ShadowFortress: how I aggregate hundreds of IP blocklists into a single ready-to-use file

For a while I've been looking for a clean way to feed my FortiGate with IP threat intel without having to manually maintain an unmanageable list. Public blocklists are plentiful, inconsistent in quality, and heavily redundant. So I built ShadowFortress to solve this once and for all. The actual problem As a CISO, I need to block inbound and outbound traffic to and from known malicious IPs: C2 servers, scanners, spam relays, offensively used Tor exit nodes, etc. The market offers paid solutions (FortiGuard Threat Intelligence feeds, CrowdSec, etc.), but nothing that's truly simple to consume as a raw IP file, free, and automatically maintained. Public sources exist ( blocklist.de , feodotracker , spamhaus , etc.) but aggregating them properly takes real work: deduplication, frequency-based selection, false positive exclusion. What ShadowFortress does ShadowFortress is an open source IP blocklist aggregator that: Collects multiple public blocklist sources Deduplicates all IP addresses Se