VOOZH

URL: https://github.com/topics/malicious-ips

⇱ malicious-ips · GitHub Topics · GitHub

#

malicious-ips

Here are 22 public repositories matching this topic...

romainmarcoux / malicious-ip

Aggregation of lists of malicious IP addresses, to be blocked in the WAN > LAN direction, integrated into firewalls: FortiGate, Palo Alto, pfSense, IPtables

shodan botnet webserver scanner firewall blocklist iptables waf pfsense paloaltonetworks fortinet firewalls blocklists cyberattack malicious-ips blocklist-aggregator

Updated

duggytuxy / syswarden

An advanced, ultra-lightweight firewall orchestrator for Linux. SysWarden integrates Data-Shield IPv4 blocklists, Geo-Blocking, Spamhaus ASN, Fail2ban, and a WireGuard VPN to proactively block 98.2% of malicious traffic. Secure your servers and Docker containers with a near-zero memory footprint.

linux firewall firewalld fail2ban ipv4-address ipset-lists firewall-configuration wireguard security-tools firewall-rules blocklists nftables wazuh docker-security vps-cloud vps-server malicious-ips cybersecurity-tools abuseipdb-integration syswarden

Updated
Shell

OsmanKandemir / indicator-intelligence

Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files.

ioc domains malware-research cti malicious-domains cyber-security malicious security-tools threat-intelligence hacking-tools cyber-threat-intelligence malicious-url-detection cyber-threat-analyst cyber-intelligence malicious-link cyber-threat-hunting malicious-ips cyber-analyst

Updated
Python

OsmanKandemir / associated-threat-analyzer

Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists.

ioc cti malicious-domains cyber-security security-tools threat-intelligence hacking-tools malicious-url cyber-threat-intelligence malicious-url-detection asset-discovery ethical-hacking-tools cyber-intelligence malicious-link cyber-threat-hunting malicious-ips cyber-analyst

Updated
Python

sefinek / Malicious-IP-Addresses

A list of malicious IP addresses associated with botnets, cyberattacks, and the generation of artificial traffic on websites. Useful for network administrators and security companies to block threats and protect against DDoS attacks.

security list protection ddos firewall traffic-analysis cybersecurity network-monitoring google-adsense ddos-protection malicious security-tools botnets malicious-url malicious-url-detection threat-detection malicious-ips ip-list

Updated
JavaScript

BlacKSnowDot0 / packetsdatabase-db

An automated mirror of malicious IP addresses from packetsdatabase.com, providing continuously updated blocklists and security feeds in multiple formats.

nginx security automation firewall blocklist iptables db cybersecurity ipset banlist ip-blacklist blocklists threat-intelligence malicious-ips

Updated
Shell

criminalip / zabbix

Criminal IP is a comprehensive OSINT-based Cyber Threat Intelligence (CTI) search engine that can be used as an automated Attack Surface Management solution.

search-engine zabbix cyberthreatintelligence malicious-ips criminalip

Updated
Python

digisquad-repo / digi-magnet

Curated block list including IPs, FQDNs, Domains, JA3, etc. Tailored for utmost precision to minimize false positives in personal or non-commercial environments. Updated regularly. For assistance or to support our initiatives, please reach out or consider participating in our sponsorship program

osint cti malicious-domains malicious threat-intelligence phishing-sites block-list malicious-url malicious-link malicious-ips

Updated

MaximeWewer / HeimdallBlocklists

HeimdallBlocklists is a project designed to merge and manage multiple community-maintained blocklists, making them easily usable across various firewall solutions.

firewall blocklist iptables opnsense pfsense fortinet ip-ban malicious-ips blocklist-aggregator

Updated
Python

Lupovis / GetIPReputation

Use the Prowl API to obtain IP Reputation, Techniques Tactics and Procedures, Indicators of Attacks and Indicators of Compromise related to a public IP.

security osint networking ip reputation network-analysis hacker security-tools ttp ip-reputation hacking-tools malicious-traffic osint-tool ip-reputation-checker osint-tools malicious-ips

Updated
Python

jkerai1 / VirusTotal-IP-powershell

Triage an IP using powershell

api virus powershell country incident-response country-codes ip api-rest asn soc triage virustotal blueteam malicious threat-intelligence blueteaming virustotal-api malicious-ips

Updated
PowerShell

akyriako / ipquery

Self-hosted Geolocation and Malicious IP Detection API

geolocation-api abuseipdb abuseipdb-api malicious-ips ipquery

Updated
Go

cl3m4x1l / IPbandit

IP blacklist aggregator

blacklist firewall blocklist iptables opnsense pfsense firewalld fail2ban ipset fortigate fortinet banlist network-security ip-blacklist ufw firewall-rules blacklist-ips ips-blacklist ip-blocklist malicious-ips

Updated
Shell

MarcusHoltz / ipblocklist-geofiltered-aggregator

Automated IP blocklist aggregation with geolocation-based country filtering, Docker ready, and twice daily runs via GitHub Actions

security firewall blocklist geolocation ipv4 iptables opnsense pfsense automated-deployment ipset network-security iplist ipblocklist ip-filtering ip-blocklist malicious-ips blocklist-aggregator

Updated
Python

SniffCatDB / T-Pot-To-SniffCat

SniffCat integration enabling automatic reporting of malicious activity detected by T-Pot honeypots by monitoring logs, analyzing attack attempts, and submitting reports automatically.

nodejs node blacklist integration honeypot malicious t-pot abuseipdb malicious-ips sniffcat sniffcat-api

Updated
JavaScript

mycyberrepo / checkips

Takes a list of IP addresses stored in a file, looks them up using abuseipdb.com, and writes the output to a CSV file.

abuseipdb malicious-ips

Updated
Shell

Azerbaijan-Cybersecurity-Center / LogCTIAI

Offline-first, budget-aware log+CTI pipeline with optional LLM enrichment; grouping/sampling gates, strong CTI cache, reproducible reports, Streamlit UI.

python log-analysis ai offline-first reporting cybersecurity cti threat-intelligence security-analytics groq streamlit malicious-ips llm cti-migration log-a llm-ana

Updated
Python

SniffCatDB / Cloudflare-WAF-To-SniffCat

A Node.js script that automates the reporting of malicious IP addresses detected by Cloudflare WAF to SniffCatDB ☁️🕵️

nodejs integrations node blacklist integration cloudflare malicious abuseipdb malicious-ips cloudflare-waf cloudflare-waf-expression malicious-ip-detection sniffcat sniffcatdb sniffcat-integration sniffcat-api

Updated
JavaScript

im4kv / Malicious-Traffic-Research

My personal research on different attack vectors, including DDoS attack types, payloads and a honeypot sensor to detect malicious actors.

security honeypot traffic-analysis ddos-attacks malicious c2c command-and-control malicious-traffic attack-vectors malicious-ips

Updated
Python

ufukart / Blacklist

🛡️ Comprehensive IP blacklist from trusted security sources - Updated regularly | Free to use Malware, Botnet, Spam & Attack Prevention for security, firewall, or research purposes.

security blacklist botnet network firewall ban malware iptables cybersecurity spam-prevention fail2ban ipset network-security ip-blacklist ddos-protection threat-intelligence ip-blocking malicious-ips

Updated

Improve this page

Add a description, image, and links to the malicious-ips topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the malicious-ips topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.