isIPsafe

The best free IP blacklists compared

The best free IP blacklist depends on what you are protecting. For a small network firewall list, consider Spamhaus DROP. For a scored list of attacking addresses, consider isipsafe or AbuseIPDB. If you already run a compatible agent, consider CrowdSec. isipsafe is our own service, so weigh that accordingly.

ListWhat it containsFree accessGood for
isipsafeAddresses reported for attacks, with scoresFree account. 10 downloads a day of the whole list.Firewalls and web servers, including company use
AbuseIPDBAddresses reported by users, with scoresFree account. Up to 10,000 addresses at confidence 100. Terms exclude commercial use on free plans.Personal projects, and larger paid lists
Spamhaus DROPNetwork ranges used by professional abuse operationsFree, regardless of size or business type. Fetch no more than hourly.A small "drop everything" list for routers and firewalls
CrowdSec Community BlocklistCurated addresses, tailored to what your engine protectsAbout 15,000 addresses if you contribute, or 3,000 if not. Needs its Security Engine.Those already running CrowdSec
FireHOL IP ListsPublic feeds, collected and comparedStatic files. Each list belongs to its maintainer, so check its terms.Choosing and combining public feeds
GreyNoise FreeConfigurable blocklist from internet-wide scan data1 blocklist, with data refreshed every 8 hours. Some features may need a business email.Reducing scanner noise and alert triage

How to choose

  • Check the licence. Free does not always include company use or products.
  • Check how addresses leave the list. A list that only grows blocks more innocent traffic over time.
  • Test before you block. Run in log-only mode first and see what would have been blocked.
  • Combine carefully. Each extra list adds coverage as well as risk of false positives.

Compare them further with our pages on AbuseIPDB, CrowdSec, Spamhaus, FireHOL and GreyNoise.