Export all blocked IPs
To use our Lists via DNS.
The rbldnsd-Zone-Files
To get only the last addedd IPs
Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.
Typ: all
Updated: T12:48:01 +0100 (CET)
Count IPs: 23252
Description: All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download: https://lists.blocklist.de/lists/all.txt
MD5: e48869d18e5115d2e6626462eac5b202
Typ: ssh
Updated: T12:48:02 +0100 (CET)
Count IPs: 8436
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download: https://lists.blocklist.de/lists/ssh.txt
MD5: ec381c268878270240fef437584d2df7
Typ: mail
Updated: T12:48:02 +0100 (CET)
Count IPs: 13769
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download: https://lists.blocklist.de/lists/mail.txt
MD5: 434c1fdee8afc7bce9aa6dbdfec22c69
Typ: apache
Updated: T12:48:03 +0100 (CET)
Count IPs: 8406
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download: https://lists.blocklist.de/lists/apache.txt
MD5: c2378c07016ed590e2c4dc6ccb331b16
Typ: imap
Updated: T12:48:04 +0100 (CET)
Count IPs: 2761
Description: All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download: https://lists.blocklist.de/lists/imap.txt
MD5: c081476200f22b552b8c16c7acb000fc
Typ: ftp
Updated: T12:48:04 +0100 (CET)
Count IPs: 41
Description: All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download: https://lists.blocklist.de/lists/ftp.txt
MD5: 03c1243f6b60c6c2465e930911082277
Typ: sip
Updated: T12:48:04 +0100 (CET)
Count IPs: 55
Description: All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download: https://lists.blocklist.de/lists/sip.txt
MD5: f162cb99bdf4a6bcda9d3be70a32e27f
Typ: bots
Updated: T12:48:04 +0100 (CET)
Count IPs: 506
Description: All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download: https://lists.blocklist.de/lists/bots.txt
MD5: a73a1bf28efc3eef39541d5142ce8249
Typ: strongips
Updated: T12:48:05 +0100 (CET)
Count IPs: 323
Description: All IPs which are older then 2 month and have more then 5.000 attacks.
Download: https://lists.blocklist.de/lists/strongips.txt
MD5: 134cc0bc92b24a7ad410b695d3f40b3c
Typ: ircbot
Updated: T12:48:05 +0100 (CET)
Count IPs:
Description:
Download: https://lists.blocklist.de/lists/ircbot.txt
MD5:
Typ: bruteforcelogin
Updated: T12:48:05 +0100 (CET)
Count IPs: 279
Description: All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download: https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5: f436cbb863c2821756a1823b7ca1996c
time = unixtime
OR
time = hh:ii
Policy:
In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.
The rbldnsd-Zone-Files
To get only the last addedd IPs
Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.
Typ: all
Updated: T12:48:01 +0100 (CET)
Count IPs: 23252
Description: All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download: https://lists.blocklist.de/lists/all.txt
MD5: e48869d18e5115d2e6626462eac5b202
Typ: ssh
Updated: T12:48:02 +0100 (CET)
Count IPs: 8436
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download: https://lists.blocklist.de/lists/ssh.txt
MD5: ec381c268878270240fef437584d2df7
Typ: mail
Updated: T12:48:02 +0100 (CET)
Count IPs: 13769
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download: https://lists.blocklist.de/lists/mail.txt
MD5: 434c1fdee8afc7bce9aa6dbdfec22c69
Typ: apache
Updated: T12:48:03 +0100 (CET)
Count IPs: 8406
Description: All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download: https://lists.blocklist.de/lists/apache.txt
MD5: c2378c07016ed590e2c4dc6ccb331b16
Typ: imap
Updated: T12:48:04 +0100 (CET)
Count IPs: 2761
Description: All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download: https://lists.blocklist.de/lists/imap.txt
MD5: c081476200f22b552b8c16c7acb000fc
Typ: ftp
Updated: T12:48:04 +0100 (CET)
Count IPs: 41
Description: All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download: https://lists.blocklist.de/lists/ftp.txt
MD5: 03c1243f6b60c6c2465e930911082277
Typ: sip
Updated: T12:48:04 +0100 (CET)
Count IPs: 55
Description: All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download: https://lists.blocklist.de/lists/sip.txt
MD5: f162cb99bdf4a6bcda9d3be70a32e27f
Typ: bots
Updated: T12:48:04 +0100 (CET)
Count IPs: 506
Description: All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download: https://lists.blocklist.de/lists/bots.txt
MD5: a73a1bf28efc3eef39541d5142ce8249
Typ: strongips
Updated: T12:48:05 +0100 (CET)
Count IPs: 323
Description: All IPs which are older then 2 month and have more then 5.000 attacks.
Download: https://lists.blocklist.de/lists/strongips.txt
MD5: 134cc0bc92b24a7ad410b695d3f40b3c
Typ: ircbot
Updated: T12:48:05 +0100 (CET)
Count IPs:
Description:
Download: https://lists.blocklist.de/lists/ircbot.txt
MD5:
Typ: bruteforcelogin
Updated: T12:48:05 +0100 (CET)
Count IPs: 279
Description: All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download: https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5: f436cbb863c2821756a1823b7ca1996c
To get only the last added IP-Addresses you can use:
https://api.blocklist.de/getlast.php?time=xx:xxtime = unixtime
OR
time = hh:ii
Policy:
In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.