Database Attack IP addresses
Attacks on exposed MySQL, PostgreSQL, Redis, MongoDB, Elasticsearch and similar.
In the last 30 days, 543 IP addresses were reported for Database Attack, in 4,465 reports altogether. 43 of them (7%) have a confidence score of 75 or more and are on the default blocklist. Most of them are in Belgium.
543addresses reported, 30 days
43on the default blocklist (75+)
4,465reports against them
1 hsince the latest report
Most reported addresses
| Address | Score | Last seen |
|---|---|---|
| 🇧🇬80.94.95.109 | 83 | 5 h |
| 🇨🇱190.171.189.85 | 83 | 5 h |
| 🇸🇬58.182.58.128 | 82 | 5 h |
| 🇮🇩163.7.1.156 | 82 | 5 h |
| ðŸ‡ðŸ‡°152.32.225.117 | 82 | 5 h |
| 🇻🇳160.250.132.238 | 80 | 5 h |
| 🇨🇳116.52.252.150 | 80 | 5 h |
| 🇻🇳103.159.51.70 | 80 | 5 h |
| 🇦🇩45.148.10.240 | 80 | 8 h |
| 🇳🇱2.57.122.238 | 80 | 8 h |
| 🇨🇳59.63.166.81 | 79 | 5 h |
| 🇺🇸50.221.56.52 | 79 | 5 h |
| 🇺🇸38.148.20.75 | 79 | 5 h |
| 🇺🇸36.255.97.234 | 79 | 5 h |
| 🇧🇪34.78.118.97 | 79 | 5 h |
| 🇪🇹196.189.236.67 | 79 | 5 h |
| 🇺🇸152.32.236.102 | 79 | 5 h |
| 🇰🇷14.34.249.175 | 79 | 5 h |
| ðŸ‡ðŸ‡°107.150.123.48 | 79 | 5 h |
| 🇳🇱91.92.40.65 | 79 | 8 h |
Where they are
Networks they belong to
Block them
The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:
curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.
Figures cover the last 30 days and are refreshed hourly; last updated 53 minutes ago.