[Dshield] Database of Known Malicious IP Address/IP Networks

Michael Johnson mike at holmesandturner.com
Wed Aug 7 15:35:13 GMT 2002

When I check the list at http://feeds.dshield.org/block.txt  I see nothing.
Am I missing something?

Mike Johnson
mike.johnson at ieee.org

> Does anyone have any opinions on this approach or any suggestions?

We do publish a 'block list' it includes netblocks that show up as the
top attackers in our DShield database. For details, see:


There is also a 'bogon list' of unused IP addresses you may want
to use to reject spoofed traffic. See


I can make another dump of the IP->country database we use
for dshield. Occassionally, I dump it to an ASCII file for 

jullrich at sans.org             Collaborative Intrusion Detection
                                    join http://www.dshield.org

Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list

More information about the list mailing list