HS Blacklist Check checks your system for any IPs that have been blocklisted by abuse.ch - if any are found, you can simply double-click each IP in the list to block them in the Windows firewall. Additionally, under the Blocklist tab, you have the option to block all IPs in the blocklist and delete them from your Windows firewall for both inbound and outbound connections.

Precompiled List of Malicious IPs: HS Blacklist Check program obtains a blocklist from Feodo Tracker, a project by abuse.ch. Its aim is to share information about botnet C&C servers linked to Dridex, Emotet (also known as Heodo), TrickBot, QakBot (also known as QuakBot/Qbot), and BazarLoader (also known as BazarBackdoor). It offers various blocklists explicitly to help network owners protect their users from Dridex and Emotet/Heodo.

Simple Usage: HS Blacklist Check comes in a simple utilitarian interface comprised of two tabs; one for checking the IPs and the other for the blocklist. From the Blocklist tab, even if non of the blocked IPs are found, you can still block them in the Windows Firewall out of caution if desired. You should run HS Blacklist Check with admin rights, have permission to execute PowerShell scripts, and it does require Microsoft .NET.

Excellent Second Line of Defense: HS Blacklist Check provides you with an extra layer of security for your machine by searching out known botnet C&C servers and then allowing you to block in/outbound connections in the Windows firewall. The process is straightforward but is only as good as the available blocklist, so you should definitely have an updated primary antivirus solution installed on your machine.

Similar:

How to Restore or Reset Default Windows Defender Firewall Settings

Firewall & Network Protection in Windows 10 & 11 Explained and How to Hide It

Windows Device Performance & Health Explained

What's the Best Antivirus and Is Windows Defender Good Enough