Malicious IP Addresses

These are the IP addresses of the most active Botnets/Zombies/Scanners in European Cyber Space

⚠Since these are malicious IP addresses that are bumping, you need to create rules based on WAN to LAN⚠

Support our work with a donation 👉 https://www.paypal.com/donate/?hosted_button_id=YDTWBDBS7CPLN

All lists available

blacklist_ips_for_fortinet_firewall_aa.txt

blacklist_ips_for_fortinet_firewall_ab.txt

botnets_zombies_scanner_spam_ips.txt (full list)

Categories

• WannaCry Variant SMB Connection • CVE-2017-17215 RCE • CVE-2018-10561 RCE • CVE-2019-9082 RCE • CVE-2022-47945 RCE • CVE-2023-30891 RCE • FortiNAC RCE CVE-2023-33299 • CVE-2024-4577 RCE • SSH Alternative Bruteforcer • SSH Bruteforcer • Generic IoT Bruteforcer • Apache HTTP Server Path Traversal • Generic Path Traversal

Etc.

Update

I have created specific lists for Fortinet firewall users following the limitation set by Fortinet:

blacklist_ips_for_fortinet_firewall_aa.txt

blacklist_ips_for_fortinet_firewall_ab.txt

• etc.

Also, you will need to fork the list and split it into 130,000 entries per file. In this way, you can validate it in your Threat feeds of your Fortinet Firewall.

PS: this list will be updated every 24/48h