Your blocklist is probably missing 98% of what's actively hitting your edge right now. We tested 11 major feeds against 119,842 malicious IPs GreyNoise observed on a single day. The best feed covered less than 5%. Most were under 2%. The feeds aren't broken. Attacker infrastructure just rotates faster than static curation can keep up with. Read the full breakdown: https://www.greynoise.io/blog/why-your-blocklist-missing-malicious-ips