![Logo](https://i.imgur.com/PyKLAe7.png) [![License](https://img.shields.io/badge/license-The_Unlicense-red.svg)](https://unlicense.org/) About ---- **IPsum** is a threat intelligence feed based on 30+ different publicly available [lists](https://github.com/stamparm/maltrail) of suspicious and/or malicious IP addresses, like [IPnoise](https://ipnoise.sekuripy.hr/). All lists are automatically retrieved and parsed on a daily (every 24 hours) basis and the final result is pushed to this repository. The feed contains IP addresses plus an occurrence count (how many source lists each IP appears on). Higher counts generally mean higher confidence and fewer false positives when blocking inbound traffic. Also, list is sorted by occurrence count (highest to lowest). As an example, to get a fresh and ready-to-deploy auto-ban list of "bad IPs" that appear on at least 3 (black)lists you can run: ``` curl -fsSL https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "^#" | grep -Ev '[[:space:]]([12])$' | cut -f 1 ``` If you want to try it with `ipset`, you can do the following: ``` sudo -i apt-get update && apt-get install -y iptables ipset ipset -q flush ipsum ipset -q create ipsum hash:ip for ip in $(curl https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2>/dev/null | grep -v "#" | grep -Ev '[[:space:]]([12])$' | cut -f 1); do ipset add ipsum $ip; done iptables -D INPUT -m set --match-set ipsum src -j DROP 2>/dev/null iptables -I INPUT -m set --match-set ipsum src -j DROP ``` In directory [levels](levels) you can find preprocessed raw IP lists based on number of blacklist occurrences (e.g. [levels/3.txt](levels/3.txt) holds IP addresses that can be found on 3 or more blacklists). Wall of Shame (2026-11-06) ---- |IP|DNS lookup|Number of (black)lists| |---|---|--:| 138.226.239.233|-|11 138.226.239.234|-|11 18.218.118.203|scan.visionheight.com|10 167.94.146.53|53.146.94.167.censys-scanner.com|10 3.129.187.38|scan.visionheight.com|9 18.116.101.220|scan.visionheight.com|9 51.159.4.12|51-159-4-12.rev.poneytelecom.eu|9 77.90.185.20|-|9 152.32.236.102|-|9 167.94.146.56|56.146.94.167.censys-scanner.com|9 167.94.146.62|62.146.94.167.censys-scanner.com|9 193.47.62.111|-|9 199.165.159.129|scan-67-0.shadowserver.io|9 220.80.223.144|-|9 2.57.121.25|hosting25.tronicsat.com|8 2.57.121.112|dns112.personaliseplus.com|8 3.130.168.2|scan.visionheight.com|8 3.131.220.121|scan.visionheight.com|8 12.156.67.18|-|8 64.62.197.32|-|8 64.62.197.77|-|8 65.49.1.182|-|8 65.49.1.222|-|8 66.132.159.88|88.159.132.66.censys-scanner.com|8 66.132.172.38|38.172.132.66.censys-scanner.com|8 66.132.172.131|131.172.132.66.censys-scanner.com|8 66.132.172.133|133.172.132.66.censys-scanner.com|8 66.132.172.139|139.172.132.66.censys-scanner.com|8 66.132.172.179|179.172.132.66.censys-scanner.com|8 66.132.172.186|186.172.132.66.censys-scanner.com|8 66.132.172.213|213.172.132.66.censys-scanner.com|8 66.132.172.214|214.172.132.66.censys-scanner.com|8 66.132.195.65|65.195.132.66.censys-scanner.com|8 66.132.195.67|67.195.132.66.censys-scanner.com|8 66.132.195.84|84.195.132.66.censys-scanner.com|8 66.132.195.100|100.195.132.66.censys-scanner.com|8 79.72.59.54|-|8 88.147.30.59|88-147-30-59.static.eolo.it|8 95.188.91.101|-|8 102.220.161.119|-|8 102.220.161.174|-|8 103.159.2.113|-|8 107.150.123.48|-|8 115.160.97.208|-|8 117.6.44.221|-|8 121.242.232.216|121.242.232.216.static-chennai.vsnl.net.in|8 138.226.239.91|-|8 147.185.132.52|-|8 170.231.236.98|scan.apcosys.cc|8 179.43.153.10|undefined.hostname.localhost|8 179.43.153.18|undefined.hostname.localhost|8 185.191.236.38|scan.apcosys.cc|8 193.46.255.86|-|8 193.47.62.69|-|8 195.178.110.227|-|8 196.189.236.67|-|8 199.165.159.9|scan-91-0.shadowserver.io|8 199.165.159.105|scan-64-0.shadowserver.io|8 199.165.159.201|scan-88-0.shadowserver.io|8 199.165.159.209|scan-89-0.shadowserver.io|8 213.177.179.35|-|8 220.247.224.226|-|8 2.57.122.238|-|7 14.34.249.175|-|7 14.55.144.22|-|7 24.97.253.246|syn-024-097-253-246.biz.spectrum.com|7 31.57.34.150|ip-150.34.57.31.ptr.servcity.org|7 34.41.211.48|48.211.41.34.bc.googleusercontent.com|7 35.202.9.133|133.9.202.35.bc.googleusercontent.com|7 35.206.150.39|39.150.206.35.bc.googleusercontent.com|7 35.206.158.12|12.158.206.35.bc.googleusercontent.com|7 35.206.181.209|209.181.206.35.bc.googleusercontent.com|7 35.210.8.195|195.8.210.35.bc.googleusercontent.com|7 35.210.44.49|49.44.210.35.bc.googleusercontent.com|7 35.210.83.117|117.83.210.35.bc.googleusercontent.com|7 35.210.122.110|110.122.210.35.bc.googleusercontent.com|7 35.210.160.35|35.160.210.35.bc.googleusercontent.com|7 35.210.205.101|101.205.210.35.bc.googleusercontent.com|7 35.210.222.181|181.222.210.35.bc.googleusercontent.com|7 35.237.94.18|18.94.237.35.bc.googleusercontent.com|7 36.64.68.99|-|7 37.187.35.26|26.ip-37-187-35.eu|7 41.204.63.118|-|7 42.1.65.89|-|7 43.129.193.109|-|7 43.159.39.203|-|7 43.165.190.208|-|7 45.17.39.120|-|7 45.148.10.121|-|7 45.148.10.141|-|7 45.148.10.151|-|7 45.148.10.152|-|7 45.198.224.125|-|7 49.0.87.123|49-0-87-0.24.fixed-public.twa-bng.myaisfibre.com|7 49.72.212.22|-|7 50.6.200.164|50-6-200-164.unifiedlayer.com|7 50.6.201.228|50-6-201-228.unifiedlayer.com|7 51.38.224.114|vps-f8183341.vps.ovh.net|7 51.68.151.167|vps-a205f6c6.vps.ovh.net|7 51.75.253.68|vps-94085b09.vps.ovh.net|7 58.69.56.44|58.69.56.44.pldt.net|7 58.182.58.128|-|7 58.222.244.226|-|7 64.62.197.17|-|7 64.62.197.48|-|7 64.62.197.62|-|7 64.62.197.92|-|7 64.62.197.107|-|7 64.62.197.122|-|7 64.62.197.137|-|7 64.62.197.167|-|7 64.62.197.212|-|7 65.49.1.24|-|7 65.49.1.38|-|7 65.49.1.108|-|7 65.49.1.152|-|7 65.49.20.67|-|7 66.116.199.234|server.vps.uvitanutrition.com|7 66.132.159.80|80.159.132.66.censys-scanner.com|7 66.132.159.134|134.159.132.66.censys-scanner.com|7 66.132.172.37|37.172.132.66.censys-scanner.com|7 66.132.172.41|41.172.132.66.censys-scanner.com|7 66.132.172.45|45.172.132.66.censys-scanner.com|7 66.132.172.101|101.172.132.66.censys-scanner.com|7 66.132.172.107|107.172.132.66.censys-scanner.com|7 66.132.172.109|109.172.132.66.censys-scanner.com|7 66.132.172.129|129.172.132.66.censys-scanner.com|7 66.132.172.132|132.172.132.66.censys-scanner.com|7 66.132.172.134|134.172.132.66.censys-scanner.com|7 66.132.172.136|136.172.132.66.censys-scanner.com|7 66.132.172.140|140.172.132.66.censys-scanner.com|7 66.132.172.177|177.172.132.66.censys-scanner.com|7 66.132.172.180|180.172.132.66.censys-scanner.com|7 66.132.172.181|181.172.132.66.censys-scanner.com|7 66.132.172.182|182.172.132.66.censys-scanner.com|7 66.132.172.195|195.172.132.66.censys-scanner.com|7 66.132.172.199|199.172.132.66.censys-scanner.com|7 66.132.172.209|209.172.132.66.censys-scanner.com|7 66.132.172.218|218.172.132.66.censys-scanner.com|7 66.132.186.163|163.186.132.66.censys-scanner.com|7 66.132.186.165|165.186.132.66.censys-scanner.com|7 66.132.186.172|172.186.132.66.censys-scanner.com|7 66.132.186.175|175.186.132.66.censys-scanner.com|7 66.132.186.178|178.186.132.66.censys-scanner.com|7 66.132.186.180|180.186.132.66.censys-scanner.com|7 66.132.186.181|181.186.132.66.censys-scanner.com|7 66.132.186.205|205.186.132.66.censys-scanner.com|7 66.132.195.32|32.195.132.66.censys-scanner.com|7 66.132.195.42|42.195.132.66.censys-scanner.com|7 66.132.195.47|47.195.132.66.censys-scanner.com|7 66.132.195.53|53.195.132.66.censys-scanner.com|7 66.132.195.54|54.195.132.66.censys-scanner.com|7 66.132.195.56|56.195.132.66.censys-scanner.com|7 66.132.195.74|74.195.132.66.censys-scanner.com|7 66.132.195.77|77.195.132.66.censys-scanner.com|7 66.132.195.78|78.195.132.66.censys-scanner.com|7 66.132.195.79|79.195.132.66.censys-scanner.com|7 66.132.195.80|80.195.132.66.censys-scanner.com|7 66.132.195.86|86.195.132.66.censys-scanner.com|7 66.132.195.90|90.195.132.66.censys-scanner.com|7 66.132.195.95|95.195.132.66.censys-scanner.com|7 66.132.195.96|96.195.132.66.censys-scanner.com|7 66.132.195.111|111.195.132.66.censys-scanner.com|7 66.132.195.113|113.195.132.66.censys-scanner.com|7 66.132.195.116|116.195.132.66.censys-scanner.com|7 66.132.195.119|119.195.132.66.censys-scanner.com|7 66.132.195.172|172.195.132.66.censys-scanner.com|7 66.132.195.216|216.195.132.66.censys-scanner.com|7 66.132.224.237|237.224.132.66.censys-scanner.com|7 69.5.169.113|69-5-169-113.infrawat.ch|7 69.5.169.134|69-5-169-134.infrawat.ch|7 69.5.169.141|69-5-169-141.infrawat.ch|7 69.5.169.176|69-5-169-176.infrawat.ch|7 71.6.134.236|server9-centos7134236.aspadmin.net|7 71.6.199.23|einstein.census.shodan.io|7 77.67.26.210|-|7 77.239.124.34|-|7 77.239.124.39|-|7 78.109.200.147|-|7 79.3.96.178|host-79-3-96-178.business.telecomitalia.it|7 79.108.220.136|-|7 80.82.77.139|dojo.census.shodan.io|7 80.94.92.234|-|7 81.28.167.30|-|7 81.192.46.45|adsl-45-46-192-81.adsl.iam.net.ma|7 85.217.149.15|o016.scanner.modat.io|7 85.217.149.30|o031.scanner.modat.io|7 87.103.126.54|54.126.103.87.rev.vodafone.pt|7 92.27.101.99|host-92-27-101-99.static.as13285.net|7 92.118.39.49|-|7 92.207.4.157|-|7 101.36.119.203|-|7 102.88.137.80|-|7 102.88.137.145|-|7 102.88.137.213|-|7 102.209.76.136|-|7 102.220.161.86|-|7 102.220.161.170|-|7 102.223.92.101|-|7 103.48.192.48|-|7 103.117.145.130|blockonetech.com.sg|7 103.151.60.214|-|7 103.159.199.43|ip-103-159-199-43.moratelindo.net.id|7 103.187.165.26|host-103-187-165-26.taranet.id|7 103.195.236.35|-|7 103.237.144.204|-|7 103.248.120.6|-|7 107.0.200.227|smtp.nationaltubesupply.com|7 107.155.55.85|-|7 107.180.88.176|176.88.180.107.host.secureserver.net|7 109.233.21.109|-|7 110.49.76.244|-|7 111.238.174.6|KD111238174006.ppp-bb.dion.ne.jp|7 114.219.157.97|-|7 115.190.188.201|-|7 117.62.22.127|-|7 120.48.45.34|-|7 121.227.31.13|-|7 122.15.129.26|-|7 123.58.215.196|-|7 124.155.125.131|v125131.ppp.asahi-net.or.jp|7 129.121.139.243|129-121-139-243.unifiedlayer.com|7 133.88.99.250|v133-88-99-250.xbtz.static.cnode.jp|7 136.232.11.10|-|7 138.226.239.90|-|7 139.185.55.154|-|7 147.185.132.16|-|7 147.185.132.31|-|7 147.185.132.36|-|7 147.185.132.39|-|7 147.185.132.40|-|7 147.185.132.103|-|7 147.185.132.106|-|7 147.185.132.109|-|7 147.185.132.117|-|7 147.185.132.171|-|7 147.185.132.174|-|7 147.185.132.198|-|7 147.185.132.210|-|7 147.185.132.213|-|7 147.185.133.201|-|7 151.243.11.148|-|7 151.243.11.168|-|7 152.32.138.230|wmvbh.space|7 154.125.228.145|-|7 156.225.1.91|-|7 156.225.1.107|-|7 156.225.1.115|-|7 156.232.13.246|-|7 158.51.96.38|unknown.ip-xfer.net|7 159.112.138.47|-|7 163.7.11.126|-|7 164.30.17.82|ecs-164-30-17-82.reverse.open-telekom-cloud.com|7 165.154.163.10|-|7 167.94.146.48|48.146.94.167.censys-scanner.com|7 167.94.146.49|49.146.94.167.censys-scanner.com|7 167.94.146.57|57.146.94.167.censys-scanner.com|7 167.94.146.58|58.146.94.167.censys-scanner.com|7 167.94.146.59|59.146.94.167.censys-scanner.com|7 167.94.146.63|63.146.94.167.censys-scanner.com|7 170.231.237.214|scan.apcosys.cc|7 171.25.158.87|-|7 171.220.244.134|-|7 176.32.193.16|-|7 177.11.196.84|177-11-196-84.avato.com.br|7 179.43.153.2|undefined.hostname.localhost|7 179.184.218.49|imparhoteis.static.gvt.net.br|7 180.167.207.234|-|7 182.42.113.10|-|7 182.43.235.218|-|7 182.73.164.228|-|7 184.168.21.211|211.21.168.184.host.secureserver.net|7 185.123.13.209|-|7 185.230.216.5|ip185-230-216-5.pbiaas.com|7 185.242.226.19|security.criminalip.com|7 186.96.158.180|fixed-186-96-158-180.totalplay.net|7 186.215.107.189|corporativo.static.gvt.net.br|7 186.238.242.194|-|7 187.16.96.250|mvx-187-16-96-250.mundivox.com|7 187.218.57.50|customer-187-218-57-50.uninet-ide.com.mx|7 190.105.160.5|-|7 192.207.105.196|nothing.attdns.com|7 193.24.211.219|-|7 195.178.110.218|-|7 195.178.110.228|-|7 195.178.110.232|-|7 196.188.93.169|-|7 197.5.145.102|-|7 197.221.232.44|16.44.telone.co.zw|7 197.227.8.186|-|7 198.235.24.14|-|7 198.235.24.204|-|7 199.165.159.17|scan-92-0.shadowserver.io|7 199.165.159.25|scan-93-0.shadowserver.io|7 199.165.159.33|scan-94-0.shadowserver.io|7 199.165.159.49|scan-96-0.shadowserver.io|7 199.165.159.57|scan-97-0.shadowserver.io|7 199.165.159.81|scan-61-0.shadowserver.io|7 199.165.159.89|scan-62-0.shadowserver.io|7 199.165.159.97|scan-63-0.shadowserver.io|7 199.165.159.113|scan-65-0.shadowserver.io|7 199.165.159.137|scan-80-0.shadowserver.io|7 199.165.159.145|scan-81-0.shadowserver.io|7 199.165.159.161|scan-83-0.shadowserver.io|7 199.165.159.177|scan-85-0.shadowserver.io|7 199.165.159.193|scan-87-0.shadowserver.io|7 201.124.171.198|acceso-201-124-171-198.prod-infinitum.com.mx|7 203.55.81.2|-|7 203.113.105.99|-|7 205.210.31.93|-|7 209.99.190.186|-|7 210.114.22.126|-|7 211.251.245.88|-|7 212.33.198.41|mail.parstechai.com|7 216.180.246.153|crawler153.deepfield.net|7 218.148.17.156|-|7 219.150.93.157|-|7 221.156.126.1|-|7 221.229.218.50|-|7 222.107.156.227|-|7 222.186.68.153|-|7 223.197.186.7|223-197-186-7.static.imsbiz.com|7