Mail Server Attack IP addresses
Password guessing or relay attempts against SMTP, IMAP or POP3.
In the last 30 days, 21,639 IP addresses were reported for Mail Server Attack, in 113,854 reports altogether. 36 of them (0%) have a confidence score of 75 or more and are on the default blocklist. Most of them are in United States.
21,639addresses reported, 30 days
36on the default blocklist (75+)
113,854reports against them
1 hsince the latest report
Most reported addresses
| Address | Score | Last seen |
|---|---|---|
| 🇩🇪151.243.11.143 | 80 | 5 h |
| 🇭🇰152.32.225.108 | 79 | 5 h |
| 🇺🇸152.32.149.35 | 79 | 5 h |
| 🇳🇱80.82.77.139 | 79 | 5 h |
| 🇳🇱80.82.77.33 | 78 | 5 h |
| 🇭🇰152.32.212.41 | 78 | 5 h |
| 🇩🇪151.243.11.168 | 78 | 5 h |
| 🇺🇸71.6.199.23 | 78 | 5 h |
| 🇳🇱89.248.167.131 | 77 | 5 h |
| 🇺🇸45.156.129.83 | 77 | 5 h |
| 🇺🇸207.90.244.3 | 77 | 5 h |
| 🇺🇸207.90.244.11 | 77 | 5 h |
| 🇰🇷169.211.232.182 | 77 | 5 h |
| 🇭🇰165.154.40.205 | 77 | 5 h |
| 🇺🇸152.32.206.74 | 77 | 5 h |
| 🇺🇸152.32.205.206 | 77 | 5 h |
| 🇮🇳152.32.156.136 | 77 | 5 h |
| 🇳🇬152.32.141.40 | 77 | 5 h |
| 🇹🇭118.194.250.22 | 77 | 5 h |
| 🇬🇧118.193.64.186 | 77 | 5 h |
Where they are
Networks they belong to
Block them
The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:
curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"
See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.
Figures cover the last 30 days and are refreshed hourly; last updated 53 minutes ago.