NEBLink
A combined threat list (DShield, Feodo Tracker, Spamhaus DROP, Emerging Threats, scanners) in a clean and a full edition.
- Blocklist
What it is
NEBLink publishes an aggregated IP threat list built from the DShield recommended block list, abuse.ch Feodo Tracker (botnet control servers), Spamhaus DROP (hijacked and criminal networks), Emerging Threats’ compromised hosts and lists of known research and malicious scanners.
There are two editions. “Clean” is the one most people want. “Full” contains more data and more borderline entries. We check both, so a hit in “full” only is weaker evidence.
What it checks
- DShield recommended block list
- abuse.ch Feodo Tracker
- Spamhaus DROP
- Emerging Threats compromised and hostile IPs
- Known scanners
How to read the result
- Not listed
- The address is not on either edition.
- Clean edition
- A strong signal: the address or its range is on a reliable threat list.
- Full edition only
- Weaker: usually a scanner or a borderline entry.
Limits
- Entries can be whole ranges: a listed subnet covers every address in it.
- Research scanners are not necessarily malicious.
- The source updates hourly; we refresh our copy every 24 hours.
How it is used here
Both editions are shown as separate “listed / not listed” cards. Each listing adds points to the overall risk.