{"id":13489871,"url":"https://github.com/stamparm/ipsum","last_synced_at":"2026-01-28T14:02:17.272Z","repository":{"id":40633228,"uuid":"50511815","full_name":"stamparm/ipsum","owner":"stamparm","description":"Daily feed of bad IPs (with blacklist hit scores)","archived":false,"fork":false,"pushed_at":"2026-01-19T02:04:57.000Z","size":5811,"stargazers_count":2150,"open_issues_count":5,"forks_count":177,"subscribers_count":76,"default_branch":"master","last_synced_at":"2026-01-19T11:50:47.368Z","etag":null,"topics":["blacklist","ipset","iptables","security","threats"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stamparm.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-01-27T14:11:13.000Z","updated_at":"2026-01-19T04:43:41.000Z","dependencies_parsed_at":"2024-03-30T03:25:29.236Z","dependency_job_id":"c72f66c4-07e6-448d-a0bf-3f02e1c0245f","html_url":"https://github.com/stamparm/ipsum","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/stamparm/ipsum","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stamparm%2Fipsum","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stamparm%2Fipsum/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stamparm%2Fipsum/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stamparm%2Fipsum/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stamparm","download_url":"https://codeload.github.com/stamparm/ipsum/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stamparm%2Fipsum/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28846058,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-28T13:02:32.985Z","status":"ssl_error","status_checked_at":"2026-01-28T13:02:04.945Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blacklist","ipset","iptables","security","threats"],"created_at":"2024-07-31T19:00:36.893Z","updated_at":"2026-01-28T14:02:17.266Z","avatar_url":"https://github.com/stamparm.png","language":null,"funding_links":[],"categories":["Others","\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","Others (1002)","\u003ca id=\"e97d183e67fa3f530e7d0e7e8c33ee62\"\u003e\u003c/a\u003e未分类","security"],"sub_categories":["\u003ca id=\"f110da0bf67359d3abc62b27d717e55e\"\u003e\u003c/a\u003e新添加的"],"readme":"![Logo](https://i.imgur.com/PyKLAe7.png)\n\n[![License](https://img.shields.io/badge/license-The_Unlicense-red.svg)](https://unlicense.org/)\n\nAbout\n----\n\n**IPsum** is a threat intelligence feed based on 30+ different publicly available [lists](https://github.com/stamparm/maltrail) of suspicious and/or malicious IP addresses. All lists are automatically retrieved and parsed on a daily (every 24 hours) basis and the final result is pushed to this repository. The feed contains IP addresses plus an occurrence count (how many source lists each IP appears on). Higher counts generally mean higher confidence and fewer false positives when blocking inbound traffic. Also, list is sorted by occurrence count (highest to lowest).\n\nAs an example, to get a fresh and ready-to-deploy auto-ban list of \"bad IPs\" that appear on at least 3 (black)lists you can run:\n\n```\ncurl -fsSL https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2\u003e/dev/null | grep -v \"^#\" | grep -Ev '[[:space:]]([12])$' | cut -f 1\n```\n\nIf you want to try it with `ipset`, you can do the following:\n\n```\nsudo -i\napt-get update \u0026\u0026 apt-get install -y iptables ipset\nipset -q flush ipsum\nipset -q create ipsum hash:ip\nfor ip in $(curl https://raw.githubusercontent.com/stamparm/ipsum/master/ipsum.txt 2\u003e/dev/null | grep -v \"#\" | grep -Ev '[[:space:]]([12])$' | cut -f 1); do ipset add ipsum $ip; done\niptables -D INPUT -m set --match-set ipsum src -j DROP 2\u003e/dev/null\niptables -I INPUT -m set --match-set ipsum src -j DROP\n```\n\nIn directory [levels](levels) you can find preprocessed raw IP lists based on number of blacklist occurrences (e.g. [levels/3.txt](levels/3.txt) holds IP addresses that can be found on 3 or more blacklists).\n\nWall of Shame (2026-01-28)\n----\n\n|IP|DNS lookup|Number of (black)lists|\n|---|---|--:|\n213.209.159.159|-|11\n80.94.92.171|-|10\n80.94.92.184|-|10\n213.209.159.158|-|10\n2.57.122.210|-|9\n45.148.10.151|-|9\n61.245.11.87|-|9\n91.224.92.108|srv-91-224-92-108.serveroffer.net|9\n92.118.39.76|-|9\n162.142.125.210|210.125.142.162.censys-scanner.com|9\n193.32.162.157|-|9\n2.57.122.238|-|8\n3.130.96.91|scan.cypex.ai|8\n37.120.213.13|-|8\n38.248.14.48|-|8\n45.148.10.121|-|8\n45.148.10.141|-|8\n45.148.10.147|-|8\n45.148.10.152|-|8\n45.148.10.157|-|8\n45.227.254.170|-|8\n54.38.190.246|vps-3d2e1516.vps.ovh.net|8\n57.128.190.44|vps-b45b3ce9.vps.ovh.net|8\n62.193.106.227|-|8\n64.89.160.47|-|8\n71.6.135.131|soda.census.shodan.io|8\n80.82.77.33|sky.census.shodan.io|8\n80.82.77.139|dojo.census.shodan.io|8\n85.111.68.98|85.111.68.98.dynamic.ttnet.com.tr|8\n91.202.233.33|-|8\n91.224.92.54|ascrl6.writeresaychooseboltsnow.com|8\n91.224.92.78|srv-91-224-92-78.serveroffer.net|8\n91.224.92.190|srv-91-224-92-190.serveroffer.net|8\n92.118.39.56|-|8\n93.174.95.106|battery.census.shodan.io|8\n95.58.255.251|95.58.255.251.static.telecom.kz|8\n101.36.104.242|-|8\n117.1.28.49|-|8\n134.65.30.157|-|8\n139.99.52.209|ip209.ip-139-99-52.net|8\n152.32.188.177|quudquu.cn|8\n152.53.184.147|v2202511309730395704.goodsrv.de|8\n162.142.125.43|43.125.142.162.censys-scanner.com|8\n162.142.125.114|114.125.142.162.censys-scanner.com|8\n162.142.125.200|200.125.142.162.censys-scanner.com|8\n167.94.146.53|53.146.94.167.censys-scanner.com|8\n167.94.146.54|54.146.94.167.censys-scanner.com|8\n167.94.146.55|55.146.94.167.censys-scanner.com|8\n167.94.146.62|62.146.94.167.censys-scanner.com|8\n175.200.104.40|-|8\n176.120.22.13|-|8\n187.16.96.250|mvx-187-16-96-250.mundivox.com|8\n187.210.77.100|customer-187-210-77-100.uninet-ide.com.mx|8\n193.32.162.145|-|8\n195.40.154.8|-|8\n204.76.203.233|204.76.203.233.ptr.pfcloud.network|8\n206.168.34.33|33.34.168.206.censys-scanner.com|8\n206.168.34.39|39.34.168.206.censys-scanner.com|8\n206.168.34.48|48.34.168.206.censys-scanner.com|8\n206.168.34.114|114.34.168.206.censys-scanner.com|8\n206.168.34.211|211.34.168.206.censys-scanner.com|8\n216.108.237.50|lasvegas-nv-datacenter.serverpoint.com|8\n1.55.33.86|-|7\n3.143.33.63|scan.cypex.ai|7\n5.253.59.74|138544.ip-ptr.tech|7\n8.243.50.114|-|7\n14.55.144.22|-|7\n23.227.147.163|-|7\n23.236.169.182|-|7\n24.199.94.128|-|7\n27.111.32.174|-|7\n36.64.68.99|-|7\n36.66.16.233|-|7\n36.189.207.209|-|7\n36.255.3.203|-|7\n37.59.110.4|vps-0b2df990.vps.ovh.net|7\n38.47.94.55|-|7\n45.43.37.254|-|7\n45.78.198.194|-|7\n45.79.128.205|lisbon.scan.bufferover.run|7\n45.79.181.251|guernsey.scan.bufferover.run|7\n45.91.64.6|-|7\n45.92.33.82|-|7\n45.119.81.249|-|7\n45.120.216.232|-|7\n45.121.147.47|-|7\n45.153.34.158|-|7\n51.89.166.236|vps-5f0ef624.vps.ovh.net|7\n51.195.42.66|vps-46f7560c.vps.ovh.net|7\n57.129.41.93|vps-d1981beb.vps.ovh.net|7\n59.26.132.170|-|7\n60.199.224.2|60-199-224-2.static.tfn.net.tw|7\n60.241.212.36|60-241-212-36.static.tpgi.com.au|7\n61.28.144.154|154.144.28.61.unassigned.static.eastern-tele.com|7\n62.3.56.187|-|7\n62.97.44.51|host-44-51.adsl.intred.it|7\n62.133.61.220|118046.ip-ptr.tech|7\n64.137.9.247|-|7\n65.49.1.24|-|7\n66.96.239.187|host-66-96-239-187.myrepublic.co.id|7\n66.132.153.116|116.153.132.66.censys-scanner.com|7\n66.132.153.124|124.153.132.66.censys-scanner.com|7\n66.132.153.129|129.153.132.66.censys-scanner.com|7\n66.132.153.134|134.153.132.66.censys-scanner.com|7\n66.132.153.141|141.153.132.66.censys-scanner.com|7\n66.154.117.138|-|7\n67.205.185.159|-|7\n67.213.118.111|-|7\n68.233.116.124|-|7\n71.6.158.166|ninja.census.shodan.io|7\n77.87.40.114|77-87-40-114.znet.kiev.ua|7\n79.104.0.82|-|7\n81.9.158.147|cm-81-9-158-147.telecable.es|7\n81.211.72.167|-|7\n85.18.236.229|85-18-236-229.ip.fastwebnet.it|7\n85.69.240.210|210.240.69.85.rev.sfr.net|7\n86.54.42.176|-|7\n88.142.46.185|185.46.142.88.rev.sfr.net|7\n92.27.101.99|host-92-27-101-99.static.as13285.net|7\n92.118.39.72|-|7\n92.185.99.40|40.pool92-185-99.dynamic.orange.es|7\n94.102.49.193|cloud.census.shodan.io|7\n95.188.91.101|-|7\n96.78.175.45|-|7\n101.36.123.102|-|7\n101.47.50.76|-|7\n101.47.160.165|-|7\n102.88.137.80|-|7\n103.23.199.49|ip103-23-199-49.cloudhost.web.id|7\n103.113.105.228|-|7\n103.144.87.192|probation-proxy|7\n103.148.100.146|-|7\n103.164.81.65|-|7\n103.176.79.137|-|7\n103.181.143.73|-|7\n103.232.121.71|nick8472839|7\n103.233.206.154|-|7\n103.236.95.173|-|7\n103.252.73.37|-|7\n105.27.148.94|-|7\n106.54.176.158|-|7\n106.75.239.166|-|7\n110.227.238.182|abts-tn-dynamic-182.238.227.110.airtelbroadband.in|7\n112.196.70.142|-|7\n112.216.120.67|-|7\n113.193.234.210|-|7\n114.111.54.188|-|7\n116.71.136.125|-|7\n117.91.186.55|-|7\n118.26.36.195|-|7\n118.26.39.79|-|7\n118.41.246.179|-|7\n118.70.178.158|-|7\n121.142.146.167|-|7\n122.155.0.205|host1.bgs.co.th|7\n125.132.34.65|-|7\n130.12.180.95|-|7\n130.12.180.107|-|7\n135.125.174.140|vps-6e6dd5be.vps.ovh.net|7\n138.204.127.54|-|7\n144.217.13.134|vps-2cf81da8.vps.ovh.ca|7\n145.239.85.111|vps-87a498e8.vps.ovh.net|7\n149.62.187.236|149.62.187.236.hostvps.it|7\n149.100.11.243|-|7\n151.80.118.222|222.ip-151-80-118.eu|7\n151.242.30.71|-|7\n152.228.131.33|vps-a34f1667.vps.ovh.net|7\n154.125.75.86|-|7\n156.238.252.133|-|7\n158.160.51.194|-|7\n158.178.141.16|-|7\n162.142.125.112|112.125.142.162.censys-scanner.com|7\n162.142.125.113|113.125.142.162.censys-scanner.com|7\n162.142.125.115|115.125.142.162.censys-scanner.com|7\n162.142.125.116|116.125.142.162.censys-scanner.com|7\n162.142.125.121|121.125.142.162.censys-scanner.com|7\n162.142.125.124|124.125.142.162.censys-scanner.com|7\n162.142.125.192|192.125.142.162.censys-scanner.com|7\n162.142.125.199|199.125.142.162.censys-scanner.com|7\n162.142.125.203|203.125.142.162.censys-scanner.com|7\n162.142.125.207|207.125.142.162.censys-scanner.com|7\n162.142.125.212|212.125.142.162.censys-scanner.com|7\n162.142.125.216|216.125.142.162.censys-scanner.com|7\n162.142.125.217|217.125.142.162.censys-scanner.com|7\n162.142.125.220|220.125.142.162.censys-scanner.com|7\n164.177.31.66|static-csq-cds-031066.business.bouyguestelecom.com|7\n165.154.245.217|-|7\n167.94.138.35|35.138.94.167.censys-scanner.com|7\n167.94.138.180|180.138.94.167.censys-scanner.com|7\n167.94.138.183|183.138.94.167.censys-scanner.com|7\n167.94.146.48|48.146.94.167.censys-scanner.com|7\n167.94.146.50|50.146.94.167.censys-scanner.com|7\n167.94.146.51|51.146.94.167.censys-scanner.com|7\n167.94.146.52|52.146.94.167.censys-scanner.com|7\n167.94.146.56|56.146.94.167.censys-scanner.com|7\n167.94.146.57|57.146.94.167.censys-scanner.com|7\n167.94.146.60|60.146.94.167.censys-scanner.com|7\n168.167.228.74|-|7\n171.25.158.68|-|7\n176.32.195.85|scan.f6.security|7\n176.65.151.22|176.65.151.22.ptr.pfcloud.network|7\n176.120.22.47|-|7\n177.70.2.220|none.underplatform.com|7\n179.33.186.151|-|7\n181.188.172.6|LPZ-181-188-172-00006.tigo.bo|7\n182.76.204.237|nsg-static-237.204.76.182-airtel.com|7\n182.253.79.195|-|7\n185.196.10.93|-|7\n187.120.37.254|hosts-187-120-37-254.iz1telecom.com.br|7\n189.50.142.82|mail.cacp.org.br|7\n189.217.130.86|customer-189-217-130-86.cablevision.net.mx|7\n189.222.218.218|189.222.218.218.dsl.dyn.telnor.net|7\n190.124.153.17|customer-ftth-sl-190-124-153-17.megacable.com.ar|7\n193.24.211.200|-|7\n194.107.115.65|-|7\n197.5.145.8|-|7\n197.5.145.102|-|7\n197.211.55.20|-|7\n198.46.146.200|198-46-146-200-host.colocrossing.com|7\n199.45.154.115|115.154.45.199.censys-scanner.com|7\n199.45.154.152|152.154.45.199.censys-scanner.com|7\n199.45.155.76|76.155.45.199.censys-scanner.com|7\n200.77.172.159|200-77-172-159.cable.dyn.cablevision.net.mx|7\n201.76.120.30|30.120.76.201.in-addr.arpa.verointernet.com.br|7\n202.51.214.99|-|7\n203.150.107.244|244.107.150.203.sta.inet.co.th|7\n206.168.34.32|32.34.168.206.censys-scanner.com|7\n206.168.34.35|35.34.168.206.censys-scanner.com|7\n206.168.34.37|37.34.168.206.censys-scanner.com|7\n206.168.34.46|46.34.168.206.censys-scanner.com|7\n206.168.34.47|47.34.168.206.censys-scanner.com|7\n206.168.34.53|53.34.168.206.censys-scanner.com|7\n206.168.34.57|57.34.168.206.censys-scanner.com|7\n206.168.34.121|121.34.168.206.censys-scanner.com|7\n206.168.34.124|124.34.168.206.censys-scanner.com|7\n206.168.34.125|125.34.168.206.censys-scanner.com|7\n206.168.34.195|195.34.168.206.censys-scanner.com|7\n206.168.34.205|205.34.168.206.censys-scanner.com|7\n206.168.34.207|207.34.168.206.censys-scanner.com|7\n206.168.34.215|215.34.168.206.censys-scanner.com|7\n206.189.82.12|-|7\n207.154.254.44|-|7\n209.15.115.240|-|7\n210.79.142.221|-|7\n210.114.22.126|-|7\n213.95.55.14|-|7\n216.10.242.161|216-10-242-161.webhostbox.net|7\n216.180.246.84|crawler084.deepfield.net|7\n216.180.246.107|crawler107.deepfield.net|7\n217.77.8.180|vmi3032384.contaboserver.net|7\n217.154.38.135|-|7\n220.247.223.56|56.sta.idc-2.slt.lk|7\n220.247.224.226|-|7\n221.161.235.168|-|7\n222.107.156.227|-|7\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstamparm%2Fipsum","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstamparm%2Fipsum","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstamparm%2Fipsum/lists"}