Mail account brute force / harassment

[mj]

Hi,

On 4/12/19 11:05 PM, Joseph Tam via dovecot wrote:
> "www.blocklist.de" is a nifty source.  Could you suggest other publically
> available blacklists?
> 

The ones we are using are:

>     "file:///etc/ipset-blacklist/ip-blacklist-custom.list" # optional, for your personal nemeses (no typo, plural)

In this file we have our own manual additions

>     "https://www.projecthoneypot.org/list_of_ips.php?t=d&rss=1" # Project Honey Pot Directory of Dictionary Attacker IPs
>     "https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=1.1.1.1"  # TOR Exit Nodes
>     "https://www.maxmind.com/en/high-risk-ip-sample-list" # MaxMind GeoIP Anonymous Proxies
>     "http://danger.rulez.sk/projects/bruteforceblocker/blist.php" # BruteForceBlocker IP List
>     "https://www.spamhaus.org/drop/drop.lasso" # Spamhaus Don't Route Or Peer List (DROP)
>     "http://cinsscore.com/list/ci-badguys.txt" # C.I. Army Malicious IP List
>     "https://lists.blocklist.de/lists/all.txt" # blocklist.de attackers
>     "http://blocklist.greensnow.co/greensnow.txt" # GreenSnow
>     "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset" # Firehol Level 1
>     "https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/stopforumspam_7d.ipset" # Stopforumspam via Firehol

MJ