Skip to content

Latest commit

 

History

1 Commit

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 

Repository files navigation

Logo

License

About

IPsum is a threat intelligence feed based on 30+ different publicly available lists of suspicious and/or malicious IP addresses, like IPnoise. All lists are automatically retrieved and parsed on a daily (every 24 hours) basis and the final result is pushed to this repository. The feed contains IP addresses plus an occurrence count (how many source lists each IP appears on). Higher counts generally mean higher confidence and fewer false positives when blocking inbound traffic. Also, list is sorted by occurrence count (highest to lowest).

As an example, to get a fresh and ready-to-deploy auto-ban list of "bad IPs" that appear on at least 3 (black)lists you can run:

curl -fsSL https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "^#" | grep -Ev '[[:space:]]([12])$' | cut -f 1

If you want to try it with ipset, you can do the following:

sudo -i
apt-get update && apt-get install -y iptables ipset
ipset -q flush ipsum
ipset -q create ipsum hash:ip
for ip in $(curl https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -Ev '[[:space:]]([12])$' | cut -f 1); do ipset add ipsum $ip; done
iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null
iptables -I INPUT -m set --match-set ipsum src -j DROP

In directory levels you can find preprocessed raw IP lists based on number of blacklist occurrences (e.g. levels/3.txt holds IP addresses that can be found on 3 or more blacklists).

Wall of Shame (2026-09-08)

IP DNS lookup Number of (black)lists
2.57.121.112 dns112.personaliseplus.com 10
16.5.0.244 embnex.com 10
62.60.130.242 - 10
66.132.195.57 57.195.132.66.censys-scanner.com 10
138.226.239.234 - 10
167.94.146.63 63.146.94.167.censys-scanner.com 10
45.148.10.141 - 9
45.148.10.151 - 9
65.49.1.202 - 9
66.132.195.59 59.195.132.66.censys-scanner.com 9
66.132.195.92 92.195.132.66.censys-scanner.com 9
66.132.195.102 102.195.132.66.censys-scanner.com 9
66.240.223.208 centos7223208.aspadmin.net 9
129.121.128.70 129-121-128-70.unifiedlayer.com 9
138.226.239.233 - 9
167.94.146.50 50.146.94.167.censys-scanner.com 9
167.94.146.56 56.146.94.167.censys-scanner.com 9
167.94.146.59 59.146.94.167.censys-scanner.com 9
167.94.146.60 60.146.94.167.censys-scanner.com 9
193.47.62.69 - 9
2.57.122.209 - 8
3.129.187.38 scan.visionheight.com 8
3.131.220.121 scan.visionheight.com 8
31.58.216.82 82.216.58.31.hosted-by.vpslayer.net 8
45.148.10.152 - 8
45.205.1.243 - 8
62.60.130.201 - 8
62.60.130.253 - 8
64.62.156.52 - 8
64.62.197.2 - 8
64.62.197.32 - 8
64.62.197.77 - 8
64.62.197.197 - 8
65.49.1.24 - 8
65.49.1.152 - 8
65.49.1.162 - 8
65.49.1.222 - 8
66.132.172.40 40.172.132.66.censys-scanner.com 8
66.132.172.100 100.172.132.66.censys-scanner.com 8
66.132.172.104 104.172.132.66.censys-scanner.com 8
66.132.172.129 129.172.132.66.censys-scanner.com 8
66.132.172.137 137.172.132.66.censys-scanner.com 8
66.132.172.191 191.172.132.66.censys-scanner.com 8
66.132.186.160 160.186.132.66.censys-scanner.com 8
66.132.186.179 179.186.132.66.censys-scanner.com 8
66.132.186.182 182.186.132.66.censys-scanner.com 8
66.132.186.183 183.186.132.66.censys-scanner.com 8
66.132.195.32 32.195.132.66.censys-scanner.com 8
66.132.195.49 49.195.132.66.censys-scanner.com 8
66.132.195.53 53.195.132.66.censys-scanner.com 8
66.132.195.55 55.195.132.66.censys-scanner.com 8
66.132.195.60 60.195.132.66.censys-scanner.com 8
66.132.195.67 67.195.132.66.censys-scanner.com 8
66.132.195.73 73.195.132.66.censys-scanner.com 8
66.132.195.82 82.195.132.66.censys-scanner.com 8
66.132.195.88 88.195.132.66.censys-scanner.com 8
66.132.195.93 93.195.132.66.censys-scanner.com 8
66.132.195.97 97.195.132.66.censys-scanner.com 8
66.132.195.99 99.195.132.66.censys-scanner.com 8
66.132.195.103 103.195.132.66.censys-scanner.com 8
66.132.195.126 126.195.132.66.censys-scanner.com 8
66.132.224.87 87.224.132.66.censys-scanner.com 8
66.132.224.225 225.224.132.66.censys-scanner.com 8
66.132.224.228 228.224.132.66.censys-scanner.com 8
71.6.199.23 einstein.census.shodan.io 8
77.90.185.20 - 8
85.217.149.24 o025.scanner.modat.io 8
85.217.149.25 o026.scanner.modat.io 8
85.217.149.61 o061.scanner.modat.io 8
95.173.161.147 slufse.accordinar.online 8
103.63.101.24 - 8
103.78.2.252 - 8
120.48.90.166 - 8
147.185.132.49 - 8
147.185.132.69 - 8
147.185.132.105 - 8
147.185.132.234 - 8
147.185.132.255 - 8
167.94.146.51 51.146.94.167.censys-scanner.com 8
167.94.146.53 53.146.94.167.censys-scanner.com 8
167.94.146.57 57.146.94.167.censys-scanner.com 8
167.94.146.58 58.146.94.167.censys-scanner.com 8
169.58.222.110 vmi3527110.contaboserver.net 8
171.244.14.216 - 8
185.242.226.19 security.criminalip.com 8
195.178.110.218 - 8
195.178.110.227 - 8
197.221.232.44 16.44.telone.co.zw 8
220.90.220.204 - 8
2.57.121.25 hosting25.tronicsat.com 7
2.57.122.53 - 7
2.57.122.168 - 7
2.57.122.238 - 7
3.130.168.2 scan.visionheight.com 7
12.156.67.18 - 7
16.5.0.132 embnex.com 7
16.5.0.236 embnex.com 7
18.116.101.220 scan.visionheight.com 7
18.218.118.203 scan.visionheight.com 7
36.64.68.99 - 7
38.54.117.199 - 7
38.148.20.75 - 7
45.91.64.6 scan.f6.security 7
45.148.10.157 - 7
45.148.10.183 - 7
45.148.10.240 - 7
45.156.128.62 sh-ams-nl-gp1-wk113b.internet-census.org 7
45.182.206.203 203.206.182.45.cntelecom.com.br 7
45.205.1.241 - 7
45.205.1.244 - 7
45.205.1.247 - 7
46.101.180.112 - 7
46.101.234.147 - 7
47.148.181.190 47-148-181-190.fdr02.ontr.ca.ip.frontiernet.net 7
61.76.112.4 - 7
64.62.156.24 - 7
64.62.156.38 - 7
64.62.156.66 - 7
64.62.156.80 - 7
64.62.156.94 - 7
64.62.156.122 - 7
64.62.156.142 - 7
64.62.156.162 - 7
64.62.156.192 - 7
64.62.156.202 - 7
64.62.156.212 - 7
64.62.156.222 - 7
64.62.197.17 - 7
64.62.197.62 - 7
64.62.197.107 - 7
64.62.197.122 - 7
64.62.197.137 - 7
64.62.197.167 - 7
64.62.197.182 - 7
64.62.197.212 - 7
65.49.1.10 - 7
65.49.1.38 - 7
65.49.1.52 - 7
65.49.1.66 - 7
65.49.1.94 - 7
65.49.1.122 - 7
65.49.1.132 - 7
65.49.1.172 - 7
65.49.1.182 - 7
65.49.1.192 - 7
65.49.20.68 - 7
66.132.172.33 33.172.132.66.censys-scanner.com 7
66.132.172.34 34.172.132.66.censys-scanner.com 7
66.132.172.35 35.172.132.66.censys-scanner.com 7
66.132.172.36 36.172.132.66.censys-scanner.com 7
66.132.172.43 43.172.132.66.censys-scanner.com 7
66.132.172.46 46.172.132.66.censys-scanner.com 7
66.132.172.97 97.172.132.66.censys-scanner.com 7
66.132.172.102 102.172.132.66.censys-scanner.com 7
66.132.172.111 111.172.132.66.censys-scanner.com 7
66.132.172.133 133.172.132.66.censys-scanner.com 7
66.132.172.141 141.172.132.66.censys-scanner.com 7
66.132.172.143 143.172.132.66.censys-scanner.com 7
66.132.172.179 179.172.132.66.censys-scanner.com 7
66.132.172.180 180.172.132.66.censys-scanner.com 7
66.132.172.182 182.172.132.66.censys-scanner.com 7
66.132.172.187 187.172.132.66.censys-scanner.com 7
66.132.172.189 189.172.132.66.censys-scanner.com 7
66.132.172.190 190.172.132.66.censys-scanner.com 7
66.132.172.194 194.172.132.66.censys-scanner.com 7
66.132.172.200 200.172.132.66.censys-scanner.com 7
66.132.172.205 205.172.132.66.censys-scanner.com 7
66.132.172.207 207.172.132.66.censys-scanner.com 7
66.132.172.211 211.172.132.66.censys-scanner.com 7
66.132.172.215 215.172.132.66.censys-scanner.com 7
66.132.172.220 220.172.132.66.censys-scanner.com 7
66.132.172.223 223.172.132.66.censys-scanner.com 7
66.132.186.166 166.186.132.66.censys-scanner.com 7
66.132.186.168 168.186.132.66.censys-scanner.com 7
66.132.186.172 172.186.132.66.censys-scanner.com 7
66.132.186.176 176.186.132.66.censys-scanner.com 7
66.132.186.184 184.186.132.66.censys-scanner.com 7
66.132.186.185 185.186.132.66.censys-scanner.com 7
66.132.186.186 186.186.132.66.censys-scanner.com 7
66.132.186.191 191.186.132.66.censys-scanner.com 7
66.132.186.192 192.186.132.66.censys-scanner.com 7
66.132.186.197 197.186.132.66.censys-scanner.com 7
66.132.186.199 199.186.132.66.censys-scanner.com 7
66.132.186.200 200.186.132.66.censys-scanner.com 7
66.132.186.201 201.186.132.66.censys-scanner.com 7
66.132.195.31 31.195.132.66.censys-scanner.com 7
66.132.195.34 34.195.132.66.censys-scanner.com 7
66.132.195.36 36.195.132.66.censys-scanner.com 7
66.132.195.38 38.195.132.66.censys-scanner.com 7
66.132.195.52 52.195.132.66.censys-scanner.com 7
66.132.195.66 66.195.132.66.censys-scanner.com 7
66.132.195.75 75.195.132.66.censys-scanner.com 7
66.132.195.79 79.195.132.66.censys-scanner.com 7
66.132.195.81 81.195.132.66.censys-scanner.com 7
66.132.195.83 83.195.132.66.censys-scanner.com 7
66.132.195.84 84.195.132.66.censys-scanner.com 7
66.132.195.85 85.195.132.66.censys-scanner.com 7
66.132.195.87 87.195.132.66.censys-scanner.com 7
66.132.195.91 91.195.132.66.censys-scanner.com 7
66.132.195.94 94.195.132.66.censys-scanner.com 7
66.132.195.101 101.195.132.66.censys-scanner.com 7
66.132.195.106 106.195.132.66.censys-scanner.com 7
66.132.195.107 107.195.132.66.censys-scanner.com 7
66.132.195.111 111.195.132.66.censys-scanner.com 7
66.132.195.114 114.195.132.66.censys-scanner.com 7
66.132.195.119 119.195.132.66.censys-scanner.com 7
66.132.195.121 121.195.132.66.censys-scanner.com 7
66.132.224.82 82.224.132.66.censys-scanner.com 7
66.132.224.94 94.224.132.66.censys-scanner.com 7
66.132.224.227 227.224.132.66.censys-scanner.com 7
66.132.224.230 230.224.132.66.censys-scanner.com 7
66.132.224.232 232.224.132.66.censys-scanner.com 7
66.132.224.235 235.224.132.66.censys-scanner.com 7
66.240.223.214 pdcscan9.scanning.cybcube.com 7
66.240.223.240 pdcscan5.scanning.cybcube.com 7
68.178.166.175 175.166.178.68.host.secureserver.net 7
68.233.116.124 - 7
69.5.169.244 69-5-169-244.infrawat.ch 7
77.239.124.130 - 7
77.239.124.253 - 7
79.3.96.178 host-79-3-96-178.business.telecomitalia.it 7
79.101.53.18 79-101-53-18.static.isp.telekom.rs 7
80.82.77.33 sky.census.shodan.io 7
81.211.72.167 - 7
85.217.149.0 o001.scanner.modat.io 7
85.217.149.8 o009.scanner.modat.io 7
85.217.149.9 o010.scanner.modat.io 7
85.217.149.10 o011.scanner.modat.io 7
85.217.149.11 o012.scanner.modat.io 7
85.217.149.12 o013.scanner.modat.io 7
85.217.149.13 o014.scanner.modat.io 7
85.217.149.14 o015.scanner.modat.io 7
85.217.149.15 o016.scanner.modat.io 7
85.217.149.16 o017.scanner.modat.io 7
85.217.149.17 o018.scanner.modat.io 7
85.217.149.18 o019.scanner.modat.io 7
85.217.149.19 o020.scanner.modat.io 7
85.217.149.20 o021.scanner.modat.io 7
85.217.149.21 o022.scanner.modat.io 7
85.217.149.22 o023.scanner.modat.io 7
85.217.149.23 o024.scanner.modat.io 7
85.217.149.26 o027.scanner.modat.io 7
85.217.149.28 o029.scanner.modat.io 7
85.217.149.29 o030.scanner.modat.io 7
85.217.149.30 o031.scanner.modat.io 7
85.217.149.32 o033.scanner.modat.io 7
85.217.149.33 o034.scanner.modat.io 7
85.217.149.34 o035.scanner.modat.io 7
85.217.149.35 o036.scanner.modat.io 7
85.217.149.36 o037.scanner.modat.io 7
85.217.149.38 o038.scanner.modat.io 7
85.217.149.39 o039.scanner.modat.io 7
85.217.149.40 o040.scanner.modat.io 7
85.217.149.41 o041.scanner.modat.io 7
85.217.149.44 o044.scanner.modat.io 7
85.217.149.45 o045.scanner.modat.io 7
85.217.149.46 o046.scanner.modat.io 7
85.217.149.47 o047.scanner.modat.io 7
85.217.149.48 o048.scanner.modat.io 7
85.217.149.55 o055.scanner.modat.io 7
85.217.149.57 o057.scanner.modat.io 7
85.217.149.58 o058.scanner.modat.io 7
85.217.149.59 o059.scanner.modat.io 7
85.217.149.60 o060.scanner.modat.io 7
85.217.149.62 o062.scanner.modat.io 7
85.217.149.66 o066.scanner.modat.io 7
85.239.149.72 - 7
86.54.31.34 wine.census.shodan.io 7
86.54.31.38 blue2.census.shodan.io 7
89.248.167.131 mason.census.shodan.io 7
91.92.40.76 - 7
92.5.132.170 - 7
92.27.101.99 host-92-27-101-99.static.as13285.net 7
92.112.126.183 jennysuaadvisor.info 7
92.118.39.14 - 7
92.118.39.49 - 7
92.118.39.50 - 7
92.118.39.65 - 7
94.26.106.74 - 7
94.154.43.223 - 7
94.237.83.153 94-237-83-153.de-fra1.upcloud.host 7
95.58.255.251 95.58.255.251.static.telecom.kz 7
97.93.43.157 syn-097-093-043-157.biz.spectrum.com 7
101.36.116.232 - 7
102.23.122.235 - 7
102.220.160.110 - 7
102.220.160.124 - 7
103.4.92.103 khi.isra.edu.pk 7
103.26.136.173 mail.gshakti.org 7
103.118.29.32 - 7
103.176.64.36 - 7
107.150.97.10 - 7
116.114.84.246 - 7
119.96.173.169 - 7
123.253.162.254 - 7
124.158.13.4 - 7
125.21.59.218 - 7
130.12.181.23 - 7
130.12.182.93 - 7
130.12.182.110 - 7
130.12.182.225 - 7
131.255.240.10 - 7
139.59.147.177 - 7
144.202.92.17 144.202.92.17.vultrusercontent.com 7
147.50.231.135 idc-147-50-231-135.customer.csloxinfo.com 7
147.185.132.18 - 7
147.185.132.19 - 7
147.185.132.27 - 7
147.185.132.36 - 7
147.185.132.45 - 7
147.185.132.58 - 7
147.185.132.66 - 7
147.185.132.67 - 7
147.185.132.120 - 7
147.185.132.126 - 7
147.185.132.150 - 7
147.185.132.153 - 7
147.185.132.165 - 7
147.185.132.168 - 7
147.185.132.174 - 7
147.185.132.195 - 7
147.185.132.237 - 7
149.34.48.31 - 7
150.5.154.160 - 7
155.4.218.159 h-155-4-218-159.A980.priv.bahnhof.se 7
156.225.1.43 - 7
160.187.247.119 - 7
163.7.4.169 - 7
167.94.146.48 48.146.94.167.censys-scanner.com 7
167.94.146.49 49.146.94.167.censys-scanner.com 7
167.94.146.52 52.146.94.167.censys-scanner.com 7
167.94.146.54 54.146.94.167.censys-scanner.com 7
167.94.146.55 55.146.94.167.censys-scanner.com 7
167.94.146.61 61.146.94.167.censys-scanner.com 7
167.94.146.62 62.146.94.167.censys-scanner.com 7
167.99.140.99 - 7
168.144.65.188 - 7
170.238.160.191 - 7
171.104.143.176 - 7
171.244.39.95 - 7
176.32.193.16 - 7
177.229.197.38 customer-PUE-MCA-197-38.megared.net.mx 7
179.184.85.167 - 7
182.93.50.90 n18293z50l90.static.ctmip.net 7
184.168.124.1 1.124.168.184.host.secureserver.net 7
185.132.43.9 - 7
187.16.96.250 mvx-187-16-96-250.mundivox.com 7
188.166.29.60 - 7
193.46.255.86 - 7
193.187.110.213 - 7
195.178.110.217 - 7
198.235.24.79 - 7
198.235.24.83 - 7
198.235.24.105 - 7
198.235.24.227 - 7
198.235.24.234 - 7
199.45.154.51 51.154.45.199.censys-scanner.com 7
199.45.154.120 120.154.45.199.censys-scanner.com 7
199.45.155.94 94.155.45.199.censys-scanner.com 7
201.17.133.138 c911858a.virtua.com.br 7
205.210.31.68 - 7
205.210.31.71 - 7
205.210.31.142 - 7
205.210.31.198 - 7
207.154.224.166 - 7
210.114.22.126 - 7
211.253.9.49 - 7
216.180.246.15 crawler015.deepfield.net 7
216.180.246.118 crawler118.deepfield.net 7
219.78.63.235 n219078063235.netvigator.com 7
220.80.223.144 - 7
221.161.235.168 - 7
221.229.218.50 - 7
222.108.100.117 - 7

About

Daily feed of bad IPs (with blacklist hit scores)

Topics

Resources

Stars

2.4k stars

Watchers

80 watching

Forks

Releases

Packages

Used by

Contributors