Open Dynamic Block Lists
These lists can be imported into any device that accept blocklists with standalone ip addressess (x.x.x.x) and ranges (x.x.x.x-y.y.y.y).
Keep polling interval at 15 minutes or higher and use https if possible.
| List name | Entries | Last update | Recommended usage | Description |
| Emerging Threats: Known Compromised Hosts | 312 | 2025-11-05 20:00 | Incoming | This ruleset is compiled from a number of sources and contains significantly infected and hostile hosts. Read more |
| TOR exit nodes | 1120 | 2025-11-05 20:00 | Incoming | A list of known TOR exit nodes |
| BruteforceBlocker | 299 | 2025-11-05 20:00 | Incoming | See http://danger.rulez.sk/index.php/bruteforceblocker |
| Blocklist.de All | 21500 | 2025-11-05 20:00 | Incoming | Blocklist.de all list contains IP addresses that have attacked one of our customers/servers in the last 48 hours. |
| Dshield (optimized) | 20 | 2025-11-05 20:00 | Incoming | Dshield.org recommended block list |
| SSL Abuse IP list | 0 | 2025-10-16 15:09 | Outgoing | SSLBL 30 days block list. https://sslbl.abuse.ch/blacklist/ |
| IPSum Level 3 | 18930 | 2025-11-05 20:00 | Outgoing | IPSum: IPs found in 3 or more blocklists https://github.com/stamparm/ipsum |
BTC: bc1qmc2us65qyf9yqtuhqlj2cshy46959sxwf6qwln
1