Tor Project - Bulk Exit List (official) | free | — |
| Tor Project - Exit Addresses (TorDNSEL) | free | — |
UCEPROTECT2
| Feed | Licence | Last successful fetch |
|---|---|---|
| UCEPROTECT - Level 1 (rbldnsd zone) | free | — |
| UCEPROTECT - Level 2 (rbldnsd zone, /24 allocations) | free | — |
Ultimate Hosts Blacklist2
| Feed | Licence | Last successful fetch |
|---|---|---|
| Ultimate Hosts Blacklist - Aggregated IPs | MIT | — |
| Ultimate Hosts Blacklist - Blocklist.de | MIT | — |
X4BNet2
| Feed | Licence | Last successful fetch |
|---|---|---|
| X4BNet - Datacenter IPv4 Ranges | MIT | — |
| X4BNet - VPN Provider IPv4 Ranges | MIT | — |
0n1cOn31
| Feed | Licence | Last successful fetch |
|---|---|---|
| 0n1cOn3 - NSO Pegasus IOC hosts | not stated | — |
0xwarrior1
| Feed | Licence | Last successful fetch |
|---|---|---|
| 0xwarrior - Lab/honeypot malicious IPs | GPL-3.0 | — |
13MrBlackCat131
| Feed | Licence | Last successful fetch |
|---|---|---|
| 13MrBlackCat13 - Malicious Domains.txt | MIT | — |
1Hosts Lite1
| Feed | Licence | Last successful fetch |
|---|---|---|
| 1Hosts Lite – balanced hosts file | MPL-2.0 | — |
1Hosts Xtra1
| Feed | Licence | Last successful fetch |
|---|---|---|
| 1Hosts Xtra – aggressive hosts file | MPL-2.0 | — |
3FIFTY1
| Feed | Licence | Last successful fetch |
|---|---|---|
| 3FIFTY - Abusive IPs blacklist | CC0-1.0 | — |
7c/fakefilter1
| Feed | Licence | Last successful fetch |
|---|---|---|
| fakefilter - Fraud/Fake-Shop Domains | free | — |
AbuseIPDB1
| Feed | Licence | Last successful fetch |
|---|---|---|
| AbuseIPDB - IP Blacklist | API key | — |
Agent6-6-61
| Feed | Licence | Last successful fetch |
|---|---|---|
| Agent6-6-6 - WordPress login bruteforce IPs | not stated | — |
Ahrefs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Ahrefs - Crawler IP Ranges | free | — |
alireza-rezaee1
| Feed | Licence | Last successful fetch |
|---|---|---|
| alireza-rezaee - Tor nodes (all relays) | MIT | — |
AMF (France)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| AMF - Listes noires des entites non autorisees | Etalab-2.0 | — |
Amitambekar5101
| Feed | Licence | Last successful fetch |
|---|---|---|
| Amitambekar510 - Malicious Domain Threat List | not stated | — |
Ankaboot1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Ankaboot - Mail-server banned IPs | CC0-1.0 | — |
anonymous99-Rise1
| Feed | Licence | Last successful fetch |
|---|---|---|
| anonymous99-Rise - HFish honeypot attackers | MIT | — |
Anthropic1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Anthropic - Crawler IP Ranges | free | — |
anti‑AD1
| Feed | Licence | Last successful fetch |
|---|---|---|
| anti‑AD – EasyList for AdGuard Home | MIT | — |
AntiScam Squad1
| Feed | Licence | Last successful fetch |
|---|---|---|
| AntiScam Squad - Pi-Hole Crypto Scam.txt | not stated | — |
Anudeep ND1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Anudeep ND - Adservers.txt | MIT | — |
APIBAN1
| Feed | Licence | Last successful fetch |
|---|---|---|
| APIBAN - SIP + HTTP attackers (ipset, all) | API key | — |
Atlassian1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Atlassian - Cloud IP Ranges | free | — |
Avast (Gen)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Avast Threat Labs - Malware IOC Hashes | free, attribution | — |
Avastel1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Avastel - Proxy IPs used by bots (1 day)inactive | MIT | — |
AWS1
| Feed | Licence | Last successful fetch |
|---|---|---|
| AWS - Published IP Ranges | free | — |
Bambenek Consulting1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Bambenek - DGA Domain Feed (full) | CC-BY-NC-SA-4.0 | — |
Binary Defense1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Binary Defense - Banlist | no commercial grant | — |
Bitbucket Org1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Bitbucket Org - Mandiant APT1 Report Appendix D.txtinactive | not stated | — |
Bitdefender Labs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Bitdefender Labs - Malware IOCs | not stated | — |
Blackhole Monster1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Blackhole Monster - Today Attackers | not stated | — |
blacklist.gov.az (Azerbaijan CERT)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| blacklist.gov.az - Phishing and Malware Domains | not stated | — |
Blocklist.de1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Blocklist.de - Brute-force Logins | free | — |
blocklist.net.ua1
| Feed | Licence | Last successful fetch |
|---|---|---|
| blocklist.net.ua - Full Blocklist (CSV) | not stated | — |
borestad (AbuseIPDB export)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| AbuseIPDB aggregate - 90-day reported IPv4 (borestad) | API key | — |
Botvrij.eu (CUDESO)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Botvrij.eu Data | no commercial grant | — |
brakmic1
| Feed | Licence | Last successful fetch |
|---|---|---|
| brakmic - Malware sinkhole IP list | MIT | — |
Bundy011
| Feed | Licence | Last successful fetch |
|---|---|---|
| Bundy01 – Meta Domainsinactive | GPL-3.0 | — |
CallShield1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CallShield - Hot Spam Numbers | MIT | — |
Castle1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Castle - Top 1000 active disposable email domains | MIT | — |
cbuijs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| cbuijs - Bad IPs | not stated | — |
CFTC (USA)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CFTC - RED List (Registration Deficient List)inactive | free | — |
Checkmarx1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Checkmarx - RED-LILI malicious npm packages | not stated | — |
CIDR Report1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CIDR Report - Unallocated Address Space (bogons) | not stated | — |
CIRCL1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CIRCL OSINT Feed | no commercial grant | — |
CircleCI1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CircleCI - Job IP Ranges | free | — |
CISA1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CISA - Known Exploited Vulnerabilities Catalog | free | — |
CISA/NSA1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CISA/NSA - BRICKSTORM Malware Analysis (STIX2)inactive | free | — |
Cisco Talos1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Cisco Talos - Published IOCs | CC0-1.0 | — |
Cloudflare1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Cloudflare - Published IP Ranges | free | — |
CloudSEK1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CloudSEK - Threat Intelligence Placeholderinactive | API key | — |
Codeberg Org1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Codeberg Org - Blocklist.txt | unverified | — |
CoinBlockerLists1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CoinBlockerLists – Hostsinactive | not stated | — |
Common Crawl1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Common Crawl - CCBot IP Ranges | free | — |
ConfigServer1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ConfigServer - Threat IPs all services 365d | not stated | — |
Crazy Max1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Crazy Max - Spy.txt | MIT | — |
CriminalIP1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CriminalIP - C2 Daily Feedinactive | not stated | — |
Curbengh1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Curbengh - VN Badsite Filter | MIT | — |
Cvar19841
| Feed | Licence | Last successful fetch |
|---|---|---|
| Cvar1984 - Sussyfinder webshell MD5 blacklist | GPL-3.0 | — |
cybercrime-tracker.net1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Cybercrime Tracker - C2 Panel URLsinactive | CC0-1.0 | — |
CZ.NIC1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Turris Sentinel - Greylistinactive | non-commercial | — |
CZ.NIC HaaS1
| Feed | Licence | Last successful fetch |
|---|---|---|
| CZ.NIC HaaS - SSH Honeypot Sessions (daily export) | unverified | — |
Danger Rulez1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Danger Rulez - BruteForceBlocker Blacklist | not stated | — |
DataPlane1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DataPlane - SSH Client | non-commercial | — |
Dbl Oisd Nl1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Dbl Oisd Nl - inactive | no commercial grant | — |
ddrimus1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ddrimus - HTTP threat blocklist | MIT | — |
Detectopod1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Detectopod - Brand-impersonation phishing feed | not stated | — |
DevSpen1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DevSpen - Steam/Discord Scam Links | free | — |
DFPI (California)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DFPI - Crypto Scam Trackerinactive | free | — |
DigitalOcean1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DigitalOcean - RFC8805 Geofeed | free | — |
DigitalSide1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DigitalSide - Threat-Intel Domainsinactive | MIT | — |
Dl Red Flag Domains1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Dl Red Flag Domains - Red.flag.domains.txt | no commercial grant | — |
Dogino1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Dogino - Discord Phishing URLs - Scam Urls | Unlicense | — |
Dolutech1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Dolutech - Weekly abusive IP blacklist | not stated | — |
doodad-labs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| doodad-labs - Disposable email domains (hourly aggregate) | GPL-3.0 | — |
DuckDuckGo1
| Feed | Licence | Last successful fetch |
|---|---|---|
| DuckDuckGo - DuckDuckBot IP Ranges | free | — |
duggytuxy1
| Feed | Licence | Last successful fetch |
|---|---|---|
| duggytuxy - Ransomware IP Addressesinactive | no commercial grant | — |
Duggytuxy1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Duggytuxy - Blacklist Ips For Fortinet Firewall Aa.txt | no commercial grant | — |
DXC-01
| Feed | Licence | Last successful fetch |
|---|---|---|
| DXC-0 - European Honeypot Malicious Robots (daily) | not stated | — |
EasyList HOSTS1
| Feed | Licence | Last successful fetch |
|---|---|---|
| EasyList HOSTS – unified hosts d’EasyList | no commercial grant | — |
Emerging Threats1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Emerging Threats - Firewall Block IPs | no commercial grant | — |
ErcinDedeoglu1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ErcinDedeoglu - HTTP proxies | MIT | — |
ESET1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ESET Research - Malware IOC Hashes | BSD-2-Clause | — |
ExtSentry1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ExtSentry - Malicious browser extensions feed | MIT | — |
F6 DFIR1
| Feed | Licence | Last successful fetch |
|---|---|---|
| F6 DFIR - Ransomware family IOCs | Apache-2.0 | — |
Fabriziosalmi1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Fabriziosalmi - Aggregated Blacklist | GPL-3.0 | — |
fabs-net1
| Feed | Licence | Last successful fetch |
|---|---|---|
| fabs-net - Swarmnoise sensor threat feed | MIT | — |
Fastly1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Fastly - Public IP List | free | — |
FBI IC31
| Feed | Licence | Last successful fetch |
|---|---|---|
| FBI IC3 - Public Service Announcements (RSS)inactive | free | — |
FCC (USA)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| FCC - Consumer Complaint Caller Numbers | free | — |
FFraud1
| Feed | Licence | Last successful fetch |
|---|---|---|
| FFraud - Confirmed abusive IPs | MIT | — |
FGRibreau1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MailChecker - Disposable/Invalid Domains | MIT | — |
FireHOL blocklist.de1
| Feed | Licence | Last successful fetch |
|---|---|---|
| FireHOL blocklist.de – fail2ban offendersinactive | not stated | — |
FTC (USA)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| FTC - Do Not Call Reported Numbers | free | — |
gazpitchy921
| Feed | Licence | Last successful fetch |
|---|---|---|
| gazpitchy92 - Hostile Network Ranges | not stated | — |
Geonode1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Geonode - Free Proxy List | free | — |
Gist Githubusercontent1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Gist Githubusercontent - Test.txtinactive | not stated | — |
Github1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Github - Smart TV.txt | MIT | — |
GitHub1
| Feed | Licence | Last successful fetch |
|---|---|---|
| GitHub - Published IP Ranges | free | — |
Global Anti Scam Org1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Global Anti Scam Org – Scam Domains | BSD-3-Clause | — |
GoodByeAds Main1
| Feed | Licence | Last successful fetch |
|---|---|---|
| GoodByeAds Main – ads, tracking & malware | MIT | — |
Google Cloud1
| Feed | Licence | Last successful fetch |
|---|---|---|
| GCP - Published IP Ranges | free | — |
GovCERT.ch1
| Feed | Licence | Last successful fetch |
|---|---|---|
| GovCERT.ch - CTI repo (NoName057 DDoS CIDRs, bruteforce CIDRs, ClickFix RPC) | not stated | — |
Greensnow1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Greensnow - Attacks Multi-protocols | no commercial grant | — |
groundcat1
| Feed | Licence | Last successful fetch |
|---|---|---|
| groundcat - Disposable email domains (MX-validated) | MIT | — |
HAGEZI1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HAGEZI - Ultimate.txt | no commercial grant | — |
HaGeZi Light1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HaGeZi Light – minimal DNS blocklist | no commercial grant | — |
HaGeZi Multi1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HaGeZi Multi – medium DNS blocklist | no commercial grant | — |
HaGeZi Pro1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HaGeZi Pro – heavy DNS blocklist | no commercial grant | — |
HaGeZi Pro Plus1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HaGeZi Pro Plus – very heavy DNS blocklist | no commercial grant | — |
Have I Been Pwned1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HIBP - Breach Catalogue (Domains)inactive | free, attribution | — |
HF mstfknn1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HF mstfknn - Phishing domain list 2M+inactive | MIT | — |
HKMA (Hong Kong)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HKMA - Fraudulent Bank Websites and Phishing | free, attribution | — |
Hole Cert Pl1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Hole Cert Pl - Domains.txt | no commercial grant | — |
HorusTeknoloji1
| Feed | Licence | Last successful fetch |
|---|---|---|
| HorusTeknoloji - Url Lists.txt | MIT | — |
Hyder3651
| Feed | Licence | Last successful fetch |
|---|---|---|
| Hyder365 - Combined.txt | not stated | — |
ilyasaftr1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ilyasaftr - Disposable email domains (deny) | not stated | — |
Imperva1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Imperva - CDN/WAF IP Ranges | free | — |
iocium1
| Feed | Licence | Last successful fetch |
|---|---|---|
| iocium - List.txt | not stated | — |
IOCIUM1
| Feed | Licence | Last successful fetch |
|---|---|---|
| IOCIUM - Dangerous domains | not stated | — |
IPsum1
| Feed | Licence | Last successful fetch |
|---|---|---|
| IPsum – malicious IP feedinactive | not stated | — |
jacobrakai.org1
| Feed | Licence | Last successful fetch |
|---|---|---|
| jacobrakai.org - Honeypot-confirmed attackers | CC0-1.0 | — |
Jarellama1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Jarellama - Scam Blocklist | GPL-3.0 | — |
jaym20261
| Feed | Licence | Last successful fetch |
|---|---|---|
| jaym2026 - Live phishing hosts | unverified | — |
joeavanzato1
| Feed | Licence | Last successful fetch |
|---|---|---|
| joeavanzato - Recent C2 infrastructure | not stated | — |
Joewein Net1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Joewein Net - Dom Bl.txt | not stated | — |
josephrocca1
| Feed | Licence | Last successful fetch |
|---|---|---|
| josephrocca - VPN or datacenter IPv4 ranges | MIT | — |
KADhosts1
| Feed | Licence | Last successful fetch |
|---|---|---|
| KADhosts – Polish Scam & Fraud List | no commercial grant | — |
kamalmjt1
| Feed | Licence | Last successful fetch |
|---|---|---|
| kamalmjt - Emerging attackers | not stated | — |
kboghdady1
| Feed | Licence | Last successful fetch |
|---|---|---|
| kboghdady – YouTube Ads (Googlevideo) Blocklistinactive | not stated | — |
Keplr (chainapsis)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Keplr - Cosmos Phishing Block List | Apache-2.0 | — |
KittyScan1
| Feed | Licence | Last successful fetch |
|---|---|---|
| KittyScan - Minecraft server scanners | MIT | — |
KNF (Poland)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| KNF - Lista ostrzezen publicznych | not stated | — |
Krawl1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Krawl - Deception-server banlist | MIT | — |
LeakIX1
| Feed | Licence | Last successful fetch |
|---|---|---|
| LeakIX - Scanner Probe IPs | free | — |
Linode (Akamai)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Linode - RFC8805 Geofeed | free | — |
LittleJake1
| Feed | Licence | Last successful fetch |
|---|---|---|
| LittleJake - IP blacklist (all) | Apache-2.0 | — |
LOLDrivers (magicsword-io)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| LOLDrivers - Vulnerable and Malicious Driver Hashes | Apache-2.0 | — |
lxyeternal (pypi_malregistry)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| pypi_malregistry - Malicious PyPI Package Names | not stated | — |
Maltrail1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Maltrail – Malware Domainsinactive | not stated | — |
Marco ACORTE1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Marco ACORTE - Antispam Domains.txt | no commercial grant | — |
MAS (Singapore)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MAS - Investor Alert List | free, attribution | — |
Mendeley Data1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Mendeley Data - Phishing URL dataset (Phishing URLs.csv) | CC-BY-4.0 | — |
MetaMask1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MetaMask - Ethereum Phishing Detect | MIT | — |
Microsoft1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Microsoft 365 - Worldwide Endpoint IPs | free | — |
Microsoft Azure1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Azure - Published IP Ranges | free | — |
Microsoft Bing1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Microsoft - Bingbot IP Ranges | free | — |
MISP1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Free OSINT Pack - MISP Warninglist URL Shortenersinactive | CC0-1.0 | — |
Mistral AI1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Mistral AI - Crawler IP Ranges | free | — |
Mitchell Krog1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Mitchell Krog - Nginx bad bot blocker IPs | MIT | — |
Mitchell Krogza1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Mitchell Krogza - Phishing Databaseinactive | MIT | — |
MITRE1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MITRE ATT&CK Enterprise STIX | free | — |
MONITORAPP AILabs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MONITORAPP AILabs - Attacker IPs | not stated | — |
montysecurity1
| Feed | Licence | Last successful fetch |
|---|---|---|
| montysecurity C2 Tracker - All Domainsinactive | open | — |
Mullvad1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Mullvad - Published VPN Relay IPs | free | — |
MyEtherWallet1
| Feed | Licence | Last successful fetch |
|---|---|---|
| MyEtherWallet - Ethereum Address Darklist | MIT | — |
Myip.ms1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Myip.ms - Live Blacklist (10 days, CSF) | not stated | — |
NanduWasTaken1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NanduWasTaken - Discord Scam Links | MIT | — |
nathanu981
| Feed | Licence | Last successful fetch |
|---|---|---|
| Scammer Phone Numbers (nathanu98) | open | — |
NedoS1mple1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NedoS1mple - SHAME/kto Minecraft worm hashes | not stated | — |
NEO DEV Host1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NEO DEV Host – unified blocklist | MIT | — |
NETMOUNTAINS1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NETMOUNTAINS - Curated IP blocklist | not stated | — |
Netskope Threat Labs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Netskope Threat Labs - IOCs | MIT | — |
Networksec Org1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Networksec Org - Block.txtinactive | not stated | — |
NordVPN1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NordVPN - Published Server IPs | free | — |
NoTracking Hostnames1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NoTracking Hostnames – combined hosts file | not stated | — |
NUBI1
| Feed | Licence | Last successful fetch |
|---|---|---|
| NUBI - Bad IPs | free | — |
OISD Big1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OISD Big – general purpose list | no commercial grant | — |
OISD NSFW1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OISD NSFW – adult domainsinactive | no commercial grant | — |
OISD Small1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OISD Small - Ads | no commercial grant | — |
Okta1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Okta - Cell IP Ranges | free | — |
OpenFilters1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OpenFilters - Internet scanner IP ranges | Unlicense | — |
OpenPhish1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OpenPhish - Feedinactive | no commercial grant | — |
Oracle Cloud1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OCI - Published IP Ranges | free | — |
Osvaldo-Net1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Osvaldo-Net - Colombia CC-CSIRT Alert Domains | not stated | — |
PagerDuty1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PagerDuty - Webhook IPs (US) | free | — |
Palo Alto Unit 421
| Feed | Licence | Last successful fetch |
|---|---|---|
| Palo Alto Unit 42 - Article IOCs | Unlicense | — |
particlelevel1
| Feed | Licence | Last successful fetch |
|---|---|---|
| uBlacklist - Fake Shops (German) | free | — |
PBH-BTN1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PBH-BTN - Untrusted BitTorrent peer IPs | CC-BY-4.0 | — |
Perplexity1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Perplexity - PerplexityBot IP Ranges | free | — |
ph00lt0 Blocklist1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ph00lt0 Blocklist – stats, analytics, lottery & ads | CC-BY-SA-4.0 | — |
Phantom1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Phantom Wallet - Phishing Blocklist | MIT | — |
PhishCan1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PhishCan - Canadian phishing domains | non-commercial | — |
PhishStats1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PhishStats - Recent High-Score Phishing | free | — |
PhishTank1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PhishTank - Online Valid Phishing URLs | CC-BY-SA-2.5 | — |
Phishunt1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Phishunt - Phishing URL Feed | free | — |
Pihole Tg121
| Feed | Licence | Last successful fetch |
|---|---|---|
| Pihole Tg12 - Phish Domains.txt | not stated | — |
Pomerium1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Pomerium - VPN IP list | Apache-2.0 | — |
PrecisionSec1
| Feed | Licence | Last successful fetch |
|---|---|---|
| PrecisionSec - MISP OSINT Feed | unverified | — |
Proxifly1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Proxifly - Free proxy list (all) | GPL-3.0 | — |
ProxyScrape1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ProxyScrape - Free HTTP Proxy List | free | — |
quidsup NoTrack1
| Feed | Licence | Last successful fetch |
|---|---|---|
| quidsup NoTrack - Malware Sites | GPL-3.0 | — |
ramit-mitra1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ramit-mitra - Rotten IPs | Apache-2.0 | — |
Ransomfeed1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Ransomfeed - Recent Ransomware Posts | free | — |
RansomLook1
| Feed | Licence | Last successful fetch |
|---|---|---|
| RansomLook - Recent Ransomware Victims/Sites | free | — |
Ransomwhere1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Ransomwhere - Ransomware Payment Addresses | CC-BY-4.0 | — |
RBI (India)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| RBI - Alert List of Unauthorised Forex Trading Platforms | not stated | — |
Reddestdream Github Io1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Reddestdream Github Io - Minimalhosts | not stated | — |
ReportedIP1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ReportedIP - Community blacklist (all) | CC-BY-4.0 | — |
Rösti (viql)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Rösti - MISP OSINT Feed | not stated | — |
RPiList (DE)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| RPiList (DE) - Bad-IP fail2ban | non-commercial | — |
Rutgers1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Rutgers - DROP Attackers | not stated | — |
Salesforce1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Salesforce - IP Ranges | free | — |
SANS ISC1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SANS ISC - Shodan Scanner IPs | CC-BY-NC-SA-4.0 | — |
SANS ISC (DShield)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SANS ISC DShield - Top Attacking Sources | CC-BY-NC-SA-4.0 | — |
SANS ISC DShield1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SANS ISC DShield - Recommended Block List | CC-BY-NC-SA-4.0 | — |
Sblam1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Sblam - HTTP Comment Spam Sources | not stated | — |
SC (Malaysia)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SC Malaysia - Investor Alert Listinactive | not stated | — |
scriptzteam1
| Feed | Licence | Last successful fetch |
|---|---|---|
| scriptzteam - badIPS | not stated | — |
Scriptzteam1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Scriptzteam - BlockList V4 Ips.txtinactive | no commercial grant | — |
Seb Sauvage1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Seb Sauvage - Hosts | no commercial grant | — |
SEC (Thailand)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SEC Thailand - Investor Alert | not stated | — |
SecureWAN1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SecureWAN - CTI feed (2+ sources) | non-commercial | — |
SecurityScorecard1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SecurityScorecard - Threat Intel IoCs (repo tarball)inactive | not stated | — |
SEKOIA.IO1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SEKOIA.IO Community - IOCs | free, attribution | — |
Sentry1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Sentry - Uptime Monitoring IPs | free | — |
SERPRO (Brazil)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SERPRO (Brazil) - Reputation IP Blocklist | not stated | — |
Seznam1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Seznam - SeznamBot IP Ranges | free | — |
SiberKapan1
| Feed | Licence | Last successful fetch |
|---|---|---|
| SiberKapan - Daily Threat MISP Feed | not stated | — |
Someonewhocares1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Someonewhocares - Hosts | no commercial grant | — |
Spamhaus DROP1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Spamhaus DROP - IPv6 | no commercial grant | — |
spmedia1
| Feed | Licence | Last successful fetch |
|---|---|---|
| spmedia - Crypto scam and phishing feed | MIT | — |
Spys.me1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Spys.me - Free Proxy List | free | — |
stamparm1
| Feed | Licence | Last successful fetch |
|---|---|---|
| IPsum - Malicious IPs | free | — |
stamparm / Maltrail1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Maltrail Trails (release CSV) | non-commercial | — |
StatusCake1
| Feed | Licence | Last successful fetch |
|---|---|---|
| StatusCake - Monitoring Node IPs | free | — |
Stefan Gofferje1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Stefan Gofferje - SIP PBX Attackers (RPZ zone) | GPL-3.0 | — |
Stopforumspam1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Stopforumspam - Toxic Domains Whole.txt | no commercial grant | — |
Stripe1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Stripe - Webhook Source IPs | free | — |
sunny95771
| Feed | Licence | Last successful fetch |
|---|---|---|
| sunny9577 - Proxy scraper list | unverified | — |
Taiwan 165 Anti-Fraud Hotline1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Taiwan 165 Anti-Fraud Hotline - Fake Investment/Gambling Sites | free, attribution | — |
Taiwan MOI/CIB1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Taiwan MOI/CIB - Fraud-Reported Domainsinactive | open | — |
Taiwan NPA 165 / MOI open data1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Taiwan 165 - DNS-Blocked Scam Domains | free, attribution | — |
Telegram1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Telegram - IP Ranges | free | — |
Tempest Solutions1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Tempest Solutions - Firewall/IDS threat feeds | not stated | — |
TempMailDetector1
| Feed | Licence | Last successful fetch |
|---|---|---|
| TempMailDetector - Temporary email domains | not stated | — |
TheSpeedX1
| Feed | Licence | Last successful fetch |
|---|---|---|
| TheSpeedX - PROXY-List | not stated | — |
ThreatHive1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ThreatHive - Hive Blocklist | no commercial grant | — |
TICI3A1
| Feed | Licence | Last successful fetch |
|---|---|---|
| TICI3A - Host blacklist IPv4 | MIT | — |
tn3w1
| Feed | Licence | Last successful fetch |
|---|---|---|
| tn3w - TunnelBear VPN IPs | Apache-2.0 | — |
tn3w (Windscribe scrape)1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Windscribe - VPN Server IPs (community list) | Apache-2.0 | — |
toborrm91
| Feed | Licence | Last successful fetch |
|---|---|---|
| toborrm9 - Malicious browser extension sentry | not stated | — |
Tor Project Onionoo1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Tor Project Onionoo - Running Relays (or_addresses) | free | — |
toxyl1
| Feed | Licence | Last successful fetch |
|---|---|---|
| toxyl - SSH honeypot swarm attacker hosts (3m) | not stated | — |
TweetFeed1
| Feed | Licence | Last successful fetch |
|---|---|---|
| TweetFeed - IOCs from Security Researchers (7 day) | free, attribution | — |
UHB1
| Feed | Licence | Last successful fetch |
|---|---|---|
| UHB - Contributor Blacklist | MIT | — |
UK FCDO1
| Feed | Licence | Last successful fetch |
|---|---|---|
| UK Sanctions List - Crypto Addresses | free | — |
UptimeRobot1
| Feed | Licence | Last successful fetch |
|---|---|---|
| UptimeRobot - Monitoring IPs | free | — |
Urlhaus Abuse Ch1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Urlhaus Abuse Ch - Textinactive | no commercial grant | — |
URLscans1
| Feed | Licence | Last successful fetch |
|---|---|---|
| URLscans - Community phishing feed | non-commercial | — |
US Treasury OFAC1
| Feed | Licence | Last successful fetch |
|---|---|---|
| OFAC - SDN Advanced List (Crypto Addresses) | free | — |
USOM1
| Feed | Licence | Last successful fetch |
|---|---|---|
| USOM - Malicious URL List (Turkey CERT)inactive | not stated | — |
Validin1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Validin - Phishing domains feed | MIT | — |
VerifiedJoseph1
| Feed | Licence | Last successful fetch |
|---|---|---|
| VerifiedJoseph - Intruder Alert fail2ban events | MIT | — |
ViriBack1
| Feed | Licence | Last successful fetch |
|---|---|---|
| ViriBack C2 Tracker | free | — |
VirusSign1
| Feed | Licence | Last successful fetch |
|---|---|---|
| VirusSign - Free Daily MD5 Lists | non-commercial | — |
VoIPBL1
| Feed | Licence | Last successful fetch |
|---|---|---|
| VoIPBL - VoIP Blacklist | not stated | — |
Volexity1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Volexity - Threat Intel IOCs | BSD-2-Clause | — |
VSXSentry1
| Feed | Licence | Last successful fetch |
|---|---|---|
| VSXSentry - Malicious VS Code extensions | not stated | — |
Vultr1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Vultr - RFC8805 Geofeed | free | — |
Webspec1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Webspec - Traffic-redirect DGA domains | CC-BY-4.0 | — |
WindowsSpyBlocker1
| Feed | Licence | Last successful fetch |
|---|---|---|
| WindowsSpyBlocker – Spy rulesinactive | not stated | — |
WithSecure Labs1
| Feed | Licence | Last successful fetch |
|---|---|---|
| WithSecure Labs - IOCs | BSD-2-Clause | — |
Y3ll0w1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Y3ll0w - CrowdSec CAPI decisions | not stated | — |
YoYo1
| Feed | Licence | Last successful fetch |
|---|---|---|
| YoYo - Serverlist | not stated | — |
Zoom1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Zoom - IP Ranges | free | — |
Zscaler1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Zscaler - ZIA Data Center Ranges (CENR) | free | — |
Zscaler ThreatLabz1
| Feed | Licence | Last successful fetch |
|---|---|---|
| Zscaler ThreatLabz - IOCs | MIT | — |