Export all blocked IPs

To use our Lists via DNS.
The rbldnsd-Zone-Files
To get only the last addedd IPs

Here the lists of the attackers IP addresses of the last 48 hours pro service or all addresses for downloading. *
These lists contain one line per IP address.
These lists are generated every 30 minutes.
These files are compressed (gzip) from the web server (nginx). Windows editor, vi, and etc. can open the file. Depending on the software used, an unpack may be necessary.
These files are as they are, and to be used at your own risk.

Typ:                     all
Updated:             T20:06:03 +0100 (CET)
Count IPs:           24018
Description:       All IP addresses that have attacked one of our customers/servers in the last 48 hours.
Download:           https://lists.blocklist.de/lists/all.txt
MD5:                     1576bffb93f917008a017fd5e155d3a0



Typ:                     ssh
Updated:             T20:06:05 +0100 (CET)
Count IPs:           4828
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service SSH.
Download:           https://lists.blocklist.de/lists/ssh.txt
MD5:                     676791c11406fce89146cd948d98299e



Typ:                     mail
Updated:             T20:06:07 +0100 (CET)
Count IPs:           13613
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Mail, Postfix.
Download:           https://lists.blocklist.de/lists/mail.txt
MD5:                     62592b8201408d0c8fc3fc3c97243865



Typ:                     apache
Updated:             T20:06:08 +0100 (CET)
Count IPs:           9858
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Download:           https://lists.blocklist.de/lists/apache.txt
MD5:                     fa886873416bd813936d7cbb383a74f3



Typ:                     imap
Updated:             T20:06:09 +0100 (CET)
Count IPs:           4626
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service imap, sasl, pop3.....
Download:           https://lists.blocklist.de/lists/imap.txt
MD5:                     8bd8ca658585abe39ca338c820be12b7



Typ:                     ftp
Updated:             T20:06:10 +0100 (CET)
Count IPs:           43
Description:       All IP addresses which have been reported within the last 48 hours for attacks on the Service FTP.
Download:           https://lists.blocklist.de/lists/ftp.txt
MD5:                     27c11151bb44ba43ee918e856213004b



Typ:                     sip
Updated:             T20:06:11 +0100 (CET)
Count IPs:           512
Description:       All IP addresses that tried to login in a SIP-, VOIP- or Asterisk-Server and are inclueded in the IPs-List from http://www.infiltrated.net/ (Twitter).
Download:           https://lists.blocklist.de/lists/sip.txt
MD5:                     9718bd3164274bd4d61ae32290991ca4



Typ:                     bots
Updated:             T20:06:12 +0100 (CET)
Count IPs:           2834
Description:       All IP addresses which have been reported within the last 48 hours as having run attacks attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots (BadBots = he has posted a Spam-Comment on a open Forum or Wiki).
Download:           https://lists.blocklist.de/lists/bots.txt
MD5:                     3b80cb0bef502f6fb3d9133741c08075



Typ:                     strongips
Updated:             T20:06:14 +0100 (CET)
Count IPs:           294
Description:       All IPs which are older then 2 month and have more then 5.000 attacks.
Download:           https://lists.blocklist.de/lists/strongips.txt
MD5:                     45d6775c9fcf7123a313899680c91e8e



Typ:                     ircbot
Updated:             T20:06:14 +0100 (CET)
Count IPs:          
Description:      
Download:           https://lists.blocklist.de/lists/ircbot.txt
MD5:                    



Typ:                     bruteforcelogin
Updated:             T20:06:15 +0100 (CET)
Count IPs:           833
Description:       All IPs which attacks Joomlas, Wordpress and other Web-Logins with Brute-Force Logins.
Download:           https://lists.blocklist.de/lists/bruteforcelogin.txt
MD5:                     d08b923d5f8bd7db43364e927d04d833

To get only the last added IP-Addresses you can use:

https://api.blocklist.de/getlast.php?time=xx:xx
time = unixtime
OR
time = hh:ii


Policy:

In the Export / DNS list all IP addresses which have in the past 48 hours executed an attack on our systems and/or partners. These are addresses which have not used the Delist-Link.
. * And have two AS networks which are just spamming without customers.