Helping Secure The Internet


We maintain and publish lists of IP addresses involved in malicious activities. Our blocklists contain IP addreses that we have detected running port scans or brute force attacks on our network of honeypot servers. These lists are free for you to use in securing your networks and servers. It is recommended that you automatically download and install the list of all known malicious addresses once a day on your firewalls or servers and block all traffic from these IP addresses.

Download Lists

These are IP addresses associated with port scanning or brute force attacks over the last 30 days. You can import the list of all malicious IP addresses or use the protocol specific lists.

ALL Malicious Addresses

SSH Malicious Addresses
WWW Malicious Addresses
EMAIL Malicious Addresses
MSSQL Malicious Addresses
MYSQL Malicious Addresses
RDP Malicious Addresses
SIP Malicious Addresses