Listed on blocklist.de? Something Attacked Someone
blocklist.de collects attack reports from more than 2,700 users running fail2ban and similar tools. If your IP is listed, a machine behind it was caught brute-forcing logins, abusing mail, or probing websites in the last 48 hours.
Examples:
Find the Machine
The listing tells you which service was attacked (SSH, mail, FTP, web logins), which narrows down what to look for. For a mail server, it's usually a compromised account or another hacked machine sharing the IP.
Getting Removed
Listings expire on their own 48 hours after the last reported attack. To remove the IP sooner, use blocklist.de's delist page; the change takes effect within an hour. Need more time to clean up? blocklist.de lets you pause reports for an IP for seven days.
Hear About It Within the Day
Generator Labs checks your IPs against blocklist.de and 150+ other data sources and alerts you by email, Slack, SMS, or webhook when a listing appears, so a compromised machine doesn't go unnoticed. Free for your first host.
Frequently Asked Questions
About blocklist.de listings.
How long does a blocklist.de listing last?
48 hours after the last reported attack.
Is removal free?
Yes.
Does blocklist.de block my mail itself?
No. It publishes the list; each mail server decides what to do with it.
Other Blacklists
How to get off each of the blacklists that matter most.