Blocklist now available in 100,000-entry parts for UniFi

The ThreatHive blocklist is now also published in three parts of up to 100,000 IPv4 addresses each:

The full list at hiveblocklist.txt stays where it is and keeps working as before. The parts are built from the same data, so parts A, B and C together contain exactly the addresses in the full list.

Why split the list

UniFi Network 11 added dynamic network lists: a gateway downloads an IP list from a URL and uses it in firewall policies. Each list can hold at most 100,000 entries. The full ThreatHive list holds about 170,000 addresses, so it can't be loaded as one list. Splitting it lets UniFi users load the whole blocklist with one network list per part.

The same files work on any firewall or tool with a per-list size limit.

What's in each part

Parts A and B carry entries today. Part C is published already, so it can be added to a configuration now, and fills when the list grows past 200,000 addresses. If the list keeps growing, further parts will follow the same naming pattern and be announced here.

Setting it up on UniFi

The UniFi setup guide walks through creating the three network lists and the inbound and outbound block policies. Keep in mind that UniFi refreshes dynamic lists at most once every 24 hours, while the ThreatHive list is updated every 15 minutes.

All news