Skip to content

Blackroute 2026.07.07

Choose a tag to compare

@github-actions github-actions released this 07 Jul 07:01
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 48
  • Records before cleanup: 4319050
  • Single IPs before cleanup: 3923594
  • CIDR prefixes before cleanup: 395456
  • Records removed by cleanup: 0
  • Records published: 4319050
  • Single IPs published: 3923594
  • CIDR prefixes published: 395456

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3480376
team_cymru_fullbogons_ipv6 157335
pop3gropers 152484
blocklist_net_ua 118639
bitwire_outbound 99415
abuseipdb_s100_30d 51195
ziyadnz_threat_intel_hourly_ipv4 37959
ipsum_level1 32091
dataplane_attack_feeds 30137
threatfox_ioc_ips 22690
shadowwhisperer_scanners 22344
threatview_ip_blocklist 21585
inversion_dnsbl_google_ipv4 19428
romainmarcoux_outgoing_40k 18382
blocklist_de_web 8292
phishing_database_ips 7109
romainmarcoux_inbound_40k 6241
cinsscore_badguys 5549
abuseipdb_s100_7d 5414
firehol_abusers_1d 3960

Top Threat Labels

Name Count
recent_attack_any 4101468
community_high_risk 4022534
malware_host_active 3989365
bruteforce 315969
phishing_or_scam 193462
c2_ioc 186462
spam 122991
persistent_attacker 118700
multi_sensor_high_risk 106781
compromised_or_hostile_host 76718
network_scan_or_abuse 28454
recent_attack_mail 13528
recent_attack_web 9304
recent_badbot_or_regbot 6473
recent_attack_ssh 4717
aggregate_abuser_1d 4129
recent_attack_imap 3913
recent_attack_ftp 845
recent_attack_sip 143
abuse 60

Top Infrastructure Labels

Name Count
bogon 160318
prefix_cybercrime 1773
hosting 891

Top Classification Labels

Name Count
aggregate_threat_intel 4000639
mail_bruteforce 155170
pop3_bruteforce 155170
aggregate_abuseipdb_confidence_100 129506
spam_source 122991
brute_force 122931
national_cert_malicious 122931
aggregate_threat_intel_hourly 105326
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 34477
internet_scanner 28454
reconnaissance 28454
c2_ioc 23033
dnsbl_malicious 19763
safe_browsing_malicious 19763
phishing_ip 7120
ultra_conservative_aggregate 4572
aggregate_blacklist_scored 3944
cloud_hosting_abuse_derived 891