Skip to content

Blackroute 2026.07.03

Choose a tag to compare

@github-actions github-actions released this 03 Jul 06:46
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 46
  • Records before cleanup: 4227418
  • Single IPs before cleanup: 3834165
  • CIDR prefixes before cleanup: 393253
  • Records removed by cleanup: 0
  • Records published: 4227418
  • Single IPs published: 3834165
  • CIDR prefixes published: 393253

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3393069
team_cymru_fullbogons_ipv6 157299
pop3gropers 152714
blocklist_net_ua 106181
bitwire_outbound 99544
abuseipdb_s100_30d 46277
ziyadnz_threat_intel_hourly_ipv4 44243
ipsum_level1 32200
dataplane_attack_feeds 31394
threatfox_ioc_ips 23457
shadowwhisperer_scanners 22299
inversion_dnsbl_google_ipv4 19491
threatview_ip_blocklist 18800
romainmarcoux_outgoing_40k 18357
romainmarcoux_inbound_40k 10358
abuseipdb_s100_7d 8867
blocklist_de_web 8440
phishing_database_ips 7109
cinsscore_badguys 6154
firehol_abusers_1d 3685

Top Threat Labels

Name Count
recent_attack_any 4008891
community_high_risk 3936952
malware_host_active 3902875
bruteforce 302422
phishing_or_scam 193640
c2_ioc 186651
persistent_attacker 116860
spam 110439
multi_sensor_high_risk 109699
compromised_or_hostile_host 74401
network_scan_or_abuse 28454
recent_attack_mail 12684
recent_attack_web 9566
recent_badbot_or_regbot 5205
recent_attack_ssh 4646
aggregate_abuser_1d 3891
recent_attack_imap 3172
recent_attack_ftp 464
recent_attack_sip 132
abuse 60

Top Infrastructure Labels

Name Count
bogon 160278
prefix_cybercrime 1775
hosting 889

Top Classification Labels

Name Count
aggregate_threat_intel 3913600
mail_bruteforce 154675
pop3_bruteforce 154675
aggregate_abuseipdb_confidence_100 132230
spam_source 110439
brute_force 110379
national_cert_malicious 110379
aggregate_threat_intel_hourly 107425
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 35443
internet_scanner 28454
reconnaissance 28454
c2_ioc 23468
dnsbl_malicious 19833
safe_browsing_malicious 19833
phishing_ip 7119
ultra_conservative_aggregate 4567
aggregate_blacklist_scored 3944
cloud_hosting_abuse_derived 889