Abuse Reporting and Blacklisting

Home News Lists Statistics Services Privacy Donate! FAQ Contact MyLogin

The project (formerly known as the SSH blacklist) is about detecting, logging and reporting various types of internet abuse. Currently our hosts monitor ports 21 (FTP), 22 (SSH), 23 (TELNET), 25 (SMTP), 110 (POP3), 143 (IMAP), 587 (Submission), 993 (IMAPS) and 995 (POP3S) for bruteforce login attacks as well as scans on ports 80 (HTTP) and 443 (HTTPS) for vulnerable installations of phpMyAdmin and other web applications. For every logged attack an email is sent out to the contacts listed in the whois record and/or the reverse IP SOA information of the attacking hosts IP address, just a few seconds after the attack or scan started. It is our hope that the responsible administrators use the provided information to quickly secure and clean the misused and probably compromised hosts.

Additionally the IP gets published on a public blacklist, which is updated every few minutes and contains IP addresses of hosts which attacked any of our currently 29 hosts (all running OpenBSD or some Linux distribution). The hosts are located all around the world and setup to report and log those attempts to a central database, very similar to all the spam blacklists out there.

The newest entries are always added to the top of the lists. An attack is logged as retry if the same IP is logged again at least 48 hours later from the same host or from any other host that reports those attacks. To prevent a too high retry count all hosts that report are within different IP ranges from different providers.

Most of our abuse reports come from hosts that were donated to the project from individuals or companies. Without this generous help the project wouldn't be possible! If you like what we are doing and use our service please think about if there is anything you (or your company) can do to help to improve our service even more.

You received a mail that your IP is listed here?
Delist yourself!

Latest News
(taken from Twitter)
  • Wed Apr 19 12:13:26 2017 UTC:
    Sorry to announce but due to time and financial constraints will stop updating end of April and shutdown end of May.

  • Wed May 13 19:03:43 2015 UTC:
    A big THANK YOU to @HostSailor ( ) for supporting us. They offer flexible and affordable hosting solutions.

  • Mon Jan 19 09:43:45 2015 UTC:
    Thanks again to for your continued support of our project!

More news ...

support{AT}openbl{D0T}org is supported by: