Malware Distribution IP addresses
Serving malware, droppers or malicious payloads.
In the last 30 days, 62,682 IP addresses were reported for Malware Distribution, in 270,262 reports altogether. 516 of them (0%) have a confidence score of 75 or more and are on the default blocklist. Most of them are in United States.
62,682addresses reported, 30 days
516on the default blocklist (75+)
270,262reports against them
59 minsince the latest report
Most reported addresses
| Address | Score | Last seen |
|---|---|---|
| 🇨🇳8.138.154.105 | 85 | 5 h |
| 🇮🇩103.46.186.148 | 85 | 5 h |
| 🇨🇳8.138.155.88 | 83 | 5 h |
| 🇨🇳8.134.159.4 | 83 | 5 h |
| 🇧🇬80.94.95.109 | 83 | 5 h |
| 🇳🇱45.156.128.63 | 83 | 5 h |
| 🇬🇧193.163.125.74 | 83 | 5 h |
| 🇨🇱190.171.189.85 | 83 | 5 h |
| 🇺🇸165.154.172.200 | 83 | 5 h |
| 🇨🇳101.200.243.197 | 83 | 5 h |
| 🇸🇬58.182.58.128 | 82 | 5 h |
| 🇮🇩163.7.1.156 | 82 | 5 h |
| 🇭🇰152.32.225.117 | 82 | 5 h |
| 🇨🇳101.201.38.226 | 82 | 5 h |
| 🇨🇳8.152.209.0 | 81 | 5 h |
| 🇨🇳8.137.159.210 | 81 | 5 h |
| 🇧🇬79.124.56.214 | 81 | 5 h |
| 🇨🇳59.63.163.2 | 81 | 5 h |
| 🇨🇳47.109.134.2 | 81 | 5 h |
| 🇨🇳47.103.157.194 | 81 | 5 h |
Where they are
Networks they belong to
Block them
The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:
curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.
Figures cover the last 30 days and are refreshed hourly; last updated 54 minutes ago.