Skip to content

Blackroute 2026.06.30

Choose a tag to compare

@github-actions github-actions released this 30 Jun 07:08
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 48
  • Records before cleanup: 4195589
  • Single IPs before cleanup: 3803710
  • CIDR prefixes before cleanup: 391879
  • Records removed by cleanup: 0
  • Records published: 4195589
  • Single IPs published: 3803710
  • CIDR prefixes published: 391879

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3361107
team_cymru_fullbogons_ipv6 157263
pop3gropers 152596
blocklist_net_ua 105521
bitwire_outbound 101718
abuseipdb_s100_30d 52089
ipsum_level1 34858
ziyadnz_threat_intel_hourly_ipv4 33306
dataplane_attack_feeds 29607
threatfox_ioc_ips 23472
shadowwhisperer_scanners 22204
inversion_dnsbl_google_ipv4 19527
romainmarcoux_outgoing_40k 17907
threatview_ip_blocklist 17805
blocklist_de_mail 8581
blocklist_de_web 7959
phishing_database_ips 7109
abuseipdb_s100_7d 6809
cinsscore_badguys 5987
romainmarcoux_inbound_40k 5558

Top Threat Labels

Name Count
recent_attack_any 3977908
community_high_risk 3906238
malware_host_active 3866961
bruteforce 301054
phishing_or_scam 192350
c2_ioc 185358
persistent_attacker 122915
spam 109509
multi_sensor_high_risk 107530
compromised_or_hostile_host 73829
network_scan_or_abuse 28454
recent_attack_web 16756
recent_attack_mail 14414
recent_attack_ssh 9081
aggregate_abuser_1d 4154
recent_attack_imap 4141
recent_badbot_or_regbot 3684
recent_attack_ftp 338
abuse 60
recent_attack_sip 41

Top Infrastructure Labels

Name Count
bogon 160240
prefix_cybercrime 1778
hosting 895

Top Classification Labels

Name Count
aggregate_threat_intel 3881173
mail_bruteforce 154562
pop3_bruteforce 154562
aggregate_abuseipdb_confidence_100 133282
spam_source 109509
brute_force 109449
national_cert_malicious 109449
aggregate_threat_intel_hourly 106225
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 34222
internet_scanner 28454
reconnaissance 28454
c2_ioc 23814
dnsbl_malicious 19864
safe_browsing_malicious 19864
phishing_ip 7119
ultra_conservative_aggregate 4569
aggregate_blacklist_scored 3944
cloud_hosting_abuse_derived 895