ip-blacklist

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites

Allow/deny traffic in nftables using country specific IP blocks

Block routes by IP

A bash script to ban large numbers of IP addresses published in blacklists.

🔒 BlackIPforFirewall is a 🤖 script for Mikrotik Router OS that updates a list of IPs with bad reputation in the firewall list. 🛡️ Protect your network from malware, spam, and other unwanted activities! The IPs are regularly updated for maximum protection. 🚀 Fast & easy 2 install, BlackIPforFirewall is your ally in the fight for network security

Automated IP blacklist aggregator from 23 threat intelligence sources - updated hourly via GitHub Actions

A wrapper script over iptables/ipset to manage host based IP dynamic blacklists and whitelists

Our publicly available blacklists and country IP CIDR blocks.

Lockdown is a set of scripts, lists and configuration files used to quickly implement granular intelligent automated firewall security at the host level using iptables, ipset and fail2ban.

A simple tool to enumerate IpAddress and check whether an IP address falls in the defined range or set.

PHP script with control panel to block IP web access from certain countries of your choosing.

Prowl is an API that allows you to send IP and in return obtain the reputation of the IP as well as indicators of attacks and indicators of compromise associated with the address. Lupovis monitors the web in real time and identifies malicious IP addresses for you.

MikroTik Automatically Updated Address List

Lightweight alternative to fail2ban using nftables (banning IPs with failed login attempts)

An automated mirror of malicious IP addresses from packetsdatabase.com, providing continuously updated blocklists and security feeds in multiple formats.

In this repository we will catch some fields on TLS traffic, and use Threat Intel to detect if the packets received

IP list of port scanners

Country IP Blocks is a repository that provides organized lists of IPv4 and IPv6 address ranges grouped by country in CIDR notation. These datasets are collected from official Regional Internet Registries (RIRs) such as ARIN, RIPE NCC, APNIC, LACNI/C, and AFRINIC, which manage global IP address allocations.