Skip to content

Blackroute 2026.07.08

Choose a tag to compare

@github-actions github-actions released this 08 Jul 06:11
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 49
  • Records before cleanup: 4323926
  • Single IPs before cleanup: 3928478
  • CIDR prefixes before cleanup: 395448
  • Records removed by cleanup: 0
  • Records published: 4323926
  • Single IPs published: 3928478
  • CIDR prefixes published: 395448

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3487306
team_cymru_fullbogons_ipv6 157336
pop3gropers 152392
blocklist_net_ua 116909
bitwire_outbound 100879
abuseipdb_s100_30d 47178
ziyadnz_threat_intel_hourly_ipv4 35308
dataplane_attack_feeds 29116
ipsum_level1 28866
threatfox_ioc_ips 22651
shadowwhisperer_scanners 22144
threatview_ip_blocklist 22115
inversion_dnsbl_google_ipv4 19423
romainmarcoux_outgoing_40k 18767
romainmarcoux_inbound_40k 11430
blocklist_de_mail 8132
phishing_database_ips 7109
abuseipdb_s100_7d 6881
cinsscore_badguys 6541
firehol_abusers_1d 4007

Top Threat Labels

Name Count
recent_attack_any 4107456
community_high_risk 4028207
malware_host_active 3995832
bruteforce 314308
phishing_or_scam 196798
c2_ioc 189800
spam 121159
persistent_attacker 115273
multi_sensor_high_risk 104749
compromised_or_hostile_host 77145
network_scan_or_abuse 28454
recent_attack_mail 13248
recent_attack_web 9530
recent_badbot_or_regbot 7807
recent_attack_ssh 5171
aggregate_abuser_1d 4193
recent_attack_imap 3610
recent_attack_ftp 1020
recent_attack_sip 98
abuse 60

Top Infrastructure Labels

Name Count
bogon 160312
prefix_cybercrime 1774
hosting 890

Top Classification Labels

Name Count
aggregate_threat_intel 4004318
mail_bruteforce 155178
pop3_bruteforce 155178
aggregate_abuseipdb_confidence_100 128626
spam_source 121159
brute_force 121099
national_cert_malicious 121099
aggregate_threat_intel_hourly 101580
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 33864
internet_scanner 28454
reconnaissance 28454
c2_ioc 23000
dnsbl_malicious 19754
safe_browsing_malicious 19754
phishing_ip 7120
ultra_conservative_aggregate 4565
aggregate_blacklist_scored 3944
university_honeypot_attacker 1655