Skip to content

Blackroute 2026.07.01

Choose a tag to compare

@github-actions github-actions released this 01 Jul 07:24
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 47
  • Records before cleanup: 4201011
  • Single IPs before cleanup: 3808611
  • CIDR prefixes before cleanup: 392400
  • Records removed by cleanup: 0
  • Records published: 4201011
  • Single IPs published: 3808611
  • CIDR prefixes published: 392400

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3364615
team_cymru_fullbogons_ipv6 157267
pop3gropers 152186
blocklist_net_ua 105384
bitwire_outbound 103047
abuseipdb_s100_30d 52216
ipsum_level1 34545
ziyadnz_threat_intel_hourly_ipv4 34400
threatview_ip_blocklist 30188
dataplane_attack_feeds 29131
threatfox_ioc_ips 23549
shadowwhisperer_scanners 22148
inversion_dnsbl_google_ipv4 19502
romainmarcoux_outgoing_40k 17003
blocklist_de_mail 8315
abuseipdb_s100_7d 7614
phishing_database_ips 7109
cinsscore_badguys 6551
romainmarcoux_inbound_40k 5717
firehol_abusers_1d 4047

Top Threat Labels

Name Count
recent_attack_any 3982801
community_high_risk 3911382
malware_host_active 3876573
bruteforce 301782
phishing_or_scam 204208
c2_ioc 197217
persistent_attacker 129922
spam 110105
multi_sensor_high_risk 108055
compromised_or_hostile_host 85789
network_scan_or_abuse 28454
recent_attack_web 17065
recent_attack_mail 14481
recent_attack_ssh 9191
recent_attack_imap 4902
aggregate_abuser_1d 4285
recent_badbot_or_regbot 3406
recent_attack_ftp 480
abuse 60
recent_attack_sip 50

Top Infrastructure Labels

Name Count
bogon 160241
prefix_cybercrime 1778
hosting 894

Top Classification Labels

Name Count
aggregate_threat_intel 3890010
mail_bruteforce 154606
pop3_bruteforce 154606
aggregate_abuseipdb_confidence_100 133524
spam_source 110105
brute_force 110045
national_cert_malicious 110045
aggregate_threat_intel_hourly 106672
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 34610
internet_scanner 28454
reconnaissance 28454
c2_ioc 23560
dnsbl_malicious 19842
safe_browsing_malicious 19842
phishing_ip 7119
ultra_conservative_aggregate 4567
aggregate_blacklist_scored 3944
cloud_hosting_abuse_derived 894