Cloud and hosting infrastructure ranges — not residential ISPs — account for most entries on public IP blacklists, primarily due to spam, proxy abuse, and automated traffic. This page ranks the 30 IP ranges and ASNs most frequently observed across public blacklist datasets.
At-a-Glance Highlights
- Cloud and hosting infrastructure shows up on blacklists way more than anything else.
- Spam, proxy abuse, and automated traffic are the usual suspects.
- We grouped the data by IP range and ASN, so you won't find individual IPs here.
How This Data Was Compiled
We pulled this dataset from multiple public IP reputation and DNS blacklists. Then we grouped everything by IP range and ASN to spot patterns in how often different providers and regions show up on these lists.
The frequency numbers are kept simple-just High, Medium, or Low-so you're not reading too much into raw counts. It's a more honest way to use the data.
Top 30 Most Frequently Observed Blocked IP Ranges
Table note: IP ranges are grouped by what kind of infrastructure they are and where they're located. The numbers are ballpark figures and meant for comparing one range to another, nothing more.
| Rank | IP Range | ASN | Provider | Primary Category | Relative Frequency |
|---|---|---|---|---|---|
| Large Cloud & Global Hosting | |||||
| 1 | 45.0.0.0/8 | AS38136 | Alibaba Cloud | Spam / Proxy | High |
| 2 | 104.16.0.0/12 | AS13335 | Cloudflare | Mixed / Proxy | High |
| 3 | 185.0.0.0/8 | Multiple | Hosting Providers | Spam | High |
| 4 | 103.0.0.0/8 | Multiple | APAC Hosting | Spam | High |
| 5 | 37.0.0.0/8 | Multiple | EU Hosting | Abuse | High |
| Regional & Data Center Ranges | |||||
| 6 | 196.0.0.0/8 | Multiple | Africa ISP Ranges | Spam | Medium |
| 7 | 5.0.0.0/8 | Multiple | EU ISPs | Spam | Medium |
| 8 | 31.0.0.0/8 | Multiple | EU Broadband | Botnet | Medium |
| 9 | 41.0.0.0/8 | Multiple | Africa ISPs | Spam | Medium |
| 10 | 58.0.0.0/8 | Multiple | APAC ISPs | Spam | Medium |
| Smaller Hosting & Emerging Networks | |||||
| 11 | 77.0.0.0/8 | Multiple | EU Hosting | Abuse | Medium |
| 12 | 91.0.0.0/8 | Multiple | EU Hosting | Spam | Medium |
| 13 | 92.0.0.0/8 | Multiple | EU ISPs | Spam | Medium |
| 14 | 94.0.0.0/8 | Multiple | EU ISPs | Spam | Medium |
| 15 | 95.0.0.0/8 | Multiple | EU ISPs | Spam | Medium |
| Lower Frequency Observations | |||||
| 16 | 101.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 17 | 102.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 18 | 105.0.0.0/8 | Multiple | APAC Hosting | Spam | Low |
| 19 | 109.0.0.0/8 | Multiple | EU Hosting | Abuse | Low |
| 20 | 110.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| Additional Notable Ranges | |||||
| 21 | 112.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 22 | 113.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 23 | 114.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 24 | 115.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 25 | 116.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 26 | 117.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 27 | 118.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 28 | 119.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 29 | 120.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
| 30 | 121.0.0.0/8 | Multiple | APAC ISPs | Spam | Low |
Download the full dataset (CSV)
Check a Specific IP Address
This page only shows you the big picture. If you want to check whether a specific IP is actually on blacklists right now, head over to the MyIPNow IP blacklist checker.
Methodology & Limitations
This data comes from publicly available DNSBL and IP reputation databases. We're not publishing individual IP addresses or anything users submitted. The frequency numbers just show which ranges show up most often, not who's doing what or why.