Downloads

Here are some files generated from our data that may be useful. We hope to add more in the future.

Something you would like to see here? Ask us.

Toxic IP Addresses, Domains and Usernames

The data provided here represents what we believe will only ever ben used to abuse. IP Addresses, domains and usernames listed here will be returned in API results as "blacklisted". You would be very unlikely to see valid content from either the IP addresses or domains listed.

IP Addresses are provided in two formats, CIDR (IP network and subnet) and as IP Addresses ranges

Two domain lists are provided. The "exact" domain lists domains that have been blacklisted in the API, and should be compared as in an identical match. The "partial" domain lists provides partial domains where a domain is often seen with many sub-domains or registered in bulk, and used in such a way as to avoid hash/string matching (eg spamdomain.com is listed to detect joe@aa.spamdomain.com, bob@bb.spamdomain.com, sue@cc.spamdomain.com)

Download Type Status
Toxic IP Addresses (CIDR) toxic_ip_cidr.txt
Toxic IP Addresses (range) toxic_ip_range.txt
Toxic Domains (exact name match) toxic_domains_whole.txt
Toxic Domains (partial name match) toxic_domains_partial.txt
Toxic Usernames (partial name match) toxic_usernames_partial.txt

The data below is an appendum to to the table above, as it provides a filtered version of the "toxic_domains_whole" file. The filtered data removed domains that appear in the Top 1,000,000 Alexa domains list.

Each file removed a domain from the toxic domain list if that domains appears in the top specified domains. eg toxic_domains_whole_filtered_10000 will remove a domain from the toxic list if that domains appears in the top 10,000 Alexa domains.

Note Some are marked as unreliable as many "spamvertized" and malware/fraudulent domains are in the Alexa list

Download Type Status
Toxic Domains - Filtered 1,000 toxic_domains_whole_filtered_1000.txt
Toxic Domains - Filtered 10,000 toxic_domains_whole_filtered_10000.txt
Toxic Domains - Filtered 50,000 toxic_domains_whole_filtered_50000.txt
Toxic Domains - Filtered 100,000 (unreliable, best not use) toxic_domains_whole_filtered_100000.txt
Toxic Domains - Filtered 250,000 (unreliable, best not use) toxic_domains_whole_filtered_250000.txt
Toxic Domains - Filtered 1,000,000 (unreliable, best not used) toxic_domains_whole_filtered.txt

Listed IP Addresses (Legacy)

Download Type Status
All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day bannedips.zip
All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day bannedips.tar.gz
All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day bannedips.csv.gz
Just the domains in CSV (from the Spammer Domains page) - limited to 2 downloads per IP per day spamdomains.zip

All Site Data

There are two types of files available for download. The first is a single entry per line, giving just the email, IP or username for the period chosen. The second provides details for the chosen field along with the total and lastseen for that period (designated with all in the filename).

Field record only

Each file contains a list of records, with a "last seen" of that record being within the time period for each of the files. Eg. listed_ip_7 will contain all the IP numbers that have been active within the last seven days. IP numbers arent shown if they havent been seen within the last seven days

The lists provided below provide 1 record per line. They are zipped archive files, containing a single text file (format Unix carriage return)

        109.104.183.88
        109.104.187.89
        109.104.189.87

Record summary with total and lastseen time

These file provide details of each detail type (IP, username or email) logged within the last 1 day, 7 days, 30 days, 90 days and 1 year, in the following format (Excel compatible CSV)

        "109.104.183.88","1","2010-03-14 09:30:39"
        "109.104.187.89","71","2010-03-27 01:53:34"
        "109.104.189.87","8","2009-11-11 07:41:20"

1st column is the IP number, 2nd is the number of times that IP number been reported in the period for which the file was generated, 3rd column is the last seen date/time (UTC) for that IP

  • ZIP files

  • GZIP Files

IPv4 Addresses

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1.zip (MD5) listed_ip_1_all.zip (MD5)
last 7 days Hourly 2 listed_ip_7.zip (MD5) listed_ip_7_all.zip (MD5)
Last 30 days Hourly 2 listed_ip_30.zip (MD5) listed_ip_30_all.zip (MD5)
Last 90 days Daily 2 listed_ip_90.zip (MD5) listed_ip_90_all.zip (MD5)
Last 180 days Daily 2 listed_ip_180.zip (MD5) listed_ip_180_all.zip (MD5)
Last year Daily 2 listed_ip_365.zip (MD5) listed_ip_365_all.zip (MD5)

IPv6 Addresses

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1_ipv6.zip (MD5) listed_ip_1_ipv6_all.zip (MD5)
last 7 days Hourly 2 listed_ip_7_ipv6.zip (MD5) listed_ip_7_ipv6_all.zip (MD5)
Last 30 days Hourly 2 listed_ip_30_ipv6.zip (MD5) listed_ip_30_all.zip (MD5)
Last 90 days Daily 2 listed_ip_90_ipv6.zip (MD5) listed_ip_90_all.zip (MD5)
Last 180 days Daily 2 listed_ip_180_ipv6.zip (MD5) listed_ip_180_all.zip (MD5)
Last year Daily 2 listed_ip_365_ipv6.zip (MD5) listed_ip_365_all.zip (MD5)

IPv4 and IPv6 Combined

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1_ipv46.zip (MD5) listed_ip_1_ipv46_all.zip (MD5)
last 7 days Hourly 2 listed_ip_7_ipv46.zip (MD5) listed_ip_7_ipv46_all.zip (MD5)
Last 30 days Hourly 2 listed_ip_30_ipv46.zip (MD5) listed_ip_30_all.zip (MD5)
Last 90 days Daily 2 listed_ip_90_ipv46.zip (MD5) listed_ip_90_all.zip (MD5)
Last 180 days Daily 2 listed_ip_180_ipv46.zip (MD5) listed_ip_180_all.zip (MD5)
Last year Daily 2 listed_ip_365_ipv46.zip (MD5) listed_ip_365_all.zip (MD5)

Email Addresses

Timespan Updates Download Limit Email Only File Summary File
Last 24 Hours Hourly 24 listed_email_1.zip (MD5) listed_email_1_all.zip (MD5)
last 7 days Hourly 2 listed_email_7.zip (MD5) listed_email_7_all.zip (MD5)
Last 30 days Hourly 2 listed_email_30.zip (MD5) listed_email_30_all.zip (MD5)
Last 90 days Daily 2 listed_email_90.zip (MD5) listed_email_90_all.zip (MD5)
Last 180 days Daily 2 listed_email_180.zip (MD5) listed_email_180_all.zip (MD5)
Last year Daily 2 listed_email_365.zip (MD5) listed_email_365_all.zip (MD5)

Usernames

Timespan Updates Download Limit Username Only File Summary File
Last 24 Hours Hourly 24 listed_username_1.zip (MD5) listed_username_1_all.zip (MD5)
last 7 days Hourly 2 listed_username_7.zip (MD5) listed_username_7_all.zip (MD5)
Last 30 days Hourly 2 listed_username_30.zip (MD5) listed_username_30_all.zip (MD5)
Last 90 days Daily 2 listed_username_90.zip (MD5) listed_username_90_all.zip (MD5)
Last 180 days Daily 2 listed_username_180.zip (MD5) listed_username_180_all.zip (MD5)
Last year Daily 2 listed_username_365.zip (MD5) listed_username_365_all.zip (MD5)

IPv4 Addresses

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1.gz (MD5) listed_ip_1_all.gz (MD5)
last 7 days Hourly 2 listed_ip_7.gz (MD5) listed_ip_7_all.gz (MD5)
Last 30 days Hourly 2 listed_ip_30.gz (MD5) listed_ip_30_all.gz (MD5)
Last 90 days Daily 2 listed_ip_90.gz (MD5) listed_ip_90_all.gz (MD5)
Last 180 days Daily 2 listed_ip_180.gz (MD5) listed_ip_180_all.gz (MD5)
Last year Daily 2 listed_ip_365.gz (MD5) listed_ip_365_all.gz (MD5)

IPv6 Addresses

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1_ipv6.gz (MD5) listed_ip_1_ipv6_all.gz (MD5)
last 7 days Hourly 2 listed_ip_7_ipv6.gz (MD5) listed_ip_7_ipv6_all.gz (MD5)
Last 30 days Hourly 2 listed_ip_30_ipv6.gz (MD5) listed_ip_30_all.gz (MD5)
Last 90 days Daily 2 listed_ip_90_ipv6.gz (MD5) listed_ip_90_all.gz (MD5)
Last 180 days Daily 2 listed_ip_180_ipv6.gz (MD5) listed_ip_180_all.gz (MD5)
Last year Daily 2 listed_ip_365_ipv6.gz (MD5) listed_ip_365_all.gz (MD5)

IPv4 and IPv6 Combined

Timespan Updates Download Limit IP Only File Summary File
Last 24 Hours Hourly 24 listed_ip_1_ipv46.gz (MD5) listed_ip_1_ipv46_all.gz (MD5)
last 7 days Hourly 2 listed_ip_7_ipv46.gz (MD5) listed_ip_7_ipv46_all.gz (MD5)
Last 30 days Hourly 2 listed_ip_30_ipv46.gz (MD5) listed_ip_30_all.gz (MD5)
Last 90 days Daily 2 listed_ip_90_ipv46.gz (MD5) listed_ip_90_all.gz (MD5)
Last 180 days Daily 2 listed_ip_180_ipv46.gz (MD5) listed_ip_180_all.gz (MD5)
Last year Daily 2 listed_ip_365_ipv46.gz (MD5) listed_ip_365_all.gz (MD5)

Email Addresses

Timespan Updates Download Limit Email Only File Summary File
Last 24 Hours Hourly 24 listed_email_1.gz (MD5) listed_email_1_all.gz (MD5)
last 7 days Hourly 2 listed_email_7.gz (MD5) listed_email_7_all.gz (MD5)
Last 30 days Hourly 2 listed_email_30.gz (MD5) listed_email_30_all.gz (MD5)
Last 90 days Daily 2 listed_email_90.gz (MD5) listed_email_90_all.gz (MD5)
Last 180 days Daily 2 listed_email_180.gz (MD5) listed_email_180_all.gz (MD5)
Last year Daily 2 listed_email_365.gz (MD5) listed_email_365_all.gz (MD5)

Usernames

Timespan Updates Download Limit Username Only File Summary File
Last 24 Hours Hourly 24 listed_username_1.gz (MD5) listed_username_1_all.gz (MD5)
last 7 days Hourly 2 listed_username_7.gz (MD5) listed_username_7_all.gz (MD5)
Last 30 days Hourly 2 listed_username_30.gz (MD5) listed_username_30_all.gz (MD5)
Last 90 days Daily 2 listed_username_90.gz (MD5) listed_username_90_all.gz (MD5)
Last 180 days Daily 2 listed_username_180.gz (MD5) listed_username_180_all.gz (MD5)
Last year Daily 2 listed_username_365.gz (MD5) listed_username_365_all.gz (MD5)

Any update times shown in red indicates that the file present is older than it should be and that an update of that file has failed

Close
Close