Skip to content

Blackroute 2026.07.09

Latest

Choose a tag to compare

@github-actions github-actions released this 09 Jul 06:59
aa4b857

Blackroute Release Summary

Release artifacts are cleaned with BogonForge-compatible public IP filtering before publication.

Dataset

  • Configured sources: 51
  • Sources remaining after cleanup: 49
  • Records before cleanup: 4325578
  • Single IPs before cleanup: 3930304
  • CIDR prefixes before cleanup: 395274
  • Records removed by cleanup: 0
  • Records published: 4325578
  • Single IPs published: 3930304
  • CIDR prefixes published: 395274

Cleanup Policy

  • Removed invalid IPs and CIDRs.
  • Removed private, loopback, link-local, multicast, unspecified, CGNAT, reserved, and overly broad bogon prefixes.
  • Rebuilt CSV, JSONL, MMDB, and run stats after cleanup.

Removed By Reason

No entries.

Top Sources

Name Count
bitwire_inbound 3489096
team_cymru_fullbogons_ipv6 157334
pop3gropers 152386
blocklist_net_ua 116453
bitwire_outbound 100590
abuseipdb_s100_30d 44966
ziyadnz_threat_intel_hourly_ipv4 38068
ipsum_level1 29339
dataplane_attack_feeds 29290
threatview_ip_blocklist 26335
threatfox_ioc_ips 22883
shadowwhisperer_scanners 22122
inversion_dnsbl_google_ipv4 19409
romainmarcoux_outgoing_40k 18143
romainmarcoux_inbound_40k 11104
blocklist_de_web 8249
phishing_database_ips 7109
cinsscore_badguys 5791
abuseipdb_s100_7d 4749
firehol_abusers_1d 4204

Top Threat Labels

Name Count
recent_attack_any 4109241
community_high_risk 4030419
malware_host_active 3998190
bruteforce 312702
phishing_or_scam 196862
c2_ioc 189873
spam 121161
persistent_attacker 120299
multi_sensor_high_risk 110615
compromised_or_hostile_host 81178
network_scan_or_abuse 28454
recent_attack_mail 13658
recent_attack_web 9076
recent_attack_ssh 9047
recent_badbot_or_regbot 7606
aggregate_abuser_1d 4395
recent_attack_imap 3932
recent_attack_ftp 834
recent_attack_sip 85
abuse 60

Top Infrastructure Labels

Name Count
bogon 160320
prefix_cybercrime 1773
hosting 888

Top Classification Labels

Name Count
aggregate_threat_intel 4007258
mail_bruteforce 155208
pop3_bruteforce 155208
aggregate_abuseipdb_confidence_100 126983
spam_source 121161
brute_force 121101
national_cert_malicious 121101
aggregate_threat_intel_hourly 108389
aggregate_inbound_threat 40000
aggregate_outbound_threat 40000
network_scan_or_abuse 34678
internet_scanner 28454
reconnaissance 28454
c2_ioc 22895
dnsbl_malicious 19734
safe_browsing_malicious 19734
phishing_ip 7120
ultra_conservative_aggregate 4573
aggregate_blacklist_scored 3944
university_honeypot_attacker 1706