Downloads
Here are some files generated from our data that may be useful. We hope to add more in the future.
Something you would like to see here? Ask us.
Toxic IP Addresses, Domains and Usernames
The data provided here represents what we believe will only ever ben used to abuse. IP Addresses, domains and usernames listed here will be returned in API results as "blacklisted". You would be very unlikely to see valid content from either the IP addresses or domains listed.
IP Addresses are provided in two formats, CIDR (IP network and subnet) and as IP Addresses ranges
Two domain lists are provided. The "exact" domain lists domains that have been blacklisted in the API, and should be compared as in an identical match. The "partial" domain lists provides partial domains where a domain is often seen with many sub-domains or registered in bulk, and used in such a way as to avoid hash/string matching (eg spamdomain.com is listed to detect joe@aa.spamdomain.com, bob@bb.spamdomain.com, sue@cc.spamdomain.com)
| Download Type | Status |
|---|---|
| Toxic IP Addresses (CIDR) | toxic_ip_cidr.txt |
| Toxic IP Addresses (range) | toxic_ip_range.txt |
| Toxic Domains (exact name match) | toxic_domains_whole.txt |
| Toxic Domains (partial name match) | toxic_domains_partial.txt |
| Toxic Usernames (partial name match) | toxic_usernames_partial.txt |
The data below is an appendum to to the table above, as it provides a filtered version of the "toxic_domains_whole" file. The filtered data removed domains that appear in the Top 1,000,000 Alexa domains list.
Each file removed a domain from the toxic domain list if that domains appears in the top specified domains. eg toxic_domains_whole_filtered_10000 will remove a domain from the toxic list if that domains appears in the top 10,000 Alexa domains.
Note Some are marked as unreliable as many "spamvertized" and malware/fraudulent domains are in the Alexa list
| Download Type | Status |
|---|---|
| Toxic Domains - Filtered 1,000 | toxic_domains_whole_filtered_1000.txt |
| Toxic Domains - Filtered 10,000 | toxic_domains_whole_filtered_10000.txt |
| Toxic Domains - Filtered 50,000 | toxic_domains_whole_filtered_50000.txt |
| Toxic Domains - Filtered 100,000 (unreliable, best not use) | toxic_domains_whole_filtered_100000.txt |
| Toxic Domains - Filtered 250,000 (unreliable, best not use) | toxic_domains_whole_filtered_250000.txt |
| Toxic Domains - Filtered 1,000,000 (unreliable, best not used) | toxic_domains_whole_filtered.txt |
Listed IP Addresses (Legacy)
| Download Type | Status |
|---|---|
| All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day | bannedips.zip |
| All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day | bannedips.tar.gz |
| All IPs in CSV (one line, comma seperated) - Updated once per day, limited to 3 downloads per IP per day | bannedips.csv.gz |
| Just the domains in CSV (from the Spammer Domains page) - limited to 2 downloads per IP per day | spamdomains.zip |
All Site Data
There are two types of files available for download. The first is a single entry per line, giving just the email, IP or username for the period chosen. The second provides details for the chosen field along with the total and lastseen for that period (designated with all in the filename).
Field record only
Each file contains a list of records, with a "last seen" of that record being within the time period for each of the files. Eg. listed_ip_7 will contain all the IP numbers that have been active within the last seven days. IP numbers arent shown if they havent been seen within the last seven days
The lists provided below provide 1 record per line. They are zipped archive files, containing a single text file (format Unix carriage return)
109.104.183.88
109.104.187.89
109.104.189.87
Record summary with total and lastseen time
These file provide details of each detail type (IP, username or email) logged within the last 1 day, 7 days, 30 days, 90 days and 1 year, in the following format (Excel compatible CSV)
"109.104.183.88","1","2010-03-14 09:30:39"
"109.104.187.89","71","2010-03-27 01:53:34"
"109.104.189.87","8","2009-11-11 07:41:20"
1st column is the IP number, 2nd is the number of times that IP number been reported in the period for which the file was generated, 3rd column is the last seen date/time (UTC) for that IP
ZIP files
GZIP Files
IPv4 Addresses
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1.zip (MD5) | listed_ip_1_all.zip (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7.zip (MD5) | listed_ip_7_all.zip (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30.zip (MD5) | listed_ip_30_all.zip (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90.zip (MD5) | listed_ip_90_all.zip (MD5) | Last 180 days | Daily | 2 | listed_ip_180.zip (MD5) | listed_ip_180_all.zip (MD5) |
| Last year | Daily | 2 | listed_ip_365.zip (MD5) | listed_ip_365_all.zip (MD5) |
IPv6 Addresses
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1_ipv6.zip (MD5) | listed_ip_1_ipv6_all.zip (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7_ipv6.zip (MD5) | listed_ip_7_ipv6_all.zip (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30_ipv6.zip (MD5) | listed_ip_30_all.zip (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90_ipv6.zip (MD5) | listed_ip_90_all.zip (MD5) |
| Last 180 days | Daily | 2 | listed_ip_180_ipv6.zip (MD5) | listed_ip_180_all.zip (MD5) |
| Last year | Daily | 2 | listed_ip_365_ipv6.zip (MD5) | listed_ip_365_all.zip (MD5) |
IPv4 and IPv6 Combined
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1_ipv46.zip (MD5) | listed_ip_1_ipv46_all.zip (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7_ipv46.zip (MD5) | listed_ip_7_ipv46_all.zip (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30_ipv46.zip (MD5) | listed_ip_30_all.zip (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90_ipv46.zip (MD5) | listed_ip_90_all.zip (MD5) |
| Last 180 days | Daily | 2 | listed_ip_180_ipv46.zip (MD5) | listed_ip_180_all.zip (MD5) |
| Last year | Daily | 2 | listed_ip_365_ipv46.zip (MD5) | listed_ip_365_all.zip (MD5) |
Email Addresses
| Timespan | Updates | Download Limit | Email Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_email_1.zip (MD5) | listed_email_1_all.zip (MD5) |
| last 7 days | Hourly | 2 | listed_email_7.zip (MD5) | listed_email_7_all.zip (MD5) |
| Last 30 days | Hourly | 2 | listed_email_30.zip (MD5) | listed_email_30_all.zip (MD5) |
| Last 90 days | Daily | 2 | listed_email_90.zip (MD5) | listed_email_90_all.zip (MD5) | Last 180 days | Daily | 2 | listed_email_180.zip (MD5) | listed_email_180_all.zip (MD5) |
| Last year | Daily | 2 | listed_email_365.zip (MD5) | listed_email_365_all.zip (MD5) |
Usernames
| Timespan | Updates | Download Limit | Username Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_username_1.zip (MD5) | listed_username_1_all.zip (MD5) |
| last 7 days | Hourly | 2 | listed_username_7.zip (MD5) | listed_username_7_all.zip (MD5) |
| Last 30 days | Hourly | 2 | listed_username_30.zip (MD5) | listed_username_30_all.zip (MD5) |
| Last 90 days | Daily | 2 | listed_username_90.zip (MD5) | listed_username_90_all.zip (MD5) | Last 180 days | Daily | 2 | listed_username_180.zip (MD5) | listed_username_180_all.zip (MD5) |
| Last year | Daily | 2 | listed_username_365.zip (MD5) | listed_username_365_all.zip (MD5) |
IPv4 Addresses
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1.gz (MD5) | listed_ip_1_all.gz (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7.gz (MD5) | listed_ip_7_all.gz (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30.gz (MD5) | listed_ip_30_all.gz (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90.gz (MD5) | listed_ip_90_all.gz (MD5) | Last 180 days | Daily | 2 | listed_ip_180.gz (MD5) | listed_ip_180_all.gz (MD5) |
| Last year | Daily | 2 | listed_ip_365.gz (MD5) | listed_ip_365_all.gz (MD5) |
IPv6 Addresses
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1_ipv6.gz (MD5) | listed_ip_1_ipv6_all.gz (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7_ipv6.gz (MD5) | listed_ip_7_ipv6_all.gz (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30_ipv6.gz (MD5) | listed_ip_30_all.gz (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90_ipv6.gz (MD5) | listed_ip_90_all.gz (MD5) |
| Last 180 days | Daily | 2 | listed_ip_180_ipv6.gz (MD5) | listed_ip_180_all.gz (MD5) |
| Last year | Daily | 2 | listed_ip_365_ipv6.gz (MD5) | listed_ip_365_all.gz (MD5) |
IPv4 and IPv6 Combined
| Timespan | Updates | Download Limit | IP Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_ip_1_ipv46.gz (MD5) | listed_ip_1_ipv46_all.gz (MD5) |
| last 7 days | Hourly | 2 | listed_ip_7_ipv46.gz (MD5) | listed_ip_7_ipv46_all.gz (MD5) |
| Last 30 days | Hourly | 2 | listed_ip_30_ipv46.gz (MD5) | listed_ip_30_all.gz (MD5) |
| Last 90 days | Daily | 2 | listed_ip_90_ipv46.gz (MD5) | listed_ip_90_all.gz (MD5) |
| Last 180 days | Daily | 2 | listed_ip_180_ipv46.gz (MD5) | listed_ip_180_all.gz (MD5) |
| Last year | Daily | 2 | listed_ip_365_ipv46.gz (MD5) | listed_ip_365_all.gz (MD5) |
Email Addresses
| Timespan | Updates | Download Limit | Email Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_email_1.gz (MD5) | listed_email_1_all.gz (MD5) |
| last 7 days | Hourly | 2 | listed_email_7.gz (MD5) | listed_email_7_all.gz (MD5) |
| Last 30 days | Hourly | 2 | listed_email_30.gz (MD5) | listed_email_30_all.gz (MD5) |
| Last 90 days | Daily | 2 | listed_email_90.gz (MD5) | listed_email_90_all.gz (MD5) | Last 180 days | Daily | 2 | listed_email_180.gz (MD5) | listed_email_180_all.gz (MD5) |
| Last year | Daily | 2 | listed_email_365.gz (MD5) | listed_email_365_all.gz (MD5) |
Usernames
| Timespan | Updates | Download Limit | Username Only File | Summary File |
|---|---|---|---|---|
| Last 24 Hours | Hourly | 24 | listed_username_1.gz (MD5) | listed_username_1_all.gz (MD5) |
| last 7 days | Hourly | 2 | listed_username_7.gz (MD5) | listed_username_7_all.gz (MD5) |
| Last 30 days | Hourly | 2 | listed_username_30.gz (MD5) | listed_username_30_all.gz (MD5) |
| Last 90 days | Daily | 2 | listed_username_90.gz (MD5) | listed_username_90_all.gz (MD5) | Last 180 days | Daily | 2 | listed_username_180.gz (MD5) | listed_username_180_all.gz (MD5) |
| Last year | Daily | 2 | listed_username_365.gz (MD5) | listed_username_365_all.gz (MD5) |
Any update times shown in red indicates that the file present is older than it should be and that an update of that file has failed