Export all blocked IPs

To use our Lists via DNS.
The rbldnsd-Zone-Files
To get only the last addedd IPs

Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.

Typ:                     all
Updated:             T09:12:02 +0100 (CET)
Count IPs:           21517
Description:       All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download:           https://lists.blocklist.de/lists/all.txt
MD5:                     479140ad11914da5cabdcb4f42c4b64e



Typ:                     ssh
Updated:             T09:12:03 +0100 (CET)
Count IPs:           6099
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download:           https://lists.blocklist.de/lists/ssh.txt
MD5:                     5fde373ab41123f2d32cecc8079c84d6



Typ:                     mail
Updated:             T09:12:04 +0100 (CET)
Count IPs:           12356
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download:           https://lists.blocklist.de/lists/mail.txt
MD5:                     8450d29c3e8c49707393316536cbac17



Typ:                     apache
Updated:             T09:12:04 +0100 (CET)
Count IPs:           10579
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download:           https://lists.blocklist.de/lists/apache.txt
MD5:                     fe6c24a623f764fd4b6ca5faa4110c57



Typ:                     imap
Updated:             T09:12:05 +0100 (CET)
Count IPs:           2813
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download:           https://lists.blocklist.de/lists/imap.txt
MD5:                     041a4ffe2e7c5de51f2ed6424b06674e



Typ:                     ftp
Updated:             T09:12:05 +0100 (CET)
Count IPs:           19
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download:           https://lists.blocklist.de/lists/ftp.txt
MD5:                     aec369473c1f31f4af1ba521fed4e36b



Typ:                     sip
Updated:             T09:12:05 +0100 (CET)
Count IPs:           30
Description:       All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download:           https://lists.blocklist.de/lists/sip.txt
MD5:                     7785d06de17861d38911d41f31177a11



Typ:                     bots
Updated:             T09:12:06 +0100 (CET)
Count IPs:           395
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download:           https://lists.blocklist.de/lists/bots.txt
MD5:                     8f6d76043d6c034c876e86ba36180f49



Typ:                     strongips
Updated:             T09:12:07 +0100 (CET)
Count IPs:           272
Description:       All IPs which are older then 2 month and have more then 5.000 attacks.
Download:           https://lists.blocklist.de/lists/strongips.txt
MD5:                     0fbdad4d5551e9dc30f4778ec23d654a



Typ:                     ircbot
Updated:             T09:12:07 +0100 (CET)
Count IPs:          
Description:      
Download:           https://lists.blocklist.de/lists/ircbot.txt
MD5:                    



Typ:                     bruteforcelogin
Updated:             T09:12:08 +0100 (CET)
Count IPs:           2512
Description:       All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download:           https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5:                     60db24a9cfa03dbe25958767de020f0e

To get only the last added IP-Addresses you can use:

https://api.blocklist.de/getlast.php?time=xx:xx
time = unixtime
OR
time = hh:ii


Policy:

In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.