Skip to content

Blackroute 2026.07.05

Choose a tag to compare

@github-actions github-actions released this 05 Jul 06:55
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 49
  • Records before cleanup: 4236699
  • Single IPs before cleanup: 3843276
  • CIDR prefixes before cleanup: 393423
  • Records removed by cleanup: 0
  • Records published: 4236699
  • Single IPs published: 3843276
  • CIDR prefixes published: 393423

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3400245
team_cymru_fullbogons_ipv6 157328
pop3gropers 152074
blocklist_net_ua 106134
bitwire_outbound 101991
abuseipdb_s100_30d 49695
ziyadnz_threat_intel_hourly_ipv4 45881
ipsum_level1 31565
dataplane_attack_feeds 31525
threatfox_ioc_ips 23001
shadowwhisperer_scanners 22505
threatview_ip_blocklist 21271
inversion_dnsbl_google_ipv4 19484
romainmarcoux_outgoing_40k 17769
abuseipdb_s100_7d 8371
blocklist_de_mail 8258
phishing_database_ips 7108
romainmarcoux_inbound_40k 6111
cinsscore_badguys 5622
firehol_abusers_1d 3340

Top Threat Labels

Name Count
recent_attack_any 4018587
community_high_risk 3946399
malware_host_active 3913092
bruteforce 303229
phishing_or_scam 197317
c2_ioc 190327
persistent_attacker 118460
multi_sensor_high_risk 112107
spam 110505
compromised_or_hostile_host 76760
network_scan_or_abuse 28454
recent_attack_mail 13657
recent_attack_web 8995
recent_attack_ssh 4587
recent_badbot_or_regbot 4227
recent_attack_imap 4199
aggregate_abuser_1d 3582
recent_attack_ftp 417
recent_attack_sip 103
abuse 60

Top Infrastructure Labels

Name Count
bogon 160312
prefix_cybercrime 1774
hosting 890

Top Classification Labels

Name Count
aggregate_threat_intel 3923725
mail_bruteforce 155106
pop3_bruteforce 155106
aggregate_abuseipdb_confidence_100 131183
spam_source 110505
brute_force 110445
national_cert_malicious 110445
aggregate_threat_intel_hourly 110038
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 35589
internet_scanner 28454
reconnaissance 28454
c2_ioc 23343
dnsbl_malicious 19815
safe_browsing_malicious 19815
phishing_ip 7119
ultra_conservative_aggregate 4571
aggregate_blacklist_scored 3944
university_honeypot_attacker 1701