diff --git a/config/filter.d/filter-ip-blacklist.conf b/config/filter.d/filter-ip-blacklist.conf
new file mode 100644
index 00000000..506ed2d5
--- /dev/null
+++ b/config/filter.d/filter-ip-blacklist.conf
@@ -0,0 +1,15 @@
+[Definition]
+ 
+# Option:  failregex
+# Notes :  Detection of blocked ip addresses.
+# Values:  TEXT
+#
+ 
+failregex = ^(?P<ip4>\d{1,3}(?:\.\d{1,3}){3}/\d{1,2})\s+
+
+# Option:  ignoreregex
+# Notes :  Regex to ignore.
+# Values:  TEXT
+#
+ 
+ignoreregex =