List of malicious IP addresses

The most dangerous addresses reported in the last 24 hours, ranked by abuse confidence. Every entry was reported by people who run servers, for something it actually did: password guessing, exploit attempts, scanning, spam.

325,449reports, last 24 hours

189,711addresses reported, last 24 hours

2,018on the blocklist (score 75+)

15 minsince this list was updated

Top 100 malicious IPs, last 24 hours

Address	Score	Reports	Attack types	Network	Last seen
🇨🇱190.171.189.85	92	36	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	CTC. CORP S.A. (TELEFONICA E…	2 h
🇳🇱2.57.122.238	90	36	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control Database Attack HTTP Flood	UNMANAGED LTD	2 h
🇦🇩45.148.10.121	88	88	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	TECHOFF SRV LIMITED	2 h
🇧🇬80.94.95.109	87	44	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	SS-Net	2 h
🇰🇷14.34.249.175	87	36	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Korea Telecom	2 h
🇸🇬58.182.58.128	87	34	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Starhub Internet Pte Ltd	2 h
🇨🇳202.107.164.66	87	28	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Chinanet	2 h
🇮🇷46.38.146.46	87	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Peyman Ertebatat Pouya Compa…	2 h
🇬🇧51.195.149.120	87	25	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	OVH SAS	2 h
🇨🇭179.43.153.10	87	25	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control Database Attack HTTP Flood	Private Layer INC	2 h
🇮🇩43.129.56.70	87	24	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Shenzhen Tencent Computer Sy…	2 h
🇪🇬62.193.91.121	87	24	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	ETISALAT MISR	2 h
🇺🇸96.78.175.45	87	22	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Comcast Cable Communications…	2 h
🇭🇰103.73.220.218	87	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	GoMami Networks	2 h
🇬🇧217.60.242.61	86	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Amin NezhadKahnoji	2 h
🇲🇦81.192.46.49	86	24	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	Itissalat Al-MAGHRIB	2 h
🇺🇸96.78.175.36	86	24	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	Comcast Cable Communications…	2 h
🇭🇰165.154.64.94	86	23	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇭🇰45.249.245.91	86	23	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇧🇷201.63.223.142	86	22	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	TELEFÔNICA BRASIL S.A	2 h
🇧🇩160.25.5.60	86	22	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Server Anywhere	2 h
🇺🇸129.121.124.39	86	22	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Oracle Corporation	2 h
🇯🇵132.145.112.250	86	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Oracle Corporation	2 h
🇮🇩180.247.59.235	86	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Telekomunikasi Indonesia (PT…	2 h
🇧🇷191.249.229.125	86	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	TELEFÔNICA BRASIL S.A	2 h
🇲🇽189.143.68.240	86	13	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Uninet S.A. de C.V.	14 h
🇰🇪102.209.76.136	86	12	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	SAFHOME FIBRE LIMITED	12 h
🇮🇩103.46.186.148	85	69	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	PT Air Lintas Komunikasi	2 h
🇦🇩195.178.110.30	85	62	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	TECHOFF SRV LIMITED	2 h
🇨🇳8.138.155.88	85	35	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Hangzhou Alibaba Advertising…	2 h
🇦🇩45.148.10.240	85	35	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control Database Attack HTTP Flood	TECHOFF SRV LIMITED	2 h
🇧🇩45.64.134.75	85	34	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Aamra Networks Limited	2 h
🇺🇸152.32.236.102	85	33	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇨🇳8.138.154.105	85	33	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Hangzhou Alibaba Advertising…	2 h
🇳🇱45.156.128.76	85	32	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	NSEC - Sistemas Informaticos…	2 h
🇪🇹196.189.236.67	85	32	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	EthioNet	2 h
🇭🇰152.32.225.117	85	30	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇳🇱80.82.77.139	85	30	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	IP Volume inc	2 h
🇭🇰119.28.84.193	85	29	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Shenzhen Tencent Computer Sy…	2 h
🇰🇷121.178.185.141	85	29	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Korea Telecom	2 h
🇻🇳103.159.51.70	85	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	NhanHoa Software company	2 h
🇭🇰165.154.40.42	85	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇳🇱2.57.122.150	85	27	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	UNMANAGED LTD	2 h
🇨🇳116.52.252.150	85	27	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Chinanet	2 h
🇭🇰107.150.123.48	85	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇩🇪77.90.185.20	85	26	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Limited Network LTD	2 h
🇨🇲102.244.97.185	85	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Orange Cameroun SA	2 h
🇩🇪165.154.164.24	85	25	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇨🇱186.10.86.130	85	24	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	ENTEL CHILE S.A.	2 h
🇳🇱2.57.122.168	85	24	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	UNMANAGED LTD	2 h
🇻🇳117.6.44.221	85	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	Viettel Group	2 h
🇹🇳197.5.145.102	85	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	SOCIETE NATIONALE DES TELECO…	2 h
🇪🇬41.128.181.199	85	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	LINKdotNET AS number	1 h
🇦🇩193.47.62.69	84	76	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	BestDC Limited	2 h
🇳🇱80.82.77.33	84	34	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	IP Volume inc	2 h
🇨🇳8.134.159.4	84	31	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Hangzhou Alibaba Advertising…	2 h
🇺🇸50.221.56.52	84	29	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Comcast Cable Communications…	2 h
🇨🇳27.29.116.137	84	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Chinanet	2 h
🇳🇱45.156.128.63	84	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	NSEC - Sistemas Informaticos…	2 h
🇳🇱80.94.92.179	84	27	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	UNMANAGED LTD	2 h
🇺🇸38.148.20.75	84	27	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Sumofiber	2 h
🇮🇩163.7.1.156	84	27	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Byteplus Pte. Ltd.	2 h
🇸🇪45.198.224.48	84	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	VPSVAULT.HOST LTD	2 h
🇷🇺77.40.51.90	84	25	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	PJSC Rostelecom	2 h
🇬🇧193.163.125.76	84	24	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Driftnet Ltd	2 h
🇳🇱80.94.92.234	84	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	UNMANAGED LTD	2 h
🇺🇸20.127.185.37	84	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Microsoft Corporation	2 h
🇺🇸64.202.191.109	84	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	GoDaddy.com, LLC	2 h
🇮🇳103.248.120.6	84	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	Precious netcom pvt ltd	2 h
🇳🇱92.118.39.14	84	23	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	UNMANAGED LTD	19 min
🇳🇱20.71.254.235	84	22	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Microsoft Corporation	2 h
🇦🇺65.254.95.164	84	22	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Dreamscape Networks PTY LTD	2 h
🇮🇷2.180.32.104	84	22	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Iran Telecommunication Compa…	2 h
🇻🇳58.186.20.143	84	22	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	FPT Telecom Company	1 h
🇨🇭213.55.171.188	84	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Salt Mobile SA	2 h
🇺🇸129.121.141.21	84	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Oracle Corporation	2 h
🇺🇸50.6.202.204	84	21	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Oracle Corporation	2 h
🇺🇦91.203.6.58	84	21	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control Database Attack HTTP Flood	Ivankov Daniil Eliseevich	2 h
🇺🇸50.6.5.117	84	21	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Oracle Corporation	2 h
🇷🇺91.122.53.183	84	21	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	PJSC Rostelecom	19 min
🇮🇳66.116.224.143	84	20	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Oracle Corporation	2 h
🇺🇸66.132.159.67	84	17	DNS Poisoning Phishing Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Censys, Inc.	2 h
🇦🇩45.148.10.120	83	33	DNS Poisoning FTP Brute-Force Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	TECHOFF SRV LIMITED	2 h
🇨🇳101.200.243.197	83	32	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Hangzhou Alibaba Advertising…	2 h
🇺🇸185.180.141.37	83	31	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Zenlayer Inc	2 h
🇹🇭152.32.247.23	83	30	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇱🇺64.89.160.220	83	30	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Netiface LLC	2 h
🇳🇱85.11.167.72	83	28	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	TechTies Inc.	2 h
🇧🇩103.159.2.113	83	28	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control Database Attack HTTP Flood	Bangladesh Research and Educ…	2 h
🇺🇸185.180.141.32	83	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Zenlayer Inc	2 h
🇩🇪139.19.117.131	83	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Verein zur Foerderung eines…	2 h
🇭🇰165.154.42.209	83	28	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇩🇪139.19.117.130	83	27	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Verein zur Foerderung eines…	2 h
🇺🇸185.180.141.35	83	27	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Zenlayer Inc	2 h
🇺🇸165.154.36.102	83	27	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇻🇳152.32.223.215	83	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇺🇸165.154.173.204	83	26	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h
🇩🇪164.30.17.82	83	26	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	T-Systems International GmbH	2 h
🇨🇳14.17.59.195	83	26	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	Chinanet	2 h
🇭🇰165.154.40.10	83	25	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	UCLOUD INFORMATION TECHNOLOG…	2 h

New today: first reported in the last 24 hours

Addresses that had never been reported before today. New attackers show up here first, often hours before they reach other blocklists.

Address	Score	Reports	Attack types	Network	Last seen
🇺🇸23.238.110.54	65	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	HostPapa	16 h
🇧🇪35.210.173.86	65	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Google Ireland Limited	16 h
🇧🇪35.210.143.149	65	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Google Ireland Limited	16 h
🇦🇷45.173.193.140	65	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	GENERACION WI-FI SA	16 h
🇧🇪35.210.254.127	64	5	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇧🇪35.210.200.212	64	5	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇧🇪35.206.150.39	64	5	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇺🇸165.245.199.76	64	3	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack SSH Command & Control HTTP Flood	DigitalOcean, LLC	11 h
🇺🇸172.212.169.74	63	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	Microsoft Corporation	11 h
🇦🇿216.147.123.14	61	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Space Exploration Technologi…	4 h
🇳🇱62.105.221.83	59	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Matteo Martelloni trading as…	14 h
🇮🇱20.217.186.29	57	4	FTP Brute-Force Web Spam Port Scan Hacking Brute-Force Bad Web Bot Credential Stuffing Vulnerability Scan	Microsoft Corporation	16 h
🇧🇪35.206.147.122	57	4	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇺🇸139.144.210.235	57	3	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack SSH Command & Control HTTP Flood	Akamai Technologies, Inc.	4 h
🇹🇼1.162.226.183	55	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Chunghwa Telecom Co., Ltd.	10 h
🇧🇪35.210.122.110	55	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Google Ireland Limited	16 h
🇺🇸31.97.148.8	55	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Hostinger International Limi…	16 h
🇮🇳72.61.235.248	55	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Hostinger International Limi…	16 h
🇩🇪38.242.136.215	55	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	Contabo GmbH	16 h
🇧🇪35.210.191.123	54	4	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	10 h
🇧🇪35.210.172.21	54	4	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	10 h
🇧🇷34.39.187.33	53	4	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h
🇺🇸34.138.234.7	53	4	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h
🇧🇪35.210.43.95	53	4	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇺🇸34.24.103.231	53	4	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h
🇨🇳113.205.178.5	53	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	CHINA UNICOM China169 Backbo…	14 h
🇳🇱194.87.191.237	53	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Baykov Ilya Sergeevich	14 h
🇯🇵166.88.98.181	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Evoxt Sdn. Bhd.	20 h
🇮🇳103.118.17.59	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	WHG Hosting Services Ltd	20 h
🇲🇽201.171.224.217	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Uninet S.A. de C.V.	20 h
🇰🇷158.247.246.103	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	The Constant Company, LLC	20 h
🇺🇸108.165.95.10	53	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Nodestop LLC	14 h
🇻🇳116.110.216.55	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Viettel Corporation	20 h
🇻🇳103.164.35.51	53	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	U14b-16a, 22 street, Tan Thu…	20 h
🇧🇪35.206.143.6	52	4	FTP Brute-Force Phishing Open Proxy Web Spam Email Spam Port Scan Hacking Spoofing Brute-Force Bad Web Bot Web App Attack Mail Server Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇵🇱83.168.72.203	52	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Korbank S. A.	14 h
🇫🇷37.70.194.12	52	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Societe Francaise Du Radiote…	14 h
🇲🇽189.143.64.0	52	2	Brute-Force SSH	Uninet S.A. de C.V.	14 h
🇦🇪20.46.43.126	51	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	Microsoft Corporation	16 h
🇳🇱158.173.21.40	51	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Datacamp Limited	14 h
🇨🇳123.139.221.105	50	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	CHINA UNICOM China169 Backbo…	4 h
🇺🇸150.136.229.116	50	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	Oracle Corporation	10 h
🇭🇰47.86.21.51	49	4	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Mail Server Attack Vulnerability Scan	Alibaba (US) Technology Co.,…	16 h
🇨🇳106.59.139.202	49	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	Chinanet	16 h
🇮🇳171.76.110.121	49	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	Bharti Airtel Limited	16 h
🇩🇪169.58.64.240	49	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	Contabo GmbH	16 h
🇺🇸160.153.186.103	49	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	GoDaddy.com, LLC	16 h
🇭🇰124.156.138.242	49	3	Web Spam Port Scan Bad Web Bot Web App Attack SSH Command & Control	Shenzhen Tencent Computer Sy…	16 h
🇩🇪64.89.163.191	48	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Path Traversal / LFI Remote Code Execution Vulnerability Scan	Netiface America, Inc.	12 h
🇧🇪207.175.105.129	48	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h
🇨🇳121.14.2.49	48	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	Chinanet	2 h
🇨🇳220.250.10.225	47	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	CHINA UNICOM China169 Backbo…	20 h
🇨🇳112.94.252.76	47	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	China Unicom Guangzhou netwo…	20 h
🇬🇧162.219.30.251	47	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	DataWagon LLC	16 h
🇨🇳60.166.83.50	46	3	FTP Brute-Force Phishing Open Proxy Web Spam Hacking Brute-Force Web App Attack Vulnerability Scan Command & Control HTTP Flood	Chinanet	14 h
🇧🇪35.206.135.88	46	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	8 h
🇨🇳60.166.83.220	46	3	FTP Brute-Force Phishing Open Proxy Web Spam Hacking Brute-Force Web App Attack Vulnerability Scan Command & Control HTTP Flood	Chinanet	14 h
🇧🇪35.210.229.50	46	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	8 h
🇲🇩91.233.172.249	46	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	NEAPOL GROUP LLC	14 h
🇨🇳222.95.28.32	46	2	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Chinanet	14 h
🇨🇳182.128.98.106	46	2	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	Chinanet	14 h
🇷🇺37.195.139.136	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Novotelecom Ltd	16 h
🇺🇸45.33.88.173	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Akamai Technologies, Inc.	16 h
🇧🇪35.210.44.49	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	16 h
🇩🇰188.126.94.230	45	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	GleSYS AB	16 h
🇸🇬3.0.35.99	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Amazon.com, Inc.	16 h
🇫🇷51.75.17.8	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	OVH SAS	16 h
🇫🇷141.94.3.81	45	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	OVH SAS	16 h
🇫🇷5.51.6.56	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Bouygues Telecom SA	16 h
🇧🇪35.210.54.75	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	16 h
🇮🇩31.97.110.127	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hostinger International Limi…	16 h
🇫🇷46.202.173.108	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hostinger International Limi…	16 h
🇻🇳14.225.218.189	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	VIETNAM POSTS AND TELECOMMUN…	16 h
🇧🇪35.210.45.130	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	16 h
🇧🇬91.92.137.182	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Belcloud LTD	16 h
🇳🇱85.137.18.132	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Redcluster LTD	16 h
🇧🇷85.31.62.130	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hostinger International Limi…	16 h
🇳🇱85.137.18.106	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Redcluster LTD	16 h
🇳🇱85.137.18.129	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Redcluster LTD	16 h
🇧🇪35.210.10.117	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Google Ireland Limited	16 h
🇲🇾72.62.195.194	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hostinger International Limi…	16 h
🇲🇾72.62.198.56	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hostinger International Limi…	16 h
🇺🇸71.6.241.122	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	CariNet, Inc.	16 h
🇺🇸71.77.166.114	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Charter Communications Inc	16 h
🇺🇸71.6.245.151	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	CariNet, Inc.	16 h
🇩🇰90.184.139.90	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Hiper A/S	16 h
🇨🇳49.232.90.164	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Shenzhen Tencent Computer Sy…	16 h
🇨🇳58.250.251.177	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	China Unicom Shenzen network	16 h
🇺🇸66.223.49.167	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Epik LLC	16 h
🇮🇪80.233.42.129	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Three Ireland (Hutchison) li…	16 h
🇨🇭45.12.222.165	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	M247 Europe SRL	16 h
🇺🇸45.32.74.107	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	The Constant Company, LLC	16 h
🇺🇦46.201.175.152	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	JSC "Ukrtelecom"	16 h
🇳🇱85.137.18.127	45	3	Web Spam Port Scan Hacking Bad Web Bot SSH Vulnerability Scan	Redcluster LTD	16 h
🇷🇺31.129.194.145	44	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	OTS Ltd.	14 h
🇦🇺35.244.64.184	44	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h
🇺🇸31.1.107.113	44	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Amazon.com, Inc.	14 h
🇵🇱31.60.45.149	44	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Orange Polska Spolka Akcyjna	14 h
🇧🇪35.206.153.174	44	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	Google Ireland Limited	14 h
🇬🇧35.246.25.245	44	3	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Google LLC	14 h

Download the full list

This page shows the top 100. The IP blacklist has every address with a score of 75 or more, ready for your firewall, in nine formats:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

Looking for one address? Check it, or see attackers by country, network and attack type.

Questions

What makes an IP address malicious?

It was reported by people who run servers for attacking them: SSH or RDP password guessing, web exploits, scanning, spam or DDoS. The confidence score (0 to 100) grows with the number of independent reporters in the last 30 days and fades when the reports stop.

How often is this list updated?

Every hour. Each address also has its own page that updates with every new report.

Can I download the full list?

Yes. The blocklist has every address with a score of 75 or more, in text, CSV, JSON, STIX and firewall formats. It needs a free API key; see the IP blacklist page.

Should I block every address here?

Addresses with a score of 75 or more were reported by several independent people recently and are safe to block for most services. Lower scores are better used to add friction, such as a captcha, than to block outright.