OSN

Blocklists

Blocklisted networks and addresses

As of 2026-10-09, current public blocklists hold 79 213 entries in public address space, covering 15 004 915 addresses.

Public blocklists name addresses and networks that attacked others, served malware, ran botnet servers, or are hijacked. An entry is not proof of wrongdoing, and lists change by the hour. Private, reserved and unallocated space is left out.

Summary

79 213list entries
15 004 915addresses covered

Counted 2026-10-09 16:20 UTC

By category

CategoryNetworks / addresses listedAddresses covered
aggregated attack lists31 530100%1 345 246
attack source24 81678%24 816
scanning, poor reputation15 41448%20 514
botnet command and control2 4217%2 421
hijacked or criminal network1 7625%14 896 219
malware distribution1 4704%1 470

By list

ListNetworks / addresses listedAddresses covered
reported attack sources (48 h)24 658100%24 658
aggregated attack lists (level 2)19 16777%35 094
addresses with poor reputation on a sensor network15 00060%15 000
aggregated attack lists (level 3)12 08649%33 707
malware command-and-control endpoints2 4199%2 419
hijacked or criminal-operated networks (do-not-route list)1 7627%14 896 219
hosts serving malware downloads1 4675%1 467
aggregated attack lists (level 1)8113%1 291 777
top attacking addresses5002%500
persistent attack sources (> 2 months)3811%381
top attacking /24 networks (3 days)201%5 120
botnet command-and-control servers51%5

Networks with the most listed entries

NetworkNetworks / addresses listedAddresses covered
Google LLC AS3969823 095100%5 437
Alibaba (US) Technology Co., Ltd. AS451022 89093%2 916
Hydra Communications Ltd AS253692 52781%5 564
Microsoft Corporation AS80752 34875%2 922
JSC "ER-Telecom Holding" AS570262 05066%4 097
Leaseweb USA, Inc. AS3961902 04966%4 096
OVH SAS AS162761 92862%2 380
DigitalOcean, LLC AS140611 86160%1 862
No.31,Jin-rong Street AS41341 22639%4 561
CHINA UNICOM China169 Backbone AS48371 09735%1 107
Akamai Connected Cloud AS6394992329%1 279
Korea Telecom AS476686127%1 121
Cisco Webex LLC AS1344577124%1 536
Leaseweb USA, Inc. AS39438077124%2 560
Cox Communications Inc. AS2277367121%703
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED AS13537765921%8 854
Petersburg Internet Network ltd. AS3466551816%1 284
Amazon.com, Inc. AS1461851516%777
Beamspeed LLC AS1423751416%1 024
Hangzhou Alibaba Advertising Co.,Ltd. AS3796348915%489
Amazon.com, Inc. AS1650942413%25 104
Hurricane Electric LLC AS693940012%2 494
ONYPHE SAS AS21341239712%1 433
Bharti Airtel Ltd., Telemedia Services AS2456033310%333
TechTies Inc. AS19717032210%3 641
Reliance Jio Infocomm Limited AS558363069%306
Shenzhen Tencent Computer Systems Company Limited AS450902979%297
Zenlayer Inc AS218592909%5 199
F.N.S. HOLDINGS LIMITED AS2060922879%365
"Kyivstar" PJSC AS158952598%514
4830.org e. V. AS2068132578%512
Contabo GmbH AS511672568%257
Megasurf Wireless Internet CC AS3279912347%235
Oracle Corporation AS318982307%230
Claro NXT Telecomunicacoes Ltda AS285732257%225
China Mobile Communications Group Co., Ltd. AS98082207%222
Datacamp Limited AS2122381876%1 975
BHARTI Airtel Ltd. AS94981876%190
Tencent Building, Kejizhongyi Avenue AS1322031866%186
M247 Europe SRL AS90091795%34 734
Censys, Inc. AS3983241765%1 211
AO ALMAZ AS2103281745%570
BANATSYNC SRL AS1983641705%765
Beijing Baidu Netcom Science and Technology Co., Ltd. AS383651665%166
Sistemas Informaticos, S.A. AS2116801605%675
National Internet Backbone AS98291544%154
Byteplus Pte. Ltd. AS1504361514%152
China Telecom (Group) AS48111494%155
Cyber Internet Services (Pvt) Ltd. AS95411484%150
Beijing Volcano Engine Technology Co., Ltd. AS1377181444%73 870

Countries (where the networks are registered)

CountryNetworks / addresses listedAddresses covered
China CN5 134100%5 440 734
Russia RU3 23663%86 395
Australia AU3 11860%1 292 051
United Kingdom GB3 02558%684 925
India IN2 17342%84 602
United States US2 08840%74 148
Brazil BR1 94037%6 804
Germany DE1 81735%236 288
Netherlands NL1 49429%90 904
Singapore SG1 12721%24 708
South Korea KR1 10321%155 979
Indonesia ID1 04520%27 662
France FR91617%137 900
Hong Kong HK72814%123 542
Ukraine UA58411%8 246
Pakistan PK5109%1 038
Vietnam VN4849%92 901
South Africa ZA3937%879 989
Italy IT3406%86 096
Mexico MX3286%105 276
Bangladesh BD3025%2 884
EU2915%2 079
Argentina AR2885%800
Japan JP2815%961 740
Philippines PH2805%2 070
Finland FI2635%1 424
Taiwan TW2474%11 260
Poland PL2444%2 031
Sweden SE2274%66 273
Türkiye TR2043%2 261
Thailand TH1883%141 753
Spain ES1853%6 060
Malaysia MY1803%72 357
Colombia CO1783%184
Bulgaria BG1332%2 941
Iran IR1312%11 130
United Arab Emirates AE1302%1 663
Egypt EG1021%102
Nigeria NG941%100 691
Ghana GH891%89
Iraq IQ881%88
Chile CL861%131 411
Seychelles SC841%403 767
Israel IL801%83
Andorra AD771%1 100
Romania RO751%6 715
Kazakhstan KZ711%837
Slovenia SI671%1 605
Ecuador EC651%70
Switzerland CH631%262 714

Examples

A few current entries per category; each address page says which lists name it and since when.

EntryCategoryNetwork
2001:678:6c0::/48hijacked or criminal networkKP "CLUB NADIYA" AS202388
2001:678:6c4::/48hijacked or criminal networkEL.K.STIL LLC AS202383
2001:678:254::/48hijacked or criminal networkSTAT CONSULTING LTD AS201824
2001:678:11b8::/48hijacked or criminal networkSTART BUILDING LTD AS200671
1.92.101.221malware distributionHuawei Cloud Service data center AS55990
1.92.136.152malware distributionHuawei Cloud Service data center AS55990
1.94.221.183malware distributionHuawei Cloud Service data center AS55990
1.12.229.231aggregated attack listsShenzhen Tencent Computer Systems Company Limited AS45090
1.12.48.131aggregated attack listsShenzhen Tencent Computer Systems Company Limited AS45090
1.12.55.42aggregated attack listsShenzhen Tencent Computer Systems Company Limited AS45090
1.14.192.95attack sourceShenzhen Tencent Computer Systems Company Limited AS45090
1.14.240.247attack sourceShenzhen Tencent Computer Systems Company Limited AS45090
1.117.73.61botnet command and controlShenzhen Tencent Computer Systems Company Limited AS45090
1.12.253.219botnet command and controlShenzhen Tencent Computer Systems Company Limited AS45090
1.14.104.208botnet command and controlShenzhen Tencent Computer Systems Company Limited AS45090
1.14.234.68botnet command and controlShenzhen Tencent Computer Systems Company Limited AS45090
1.14.76.111botnet command and controlShenzhen Tencent Computer Systems Company Limited AS45090
1.12.229.231scanning, poor reputationShenzhen Tencent Computer Systems Company Limited AS45090
1.13.156.8scanning, poor reputationShenzhen Tencent Computer Systems Company Limited AS45090
1.15.14.29scanning, poor reputationShenzhen Tencent Computer Systems Company Limited AS45090
1.0.164.165aggregated attack listsTOT Public Company Limited AS23969
1.10.206.21aggregated attack listsTOT Public Company Limited AS23969
1.0.164.165attack sourceTOT Public Company Limited AS23969
1.0.243.191attack sourceTOT Public Company Limited AS23969
1.10.206.21scanning, poor reputationTOT Public Company Limited AS23969
1.57.109.163malware distributionCHINA UNICOM China169 Backbone AS4837
1.62.112.38malware distributionCHINA UNICOM China169 Backbone AS4837
1.192.129.106scanning, poor reputationNo.31,Jin-rong Street AS4134
1.145.25.235attack sourceTelstra Limited AS1221
2001:43f8:a21::/48hijacked or criminal network—

Tag: blocklisted · Tag: botnet C2 · Reserved ranges