Repository files navigation

This repository contains a list of IP addresses associated with various malicious activities on the internet.Many of them are part of botnets or VPN/proxy networks used to conduct cyberattacks — including DDoS and more.

⭐If you find this repository helpful, please consider giving it a star. Thank you!
📄Looking for solid and effective Cloudflare WAF expressions? Check outsefinek/Cloudflare-WAF-Expressions

Looking for better blacklists? Visitsniffcat.com! SniffCat is the new alternative to AbuseIPDB!

1. ✅ DDoS attacks (L7 – HTTP flood)
   • HTTP requests from known botnets
   • Requests with unusual HTTP headers or URI paths
   • Traffic from known bad sources
   • Requests impersonating real browsers
2. ✅ Malicious bots & crawlers
3. ✅ Bots generating artificial views (useful if you use Google AdSense)
4. ✅ Malicious VPNs & proxies

Updates usually occur every 2 hours, but occasionally there may be a delay of several days. The list is actively maintained and will not be abandoned.

https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/main.txt

curl -L --progress-bar -o main.txt https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/main.txt

https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/details.csv

curl -L --progress-bar -o details.csv https://raw.githubusercontent.com/sefinek/Malicious-IP-Addresses/main/lists/details.csv

Copyright 2024-2025 © bySefinek. All Rights Reserved.