# Security Blocklists IP blocklists protect infrastructure by blocking malicious addresses. ## Recommended Lists | Blocklist | Description | Source | | ------ | ------ | ------ | | **Data-Shield IPv4** | 9150+ IPs/day, European honeypot, updated 24h | [GitHub](https://github.com/duggytuxy/Data-Shield_IPv4_Blocklist) | | **FireHOL IP Lists** | Aggregates 100+ sources: attacks, malware, C2 | [firehol.org](https://iplists.firehol.org/) | ## How They Work **Data-Shield** - Network of 24 European honeypots - Validated IPs → updated daily **FireHOL** - Aggregates feeds: attacks, malware, botnets, C2, abuse ## Integration Options - Firewalls (iptables, firewalld) - WAF (CrowdSec, ModSecurity) - SIEM (automatic correlation) - Reverse proxies (Nginx, HAProxy) ## Important Notes > Blocklists are **complements** to security best practices, not replacements.