Know who’s knocking before you open the door
BastionBlock is my European IP reputation service: an API that tells you whether an internet address has recently been involved in malicious activity. I built it in the EU, host it here, and handle data responsibly.
Personal observations
I only publish what my own network sees: intrusion attempts on websites and email. No resold lists from others.
European and privacy-friendly
Everything runs on my servers in the EU. I only store IP addresses of attackers and what they did—not data from your visitors.
Easy to integrate
One question per address, or the entire list at once as text or JSON. It works with any firewall or application.
Fair and repairable
Is an address listed incorrectly? Anyone can request removal via abuse.globestar.nl—I’ll take a look myself.
How I obtain the data
My web firewall and mail servers block addresses that keep trying to break in. I collect these blocks in one place, along with a confidence score, the number of attempts, and an expiry date. If an address returns, the score rises; if it stays away, the block expires automatically.
My active blocks right now: 201
curl -H "Key: …" "https://www.bastionblock.eu/v2/check?ip=1.2.3.4"