Unofficial ClamAV Databases
Maintained by MailBaby's global MTA anti-spam system — mail.baby
These are unofficial ClamAV virus databases. For DNS-based block lists and signature usage examples, see the usage page.
Automatic Updating DBs
Auto-updating
| Label | File | Format | Description |
|---|---|---|---|
| sha256 | interserver256.hdb | SHA-256 | 100% known malware sha256 format |
| hex/topline | interservertopline.db | HEX | Inserts into files, manual cleaning HEX |
Logical
Logical sig
| Label | File | Format | Description |
|---|---|---|---|
| Shell lbd | shell.ldb | LDB | 99.9% known malware using logical signatures |
Whitelist
Whitelist
| Label | File | Format | Description |
|---|---|---|---|
| Whitelist | whitelist.fp | MD5 | MD5 checksums of false positives or common files |
Original Virus DBs
Rarely updated
Originally manually kept and updated. The system is more automated now — kept for legacy purposes.
| Label | File | Format | Description |
|---|---|---|---|
| Shellb | shellb.db | HEX | Original db — inserts into files, manual cleaning HEX |
| Shell MD5 | shell.hdb | MD5 | Original db — 100% known malware MD5 format |
IP List — malware posts, SSH/FTP/email/modsec scans, spam and more
Live
| Label | File | Window | Format |
|---|---|---|---|
| Bad IPs | /ip | All formats | List → | Standard 1 week | Slim 48 hour | Full |
Search IP database
Search domain blocklist