Blacklists

We provide ready-made blacklists of suspicious addresses and headers. You can create your own blacklists and use them in combination with the system ones or instead of them. Suspicious bots and requests with incomplete headers are always blocked at the system level.

System black lists

There are a number of system filters available to you that you can use on your sites.

For optimal protection of your site from spurious traffic, we recommend using all available filters, that is, do not configure the "Filters" field at all.

Personal blacklists

You can create your own blacklists in the "My filters" section. To create a new blacklist, give it a name and select a type:

Blacklists are divided by type to improve performance. You cannot add an IPv6 address to a classic IPv4 list. After creating a list, you need to fill it in and activate it:

Most often, you will need lists with both checkboxes - active and default. Do not forget to enable them.

After creating a blacklist, you need to fill it with addresses. Open the blacklist by name or by clicking the "View" button. Above the table there will be a form for adding a new element:

Header blacklists have slightly different fields than address lists:

After adding an item to the blacklist, it immediately starts working.

Important! Working with blacklists requires some technical knowledge. You need to understand what subnet size is in order to block addresses. You need to understand how regular expressions work in order to block headers.

Teamwork

When working as part of an arbitration team, you can use shared team blacklists. By default, only team leads have access to edit them, but you can enable shared access for the entire team in the settings.

Active team lists are available for selection by all team members. Default lists are automatically activated for the entire team, just like system lists.

Import and export black lists

You can export and import black lists in CSV format. File encoding - UTF-8, separator - commas, framing values - quotes. Each of the types of black lists works with its format. All lists use the same comments identifiers:

  1. Public list
  2. Suspicious
  3. Corporate
  4. Different User-Agent
  5. GEO error
  6. Header error
  7. Multiple errors
  8. Bad request
  9. Bot

IPv4 addresses

The line of this list contains two fields: IP address and comment identifier.

12.34.56.78,2

IPv4 subnets

The line of this list contains three fields: IP address, subnet capacity and comment identifier.

12.34.56.0,24,3

IPv6 addresses and subters

All IPv6 addresses are added as subnets. It is recommended to use subnet / 64. The address may be indicated both in full and in abbreviated form. The line of this list contains three fields: IPv6 address, subnet capacity and comment ID.

2001:abcd::1,64,5

Headers filter

The line of this list contains three fields: the contents of the header, the header ID and the comment identifier.

"facebook",1,6

The header identifier can take one of the following values: