What is www.blocklist.de?

www.blocklist.de is a free and voluntary service provided by a Fraud/Abuse-specialist, whose servers are often attacked on SSH-, Mail-Login-, FTP-, Webserver- and other services.
The mission is to report all attacks to the abuse deparmtents of the infected PCs/servers to ensure that the responsible provider can inform the customer about the infection and disable them.

We report more than 42000 attacks in 12 hours in Realtime and use the Whois (abuse-mailbox, abuse@, security@, email, remarks), the Ripe-Abuse-Finder and the contact-database from abusix.org to find the abuse-address assigned to the attacking host. Our reports are based on X-Arf (Network Abuse Reporting 2.0), so the abuse-department of the provider of the attacking host can parse our reports automatically.

blocklist is comparable with spamcop.net for attacks of any kind except for spam.

We're winning more partners every day, who report attacks on their servers.
If you also want to report the attacks on your server, please register an Account and add your Server.

On our Statistics you can see the top-countries of attacking PCs, the top-providers and the top attacker-IPs.

On "Search (IP, ASN)" you can search in our Database for your IP-address or your AS-Number to check the status of blocked IPs or how many IPs had attacked on of our parnter-server.
Also you can pause reports for 7 days for a IP and the assigned abuse-address when you need more time to fix the problem.

We hope our service makes the Internet better, safer and helps to clean the infected PCs.


Currently, we can use the following Attacks-Typ:

• ssh* || ssh-ddos
• postfix || mail || exim || exim4
• amavis
• proftpd || ftp* || pure-ftpd || pureftpd
• courierpop3 || pop || pop3 || dovecot-pop3
• courierimap || imap || dovecot || dovecot-pop3imap || dovecot-smtp || dovecot-*
• sasl
• BadBots || irc-bot || irc-bots || reg-bots || reg-bot
• php-url-fopen || rfi-attack (wie in filter.d/apache-spamtrap-rfi.conf)
• w00tw00t || apache-w00tw00t Disable because of majestic12 Bot
• ApacheDDOS || DDoS
• Asterisk || sip || voip
• SQL-Injection