SSHassassin

Use this list on your server (free)

SSHassassin is public and free. Any mail server or firewall can query it to block attacking IPs — just use the host bl.virtuallifebrasil.com.br. If an IP answers 127.0.0.2, it is listed.

Postfix — in main.cf (postscreen):

postscreen_dnsbl_sites = bl.virtuallifebrasil.com.br*2
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_action = enforce

Alternative in smtpd_recipient_restrictions: reject_rbl_client bl.virtuallifebrasil.com.br

SpamAssassin — in local.cf:

header   RCVD_IN_VLB  eval:check_rbl('vlb', 'bl.virtuallifebrasil.com.br.')
describe RCVD_IN_VLB  Listed on SSHassassin (Virtual Life Brasil)
tflags   RCVD_IN_VLB  net
score    RCVD_IN_VLB  3.0

Test — to check IP 1.2.3.4, reverse the octets and query:

dig +short 4.3.2.1.bl.virtuallifebrasil.com.br
# 127.0.0.2 = LISTED   |   empty = clean

A free community service by Virtual Life Brasil — no cost, no signup. If a legitimate IP gets listed, the owner removes it below (delist).

How it works

We collect automatically. Our servers record who tries to break in via SSH or send spam. Repeat offenders go on the list.

The world queries it. Any mail server (SpamAssassin, Postfix) or firewall can use bl.virtuallifebrasil.com.br to block these IPs.

You clean yourself. The legitimate owner visits this page from that IP, confirms with an own-domain e-mail, and is removed within 12 hours.

Rules

Removal only applies to the IP you connect from (proof of ownership).
We only accept own-domain e-mail — free e-mail does not qualify.
Repeat offenders are treated as such: whoever leaves and attacks again becomes a manual case and may stay permanently.
Our own servers and partners are on a whitelist — they are never blocked.
A free service, offered by Virtual Life Brasil as a contribution to the community.

Check an IP

Use this list on your server (free)

Remove your IP (delist)

How it works

Rules