Various lists to be used with an IP blocker.
Most of these come from several HoneyPots (Cowrie). The logs are uploaded to a main system, examined, and then automatically uploaded every hourly. The repo is compressed every 25 commits, to reduce the size. Diff, pull requests, etc. get cleared.
Project was made public: 5/13/2021. https://api.github.com/repos/ShadowWhisperer/IPs
Brute Foce
Extreme 80+ connects
High 20+ connects, but less than 80
Medium 5+ connects, but less than 20
Low Less than 5 connects
Malware
Browser Browser Hijackers, Malvertising, Fake Alerts, etc
Hosting IPs used to download malware after system takeover
Hackers Executed commands on my honeypot, after a successful connection
Other
Ads Used to show you advertisements
DNS Common DNS resolvers
Mine Other IPs I block
Scanners Scans your IP for open ports / vulnerabilities
Trackers Used to track what you do
Tunnel Proxies, and VPNs