What is this?
These are blocklists for emerging and ongoing threats. The lists are provided pre-processed in multiple formats for easy use with multiple software platforms. The data comes from multiple sources, which is verified and aggregated into single easy to use feeds.
Why might someone want this?
In the enterprise world, it has become common to use threat intelligence data to prevent traffic from suspected and known compromised servers, services, IPs and networks from being able access or influence business assets.
Enterprise and business aren’t the only entities that can benefit from this, though. Even as a home user I would advocate the use of security software, and a layered approach is always best.
The blocklists here serve two purposes;
- A domain list for use with your adblocker, DNS resolver or operating system – this prevents your systems making outbound connections to suspicious or known bad domains.
- An IP list for use with your firewall, router or operating system – this prevents suspicious or known bad IPs and subnets being able to make inbound connections to your network.
Can anyone use this?
Yes. This service is being offered free-of-charge to anyone that wants to use it, whether you’re a person, a business or a public body – you must accept that this service and the data that it provides is made available as-is and without warranty.
How often is the list updated?
Currently, hourly – so there’s no point trying to refresh your local copy any more frequently than that.