Malicious IP Addresses

[blackhunt]

These are the IP addresses of the most active Botnets/Zombies/Scanners in European Cyber Space

Link GitHub : https://github.com/duggytuxy/malicious_ip_addresses

 

[Dastardy]

Within the last year most layer 7 attacks have been actively using Google/Alibaba/Amazon cloud to mask their IPs, from the most recent attack on my site 55% of all IPs came from public Cloud providers
.
And of course, cf is trying to fix the issue, but seemingly its hard. from 6bil requests only 65mil blocked. ¯\_(ツ)_/¯

 

[Dread Pirate Roberts]

from the most recent attack on my site 55% of all IPs came from public Cloud providers

the largest providers are the most abused ones, because they have so many clients that their understaffed abuse team does not have enough time to handle all abuse reports.
if you do not expect any legitimate traffic from the cloud providers you should block their whole networks by AS numbers.