I'm doing a little incident response and am wondering if anyone knows if there are any public databases out there of known infected/hostile ip addresses out there.

I know that Norton maintains their deepsight service, but I'm not in a position to pay for that service right now. 

This seems like the sort of thing that shadowserver.org could be used for, but it doesn't appear that they publish their data.

Any suggestions?