About ThreatHive
ThreatHive aggregates 20+ curated open-source intelligence feeds and real-world honeypot data to produce a high-confidence blocklist, refreshed every 15 minutes. For unblock or false-positive requests, contact [email protected].
Blocklist URL
Point your firewall or security tool directly to the live feed.
https://threathive.net/hiveblocklist.txt
Major CDNs, public DNS resolvers, and uptime monitoring services are explicitly whitelisted, helping prevent false positives.
IP Lookup
Check any IP address against the current blocklist and historical records — including IPs that were previously listed.
Open lookup toolFirewall Integrations
Step-by-step setup guides for major platforms.
ASN Distribution
All-time Top 50 Source Countries
Disclaimer: The ThreatHive blocklist is provided "as is" without warranty. It may be used for commercial purposes; however, it may not be sold, resold, bundled as part of a paid service, or otherwise used for direct monetary gain.