Skip to content

Blackroute 2026.07.06

Choose a tag to compare

@github-actions github-actions released this 06 Jul 07:59
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 49
  • Records before cleanup: 4295886
  • Single IPs before cleanup: 3901498
  • CIDR prefixes before cleanup: 394388
  • Records removed by cleanup: 0
  • Records published: 4295886
  • Single IPs published: 3901498
  • CIDR prefixes published: 394388

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3458854
team_cymru_fullbogons_ipv6 157331
pop3gropers 152229
blocklist_net_ua 106979
bitwire_outbound 101295
ziyadnz_threat_intel_hourly_ipv4 45955
abuseipdb_s100_30d 45896
dataplane_attack_feeds 32228
ipsum_level1 31251
threatfox_ioc_ips 23135
shadowwhisperer_scanners 22295
threatview_ip_blocklist 20585
inversion_dnsbl_google_ipv4 19465
romainmarcoux_outgoing_40k 18168
romainmarcoux_inbound_40k 10115
blocklist_de_web 8223
abuseipdb_s100_7d 7471
phishing_database_ips 7109
cinsscore_badguys 6365
ipblocklist_level3 3281

Top Threat Labels

Name Count
recent_attack_any 4077923
community_high_risk 4004770
malware_host_active 3971838
bruteforce 304218
phishing_or_scam 196641
c2_ioc 189654
persistent_attacker 116863
multi_sensor_high_risk 113616
spam 111307
compromised_or_hostile_host 75880
network_scan_or_abuse 28454
recent_attack_mail 14060
recent_attack_web 8924
recent_attack_ssh 4588
recent_attack_imap 4538
recent_badbot_or_regbot 4245
aggregate_abuser_1d 3268
recent_attack_ftp 534
recent_attack_sip 105
abuse 60

Top Infrastructure Labels

Name Count
bogon 160316
prefix_cybercrime 1774
hosting 891

Top Classification Labels

Name Count
aggregate_threat_intel 3981332
mail_bruteforce 155152
pop3_bruteforce 155152
aggregate_abuseipdb_confidence_100 130702
spam_source 111307
brute_force 111247
national_cert_malicious 111247
aggregate_threat_intel_hourly 110827
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 36185
internet_scanner 28454
reconnaissance 28454
c2_ioc 23147
dnsbl_malicious 19800
safe_browsing_malicious 19800
phishing_ip 7120
ultra_conservative_aggregate 4573
aggregate_blacklist_scored 3944
university_honeypot_attacker 1702