This repository contains curated IP blocklists designed to help block known malicious actors while minimizing disruption to normal internet use.
The goal is to block harmful traffic without interfering with privacy tools such as VPNs and Tor. The blocklists also incorporate IPs detected by a local IPS and honeypot setup.
Lists are regularly updated, aiming to be simple, reliable, and avoid overblocking.
The IP addresses are split into lists and ranges for easy use.
A list formatted for Adguard/UBlock is also available here.
A bash script for automating the blocklists into IPtables, using ipset, is available here.
This script downloads the current list and range from this repo, splits them into ipset groups of 20000, and adds them as DROP rules for iptables.
- iptables
- ipset
Arch:
sudo pacman -S iptables ipsetDebian/Ubuntu:
sudo apt install iptables ipset