The project's README from github.com/borestad/blocklist-abuseipdb. As one markdown file: README.md.
Lists with worst IPv4 & IPv6 offenders (~99% confidence), provided by AbuseIPDB (with permission).
StatisticsHall of Shame ip lists with aggressive /24 subnets -
i.e 1
2
3ASN Database from ipinfo.io
is used to decorate all IPs with metadatahoneypot integration with verified abuse score (to get those
pesky ~90% confidence offenders)Disclaimer:
#1This repository is using the "free forever" plan (5 fetches per day + 1000 ip lookups), but also aggregates the data from multiple publicly free & legal sources (also with free plan) to create a larger iplist.
#2All credits goes to AbuseIPDB. Please support them. Seriously!
#3Use ip-blocking with caution. Firewalls should preferably use rules on the incoming WAN side
#4Recommended usage is the maximum 30 days or less to avoid false positives.
#5Do not use theabuseipdb-s100-all.ipv4. It is only exposed for statistical usage.
#6Regarding naming: s100 means ~100% confidence lists.
#7IPv6 blocking is almost useless.Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.
Source: AbuseIPDB
Last check: 2026-10-15 - 01:04:29 (UTC)
❯ abuseipdb-s100-1d (47451 ips)
❯ abuseipdb-s100-3d (55881 ips)
❯ abuseipdb-s100-7d (74301 ips)
❯ abuseipdb-s100-14d (92063 ips)
❯ abuseipdb-s100-30d (127740 ips)
❯ abuseipdb-s100-60d (210367 ips)
❯ abuseipdb-s100-90d (258075 ips)
❯ abuseipdb-s100-120d (305887 ips)
❯ abuseipdb-s100-180d (408546 ips)
❯ abuseipdb-s100-365d (739949 ips)
❯ abuseipdb-s100-all (2403926 ips)