--ip-blocklist

CLI: --ip-blocklist
REST: CLI only

ValuePATH_OR_URL

Blocks every address in a threat feed, read from a file path or http(s) URL. Repeatable; every feed joins one set.

A feed lists one IPv4 or IPv6 address or CIDR range per line; blank lines and text after # are ignored. Feeds load once at startup, and one that cannot be read or holds any other line exits with code 5.

--allow-ip-range overrides a listed address.

Example

CLI Run locally

zshot -f pipeline.png \
  --ip-blocklist https://iplists.firehol.org/files/firehol_level1.netset \
  https://zshot-cli.com/example_assets/zrm/