Threat Intelligence Blocklist

A continuously updated list of malicious IPs powered by open-source intelligence and honeypot telemetry.

About ThreatHive

ThreatHive aggregates trusted open-source feeds and real-world honeypot data to produce a high-confidence blocklist. The dataset is refreshed every 15 minutes to keep pace with active threats. For unblock or false-positive requests, please contact [email protected].

Blocklist URL
https://threathive.net/hiveblocklist.txt
Blocklist Stats

99131

Total malicious IPs

IP Lookup

Check whether an IP address appears in the ThreatHive blocklist.

Open Lookup Tool
ThreatHive is community-funded and free to use — but not free to run.
Tracking 99,131 malicious IPs, updated every 15 minutes, requires real infrastructure. Support ThreatHive to keep open threat intelligence available for everyone.
ASN Distribution
ASN Stats
All-time TOP 50 Countries
All-time TOP 50 countries
Disclaimer: The ThreatHive blocklist is provided “as is” without warranty. It may be used for commercial purposes; however, it may not be sold, resold, bundled as part of a paid service, or otherwise used for direct monetary gain.