Export all blocked IPs

To use our Lists via DNS.
The rbldnsd-Zone-Files
To get only the last addedd IPs

Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.

Typ:                     all
Updated:             T11:14:12 +0200 (CEST)
Count IPs:           20820
Description:       All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download:           https://lists.blocklist.de/lists/all.txt
MD5:                     1c4f9ac036488ba5240cbbaa68cb0213



Typ:                     ssh
Updated:             T10:56:03 +0200 (CEST)
Count IPs:           6155
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download:           https://lists.blocklist.de/lists/ssh.txt
MD5:                     67df5a071acf93f8859b124349974749



Typ:                     mail
Updated:             T10:56:04 +0200 (CEST)
Count IPs:           12656
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download:           https://lists.blocklist.de/lists/mail.txt
MD5:                     2f560a668c44f6196598055c44b5fd06



Typ:                     apache
Updated:             T10:56:05 +0200 (CEST)
Count IPs:           9373
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download:           https://lists.blocklist.de/lists/apache.txt
MD5:                     3137f2f2b1052ce386769aac574c7f4c



Typ:                     imap
Updated:             T10:56:05 +0200 (CEST)
Count IPs:           3011
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download:           https://lists.blocklist.de/lists/imap.txt
MD5:                     9315deab6c03236d0cbfeb2ee5c9e971



Typ:                     ftp
Updated:             T10:56:05 +0200 (CEST)
Count IPs:           144
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download:           https://lists.blocklist.de/lists/ftp.txt
MD5:                     5fe412fd028062174fc32d96938687ee



Typ:                     sip
Updated:             T10:56:06 +0200 (CEST)
Count IPs:           28
Description:       All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download:           https://lists.blocklist.de/lists/sip.txt
MD5:                     66c1be64805170f30c6d75ce3d674c52



Typ:                     bots
Updated:             T10:56:06 +0200 (CEST)
Count IPs:           425
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download:           https://lists.blocklist.de/lists/bots.txt
MD5:                     60058c1d074f9b1874befc5a041b04e9



Typ:                     strongips
Updated:             T10:56:07 +0200 (CEST)
Count IPs:           279
Description:       All IPs which are older then 2 month and have more then 5.000 attacks.
Download:           https://lists.blocklist.de/lists/strongips.txt
MD5:                     cd53331a34bf434e391f802fecf6ac48



Typ:                     ircbot
Updated:             T10:56:07 +0200 (CEST)
Count IPs:          
Description:      
Download:           https://lists.blocklist.de/lists/ircbot.txt
MD5:                    



Typ:                     bruteforcelogin
Updated:             T10:56:07 +0200 (CEST)
Count IPs:           1192
Description:       All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download:           https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5:                     f5acc659980d8429f3329829dd00c3fc

To get only the last added IP-Addresses you can use:

https://api.blocklist.de/getlast.php?time=xx:xx
time = unixtime
OR
time = hh:ii


Policy:

In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.