the Carrot and the Stick - SIBL

NOTE: the rsync set up is not yet functional, but the list of IP addresses is available currently at http://tcats.stop-spam.org/sibl/sibl.txt. Dynastop currently distributes TCATS Server Intrusion Blacklist.

This list is a list of machines by IP address that have attempted to access our servers to root our servers or attempt to find an exploit. In the beginning we sent email to the IP address owner to notify them of the attempt. After many responses informing us that our server was misconfigured and their clients attempt to access and run set up files for processes that did not exist on our servers, we decided this was a waste of our time. We now monitor the log files and access files and list the IP addresses of those attempting to root our server.

Our apoligies for the long winded explanation but we no longer send the IP address owner notice. The SIBL should not impact your email at all and should protect your users.

IMPLIMENTING THE LISTS

Currently the list is available only as an ASCII file located here