Credential Stuffing IP addresses
Logging in with username and password pairs leaked from other sites.
In the last 30 days, 3,716 IP addresses were reported for Credential Stuffing, in 18,329 reports altogether. 72 of them (1%) have a confidence score of 75 or more and are on the default blocklist. Most of them are in United States.
3,716addresses reported, 30 days
72on the default blocklist (75+)
18,329reports against them
1 hsince the latest report
Most reported addresses
| Address | Score | Last seen |
|---|---|---|
| 🇧🇬80.94.95.109 | 83 | 5 h |
| 🇨🇱190.171.189.85 | 83 | 5 h |
| 🇸🇬58.182.58.128 | 82 | 5 h |
| 🇮🇩163.7.1.156 | 82 | 5 h |
| 🇭🇰152.32.225.117 | 82 | 5 h |
| 🇺🇸174.67.188.22 | 81 | 5 h |
| 🇫🇷77.239.124.249 | 80 | 5 h |
| 🇻🇳160.250.132.238 | 80 | 5 h |
| 🇨🇳116.52.252.150 | 80 | 5 h |
| 🇻🇳103.159.51.70 | 80 | 5 h |
| 🇦🇩45.148.10.240 | 80 | 8 h |
| 🇳🇱2.57.122.238 | 80 | 8 h |
| 🇨🇳59.63.166.81 | 79 | 5 h |
| 🇺🇸50.221.56.52 | 79 | 5 h |
| 🇸🇨45.66.35.20 | 79 | 5 h |
| 🇺🇸38.148.20.75 | 79 | 5 h |
| 🇺🇸36.255.97.234 | 79 | 5 h |
| 🇧🇪34.78.118.97 | 79 | 5 h |
| 🇪🇹196.189.236.67 | 79 | 5 h |
| 🇺🇸152.32.236.102 | 79 | 5 h |
Where they are
Networks they belong to
Block them
The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:
curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.
Figures cover the last 30 days and are refreshed hourly; last updated 54 minutes ago.