Export all blocked IPs

To use our Lists via DNS.
The rbldnsd-Zone-Files
To get only the last addedd IPs

Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.

ads


Typ:                     all
Updated:             T05:34:57 +0200 (CEST)
Count IPs:           28489
Description:       All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download:           https://lists.blocklist.de/lists/all.txt
MD5:                     5e37e3402f089316f704a6e6dae21f89

ads


Typ:                     ssh
Updated:             T05:35:15 +0200 (CEST)
Count IPs:           7464
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download:           https://lists.blocklist.de/lists/ssh.txt
MD5:                     919c21b41899f2d7e16b011014749acc

ads


Typ:                     mail
Updated:             T05:35:30 +0200 (CEST)
Count IPs:           18642
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download:           https://lists.blocklist.de/lists/mail.txt
MD5:                     b9f922e0fbca94771faddddc2a927fc2

ads


Typ:                     apache
Updated:             T05:35:40 +0200 (CEST)
Count IPs:           9872
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download:           https://lists.blocklist.de/lists/apache.txt
MD5:                     f216cea1d3f04e1d9282847d8d95e2f3

ads


Typ:                     imap
Updated:             T05:35:53 +0200 (CEST)
Count IPs:           3461
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download:           https://lists.blocklist.de/lists/imap.txt
MD5:                     b559ee79b1abe94e5c0867eb31d2d11a

ads


Typ:                     ftp
Updated:             T05:35:55 +0200 (CEST)
Count IPs:           546
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download:           https://lists.blocklist.de/lists/ftp.txt
MD5:                     dd087d03412d54041727154d1824d932

ads


Typ:                     sip
Updated:             T05:35:56 +0200 (CEST)
Count IPs:           154
Description:       All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download:           https://lists.blocklist.de/lists/sip.txt
MD5:                     44a8fe70b165a06bad657b451dfbbb85

ads


Typ:                     bots
Updated:             T05:35:58 +0200 (CEST)
Count IPs:           69
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download:           https://lists.blocklist.de/lists/bots.txt
MD5:                     51505a14faebb8dab9e469aaf353100e

ads


Typ:                     strongips
Updated:             T05:36:04 +0200 (CEST)
Count IPs:           416
Description:       All IPs which are older then 2 month and have more then 5.000 attacks.
Download:           https://lists.blocklist.de/lists/strongips.txt
MD5:                     ad3a68a52571dbd3d2ca6defbaef9c96

ads


Typ:                     ircbot
Updated:             T05:36:06 +0200 (CEST)
Count IPs:          
Description:      
Download:           https://lists.blocklist.de/lists/ircbot.txt
MD5:                    

ads


Typ:                     bruteforcelogin
Updated:             T05:36:08 +0200 (CEST)
Count IPs:           1620
Description:       All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download:           https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5:                     a49ebaa6a0114deeadfe44beae039661

ads

To get only the last added IP-Addresses you can use:

https://api.blocklist.de/getlast.php?time=xx:xx
time = unixtime
OR
time = hh:ii


Policy:

In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.