blocklist.de collects attack reports from more than 2,700 users running fail2ban and similar tools. If your IP is listed, a machine behind it was caught brute-forcing logins, abusing mail, or probing websites in the last 48 hours.
Free, no signup. See if blocklist.de, Spamhaus, SpamCop, or other major blacklists have you listed.
Examples: 203.0.113.42 or example.com
| Blacklist | Status | Response |
|---|
The listing tells you which service was attacked (SSH, mail, FTP, web logins), which narrows down what to look for. For a mail server, it's usually a compromised account or another hacked machine sharing the IP.
Listings expire on their own 48 hours after the last reported attack. To remove the IP sooner, use blocklist.de's delist page; the change takes effect within an hour. Need more time to clean up? blocklist.de lets you pause reports for an IP for seven days.
Generator Labs checks your IPs against blocklist.de and hundreds of other blacklists and alerts you by email, Slack, SMS, or webhook when a listing appears, so a compromised machine doesn't go unnoticed. Free for your first host.
48 hours after the last reported attack.
Yes.
No. It publishes the list; each mail server decides what to do with it.