https://github.com/sefinek/malicious-ip-addresses
A list of malicious IP addresses associated with botnets, cyberattacks, and the generation of artificial traffic on websites. Useful for network administrators and security companies to block threats and protect against DDoS attacks.
https://github.com/sefinek/malicious-ip-addresses
botnets cybersecurity ddos ddos-protection firewall google-adsense ip-list list malicious malicious-ips malicious-url malicious-url-detection network-monitoring protection security security-tools threat-detection traffic-analysis
Last synced: 12 months ago
JSON representation
A list of malicious IP addresses associated with botnets, cyberattacks, and the generation of artificial traffic on websites. Useful for network administrators and security companies to block threats and protect against DDoS attacks.
- Host: GitHub
- URL: https://github.com/sefinek/malicious-ip-addresses
- Owner: sefinek
- License: mit
- Created: 2024-09-02T18:49:49.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-07-21T05:08:56.000Z (12 months ago)
- Last Synced: 2025-07-21T07:08:59.179Z (12 months ago)
- Topics: botnets, cybersecurity, ddos, ddos-protection, firewall, google-adsense, ip-list, list, malicious, malicious-ips, malicious-url, malicious-url-detection, network-monitoring, protection, security, security-tools, threat-detection, traffic-analysis
- Language: JavaScript
- Homepage:
- Size: 19.7 MB
- Stars: 29
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# 📃 Malicious IP Address List
This repository contains a list of IP addresses associated with various malicious activities on the internet.
Many of them are part of botnets or VPN/proxy networks used to conduct cyberattacks — including DDoS and more.
⭐ **If you find this repository helpful, please consider giving it a star. Thank you!**
📄 **Looking for solid and effective Cloudflare WAF expressions? Check out [sefinek/Cloudflare-WAF-Expressions](https://github.com/sefinek/Cloudflare-WAF-Expressions)**
## SniffCat
Looking for better blacklists? Visit [sniffcat.com](https://sniffcat.com)! SniffCat is the new alternative to AbuseIPDB!
## What Can This List Block?
1. ✅ DDoS attacks (L7 – HTTP flood)
- HTTP requests from known botnets
- Requests with unusual HTTP headers or URI paths
- Traffic from known bad sources
- Requests impersonating real browsers
2. ✅ Malicious bots & crawlers
3. ✅ Bots generating artificial views (useful if you use Google AdSense)
4. ✅ Malicious VPNs & proxies
> [!IMPORTANT]
> Blocking IP addresses should be done carefully to avoid disrupting legitimate traffic. Regularly updating the list is highly recommended.
## Cron
Updates usually occur every 2 hours, but occasionally there may be a delay of several days. The list is actively maintained and will not be abandoned.
## Available Files
### ✅ TXT (recommended)
```text
https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/main.txt
```
#### Download via curl
```bash
curl -L --progress-bar -o main.txt https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/main.txt
```
### 📊 CSV
```text
https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/details.csv
```
#### Download via curl
```bash
curl -L --progress-bar -o details.csv https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/details.csv
```
> [!IMPORTANT]
> This file contains user agents, endpoints, and IP addresses that have been blacklisted.
> Not all IP addresses from [main.txt](lists/main.txt) are included in [details.csv](lists/details.csv)!
## MIT License
Copyright 2024-2025 © by [Sefinek](https://sefinek.net). All Rights Reserved.