we have blocked 931487 IP's now.
useful Links
- www.fail2ban.org
- Example Configuration Debian 5
- Example Configuration Debian 6
- The Global Reporting Project
- Example Report (postfix)
- Example Report (ssh, again)
- stopforumspam.com
N e w s:
27.01.2012X-ARF-Validator fixed and online
21.12.2011
since 20.12 T12am, we dont send new reports, because the database field for the report-id was to small. Is now fixed.
03.12.2011
Blocklist is now running on a ex6 and 2 webserver
05.11.2011
The Spamer register Accounts in other Forums and Blogs with @blocklist.de This User/Comments are not from blocklist.de! Please create a Police Report against the spaming IP!
04.11.2011
A Server 178.73.218.201 (wserv201.woodcrane.com) has send over 7000 registrations and a lot of contactforms and creating over 7000 konsole-h-ac counts with @blocklist.de..... The case is open on the police.
04.08.2010
The IP-Lists are now included in www.ipvoid.com.
PC infected / slow?
Export all blocked IPs
To use our Lists via DNS
Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
The lists contain one line per IP address.
The lists are generated every 10 minutes new.
Typ: all
Last change: T05:30:09 +0100 (CET)Counts: 32322
Description: All listed IP-Addresses, who attacks one of our Customer/Server in the last 48 Hours.
Download: http://www.blocklist.de/lists/all.txt
Typ: ssh
Last change: T05:30:10 +0100 (CET)Counts: 348
Description: All IP addresses which have been reported within the last 48 hours by attacks on the Service SSH.
Download: http://www.blocklist.de/lists/ssh.txt
Typ: mail
Last change: T05:30:12 +0100 (CET)Counts: 27884
Description: All IP addresses which have been reported within the last 48 hours by attacks on the Service Mail, Postfix....
Download: http://www.blocklist.de/lists/mail.txt
Typ: apache
Last change: T05:30:13 +0100 (CET)Counts: 1077
Description: All IP addresses which have been reported within the last 48 hours by attacks on the Service Apache, Apache-DDOS, RFI-Attacks.
Download: http://www.blocklist.de/lists/apache.txt
Typ: imap
Last change: T05:30:15 +0100 (CET)Counts: 49
Description: All IP addresses which have been reported within the last 48 hours by attacks on the Service imap, sasl, pop3.....
Download: http://www.blocklist.de/lists/imap.txt
Typ: ftp
Last change: T05:30:16 +0100 (CET)Counts: 9
Description: All IP addresses which have been reported within the last 48 hours by attacks on the Service FTP.
Download: http://www.blocklist.de/lists/ftp.txt
Typ: asterisk
Last change: T05:30:17 +0100 (CET)Counts: 35
Description: All IP addresses the attacked SIP-, VOIP- or Asterisk-Server and try to login. And include the IPs-List from http://www.infiltrated.net/ (Twitter).
Download: http://www.blocklist.de/lists/asterisk.txt
Typ: bots
Last change: T05:30:18 +0100 (CET)Counts: 2969
Description: All IP addresses which have been reported within the last 48 hours by attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download: http://www.blocklist.de/lists/bots.txt
Policy:
In the Export-/DNS-Lists was all IP-Addresses listen there was attack one of our systems/partners in the last 48 hours and not used the Delist-Link.
* And two AS-Networks manually, because there a only Spamer without Customers.