ipinfo.app/ API/ StopForumSpam

sfs.ipinfo.app — API Reference

Base URL: https://sfs.ipinfo.app  |  No auth required
Provides pre-built nginx and Apache blocklists sourced from the StopForumSpam database, filterable by reporting time window.

GET /api/downloads/nginx/:period

Returns a plain-text nginx configuration snippet containing deny directives for all IPs reported to StopForumSpam within the specified time window. Drop the output into an nginx server or location block.

Available periods
PeriodDescription
toxicHighest-confidence entries only — reported frequently across many sources.
1IPs reported in the last 24 hours.
7IPs reported in the last 7 days.
30IPs reported in the last 30 days.
90IPs reported in the last 90 days.
180IPs reported in the last 180 days.
365IPs reported in the last 365 days.
fullAll IPs in the database (no time filter). Largest list — use with caution.
Example requests
curl https://sfs.ipinfo.app/api/downloads/nginx/toxic curl https://sfs.ipinfo.app/api/downloads/nginx/7
Example response
# StopForumSpam blocklist — toxic deny 1.2.3.4; deny 5.6.7.8; ...
Usage in nginx
# Download and include in your nginx config: curl -o /etc/nginx/sfs-block.conf \ https://sfs.ipinfo.app/api/downloads/nginx/7 # In your nginx server block: include /etc/nginx/sfs-block.conf;
Larger windows (365, full) produce very large files and may take several seconds to generate. The toxic and 7-day lists are recommended for most use cases as they balance coverage with false-positive risk.
GET /api/downloads/htaccess/:period

Returns an Apache .htaccess snippet using mod_access_compat Deny from directives for all IPs in the selected time window. The full period is not available for htaccess — use 365 for the widest coverage.

Available periods
PeriodDescription
toxicHighest-confidence entries only.
1IPs reported in the last 24 hours.
7IPs reported in the last 7 days.
30IPs reported in the last 30 days.
90IPs reported in the last 90 days.
180IPs reported in the last 180 days.
365IPs reported in the last 365 days.
Example requests
curl https://sfs.ipinfo.app/api/downloads/htaccess/toxic curl https://sfs.ipinfo.app/api/downloads/htaccess/7
Example response
# StopForumSpam blocklist — toxic Order Allow,Deny Allow from all Deny from 1.2.3.4 Deny from 5.6.7.8 ...
Usage in Apache .htaccess
curl https://sfs.ipinfo.app/api/downloads/htaccess/7 \ >> /var/www/html/.htaccess
Choosing a time window

Shorter windows contain fewer IPs but are fresher and carry lower false-positive risk. Longer windows cover more persistent bad actors but may block legitimate IPs that have since been reassigned. A recommended starting point for most forum and comment systems:

Use caseRecommended period
High-traffic, low false-positive tolerancetoxic or 7
General forum / comment spam blocking30 or 90
Maximum coverage, willing to review false positives365
Automation / cron-refreshed blocklist7, refreshed daily
Cron example — refresh nginx blocklist nightly
# /etc/cron.d/sfs-blocklist 0 3 * * * root curl -s -o /etc/nginx/sfs-block.conf \ https://sfs.ipinfo.app/api/downloads/nginx/7 \ && nginx -s reload