Skip to content

Blackroute 2026.07.04

Choose a tag to compare

@github-actions github-actions released this 04 Jul 06:33
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 48
  • Records before cleanup: 4233704
  • Single IPs before cleanup: 3839913
  • CIDR prefixes before cleanup: 393791
  • Records removed by cleanup: 0
  • Records published: 4233704
  • Single IPs published: 3839913
  • CIDR prefixes published: 393791

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3396278
team_cymru_fullbogons_ipv6 157324
pop3gropers 152663
blocklist_net_ua 106708
bitwire_outbound 101310
abuseipdb_s100_30d 45753
ziyadnz_threat_intel_hourly_ipv4 45057
dataplane_attack_feeds 31372
ipsum_level1 30880
threatfox_ioc_ips 23096
shadowwhisperer_scanners 22264
threatview_ip_blocklist 20135
inversion_dnsbl_google_ipv4 19491
romainmarcoux_outgoing_40k 18253
romainmarcoux_inbound_40k 10251
abuseipdb_s100_7d 9989
blocklist_de_web 8319
phishing_database_ips 7108
cinsscore_badguys 6021
firehol_abusers_1d 3826

Top Threat Labels

Name Count
recent_attack_any 4015202
community_high_risk 3942875
malware_host_active 3909156
bruteforce 303255
phishing_or_scam 196540
c2_ioc 189549
persistent_attacker 115771
multi_sensor_high_risk 111178
spam 111070
compromised_or_hostile_host 75719
network_scan_or_abuse 28454
recent_attack_mail 13354
recent_attack_web 9313
recent_badbot_or_regbot 5527
recent_attack_ssh 4627
aggregate_abuser_1d 4073
recent_attack_imap 3854
recent_attack_ftp 423
recent_attack_sip 141
abuse 60

Top Infrastructure Labels

Name Count
bogon 160302
prefix_cybercrime 1774
hosting 890

Top Classification Labels

Name Count
aggregate_threat_intel 3918144
mail_bruteforce 154730
pop3_bruteforce 154730
aggregate_abuseipdb_confidence_100 131652
spam_source 111070
brute_force 111010
national_cert_malicious 111010
aggregate_threat_intel_hourly 108293
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 35626
internet_scanner 28454
reconnaissance 28454
c2_ioc 23440
dnsbl_malicious 19826
safe_browsing_malicious 19826
phishing_ip 7119
ultra_conservative_aggregate 4568
aggregate_blacklist_scored 3944
cloud_hosting_abuse_derived 890