Most abused IP ranges
The IPv4 /24 and IPv6 /48 networks with the most reported addresses in the last 30 days. A range full of attackers usually means a hosting provider renting servers to abusers, a botnet in one ISP's customer block, or a scanning operation.
| Range | Reported IPs | Last report |
|---|---|---|
| 🇳🇱2a01:4020:2::/48 | 372 | 2 h |
| 🇬🇧86.38.187.0/24 | 256 | 51 min |
| 🇬🇧64.205.72.0/24 | 256 | 51 min |
| 🇬🇧77.67.26.0/24 | 256 | 51 min |
| 🇩🇪69.5.169.0/24 | 256 | 51 min |
| 🇬🇧200.138.46.0/24 | 256 | 51 min |
| 🇬🇧193.163.125.0/24 | 256 | 51 min |
| 🇺🇸64.62.197.0/24 | 256 | 51 min |
| 🇺🇸199.165.159.0/24 | 256 | 51 min |
| 🇺🇸147.185.132.0/24 | 256 | 52 min |
| 🇺🇸147.185.133.0/24 | 256 | 52 min |
| 🇺🇸91.230.168.0/24 | 256 | 52 min |
| 🇫🇷91.231.89.0/24 | 256 | 52 min |
| 🇺🇸195.184.76.0/24 | 256 | 52 min |
| 🇺🇸65.49.1.0/24 | 256 | 51 min |
| 🇫🇷91.196.152.0/24 | 256 | 52 min |
| 🇳🇱45.156.128.0/24 | 256 | 51 min |
| 🇺🇸66.132.186.0/24 | 256 | 52 min |
| 🇺🇸66.132.195.0/24 | 256 | 51 min |
| 🇺🇸66.132.172.0/24 | 256 | 51 min |
| 🇷🇺5.167.65.0/24 | 256 | 10 h |
| 🇷🇺5.167.69.0/24 | 256 | 10 h |
| 🇷🇺5.167.64.0/24 | 256 | 10 h |
| 🇷🇺5.167.70.0/24 | 256 | 10 h |
| 🇷🇺5.167.67.0/24 | 256 | 10 h |
| 🇷🇺5.167.71.0/24 | 256 | 10 h |
| 🇷🇺5.167.66.0/24 | 256 | 10 h |
| 🇷🇺5.167.68.0/24 | 256 | 10 h |
| 🇫🇷216.180.246.0/24 | 256 | 1 h |
| 🇺🇸45.156.129.0/24 | 256 | 51 min |
| 🇫🇷77.239.124.0/24 | 256 | 51 min |
| 🇺🇸216.25.90.0/24 | 256 | 1 h |
| 🇺🇸198.235.24.0/24 | 256 | 52 min |
| 🇺🇸108.62.60.0/24 | 256 | 10 h |
| 🇺🇸173.234.227.0/24 | 256 | 10 h |
| 🇷🇺188.143.232.0/24 | 256 | 10 h |
| 🇺🇸108.62.56.0/24 | 256 | 10 h |
| 🇺🇸216.151.138.0/24 | 256 | 10 h |
| 🇩🇪192.251.226.0/24 | 256 | 10 h |
| 🇺🇸216.152.252.0/24 | 256 | 10 h |
| 🇺🇸216.151.137.0/24 | 256 | 10 h |
| 🇮🇩113.212.69.0/24 | 256 | 10 h |
| 🇺🇸108.62.62.0/24 | 256 | 10 h |
| 🇺🇸108.62.63.0/24 | 256 | 10 h |
| 🇺🇸173.234.225.0/24 | 256 | 10 h |
| 🇺🇸216.151.130.0/24 | 256 | 10 h |
| 🇺🇸108.62.59.0/24 | 256 | 10 h |
| 🇺🇸108.62.58.0/24 | 256 | 10 h |
| 🇷🇺188.143.233.0/24 | 256 | 10 h |
| 🇺🇸216.152.249.0/24 | 256 | 10 h |
| 🇺🇸108.62.57.0/24 | 256 | 10 h |
| 🇺🇸173.234.226.0/24 | 256 | 10 h |
| 🇺🇦178.137.16.0/24 | 256 | 10 h |
| 🇺🇸108.62.61.0/24 | 256 | 10 h |
| 🇮🇩113.212.70.0/24 | 256 | 10 h |
| 🇺🇸205.210.31.0/24 | 256 | 52 min |
| 🇬🇧31.14.254.0/24 | 256 | 1 h |
| 🇦🇩45.148.10.0/24 | 256 | 20 min |
| 🇺🇸66.132.159.0/24 | 256 | 52 min |
| 🇩🇪151.243.11.0/24 | 256 | 51 min |
| 🇬🇧5.226.140.0/24 | 256 | 51 min |
| 🇧🇷16.5.0.0/24 | 256 | 51 min |
| 🇳🇱185.242.226.0/24 | 256 | 51 min |
| 🇺🇸66.132.224.0/24 | 256 | 51 min |
| 🇺🇸109.105.210.0/24 | 256 | 51 min |
| 🇸🇪45.198.224.0/24 | 256 | 51 min |
| 🇩🇪167.94.146.0/24 | 256 | 52 min |
| 🇺🇸148.59.129.0/24 | 256 | 51 min |
| ðŸ‡ðŸ‡°156.225.1.0/24 | 256 | 51 min |
| 🇺🇸167.94.145.0/24 | 256 | 51 min |
| 🇳🇱138.226.239.0/24 | 256 | 51 min |
| ðŸ‡ðŸ‡°172.110.223.0/24 | 256 | 51 min |
| 🇦🇩193.47.62.0/24 | 256 | 20 min |
| 🇳🇱160.119.76.0/24 | 256 | 51 min |
| 🇺🇸207.57.142.0/24 | 256 | 10 h |
| 🇦🇩195.178.110.0/24 | 256 | 51 min |
| 🇧🇷45.157.16.0/24 | 256 | 10 h |
| 🇹🇷5.180.81.0/24 | 256 | 4 h |
| 🇹🇷2.59.117.0/24 | 256 | 4 h |
| 🇹🇷87.76.139.0/24 | 256 | 4 h |
| 🇹🇷193.111.125.0/24 | 256 | 4 h |
| 🇹🇷213.238.180.0/24 | 256 | 4 h |
| 🇹🇷46.36.201.0/24 | 256 | 4 h |
| 🇹ðŸ‡89.38.101.0/24 | 256 | 4 h |
| 🇵🇱213.156.101.0/24 | 256 | 10 h |
| 🇹🇷45.59.70.0/24 | 256 | 4 h |
| 🇹🇷185.223.77.0/24 | 256 | 4 h |
| 🇹🇷5.250.253.0/24 | 256 | 4 h |
| 🇬🇧136.148.68.0/24 | 256 | 34 h |
| 🇨ðŸ‡5.180.134.0/24 | 256 | 34 h |
| 🇵🇱93.174.29.0/24 | 256 | 10 h |
| 🇩🇪77.90.185.0/24 | 256 | 51 min |
| 🇩🇪195.182.16.0/24 | 256 | 51 min |
| 🇵🇱217.114.34.0/24 | 256 | 10 h |
| 🇵🇱176.241.246.0/24 | 256 | 34 h |
| 🇵🇱45.137.227.0/24 | 256 | 4 h |
| 🇹🇷185.136.206.0/24 | 256 | 4 h |
| 🇵🇱109.233.89.0/24 | 256 | 34 h |
| 🇵🇱185.93.95.0/24 | 256 | 34 h |
| 🇮🇹45.90.157.0/24 | 256 | 34 h |
Ranges with at least three reported addresses, refreshed hourly; last updated 9 minutes ago. Click a range to see every reported address inside it.
Blocking whole ranges
Blocking a /24 stops 256 addresses at once, including any innocent neighbours. It is reasonable for ranges where most addresses are on the blocklist and nothing you serve comes from there. For anything else, block the individual addresses with the IP blacklist, which only contains addresses that were reported themselves.
Run a network? Check a range of your own with the network checker, and see your network's record on its ASN page.