Olen.NET

Threatlists

Disclaimer

These lists are vetted for my personal use, and may not fit your usecase.
They are cleaned in such a way that they should not be used unless you use all of them!

This means that the URL-lists do not include URLs under domains that are already included in the "domains"-lists, and all URLs that are just a hostname are removed from the URL lists and added to the "domains" list instead.
Both URL- and Domain-lists are stripped of all hostnames that does not resolve. This means that there might be some domains missing because they are temporarily unavailable, or becuase of other DNS issues.
You should really use the original lists from the sources at the bottom.

The lists

All lists are organized per type and source. They are updated once every hour.
Current time is May 15. 2026, 13:00:19

Domains:

Plain lists of domains, easy to add for instance to PiHole

URLs

URLs hosting malware etc. These lists are stripped of all URLs that are already included in "Domains" above

IPs

Plain lists of IP-addresses.

Sources

AbuseIPDB Contributor Badge

Other lists

These are not threats, but rather common services that you might want to explicitly open or block in a firewall or similar device.
All the lists are fetched from the linked sources in various formats and converted to plain text lists. The lists are updated once every day.

URLs

IPs

Atlassian
AWS
Cloudflare
Google
Microsoft
See also this page for Azure-addresses. These are currently unparseable.
Okta
Oracle
Zoom
Zscaler