# List of "Forbidden" IP addresses and CIDRs

# This is a list of forbidden IP addresses (99.9%) and CIDRs (0.1%) used in
# phishing attacks. We won't resolve these hostnames to their embedded IP
# address.

# For example, if the address 11.22.33.44 appears in this list, we won't resolve
# "11.22.33.44.sslip.io" to 11.22.33.44; instead, we'll resolve it to our
# special webserver blocked.sslip.io's IP addresses, 64.176.22.9 or
# 2001:19f0:c800:2315::.

# Similarly, we won't resolve nf-43-134-66-67.sslip.io to 43.134.66.67 because it
# falls within one of our blocked CIDRs (43.134.66.67/24).

# File format: blank lines are ignored, "#" are comments and are ignored. One IP
# address or CIDR per line.

101.32.189.230 # TikTok
101.99.90.126 # Amazon
103.161.184.149 # UNFPA
103.212.136.235 # WhatsApp
103.231.75.79 # pcgamesn.com
103.252.116.60 # malware distribution
103.35.191.94 # ctx.io
103.49.131.187 # FlipKart Plus
103.75.196.193 # ymca.int
103.75.196.210 # soft98.ir
103.75.199.234 # freepik.com
103.75.199.39 # lbry.org
103.75.199.87 # arachemishop.com
103.82.195.192 # TikTok
104.156.225.37 # forums.prsguitars.com
104.167.215.178 # now.gg
104.168.101.22 # Wells Fargo
104.168.54.193 # certbot.eff.org
104.168.68.225 # beparsi.com
104.168.88.39 # bing.com
104.194.128.126 # durva.ir
104.207.66.109 # OP Financial Group
104.207.70.204 # מנהרות הכרמל — חיפוש חשבוניות
104.207.75.139 # TikTok / CapCut
104.207.89.219 # Microsoft
104.233.194.10 # TikTok
104.234.11.35 # camspark.com
104.234.196.206 # blizzard.com
104.234.196.242 # unfpa.org
104.234.46.217 # ted.com
104.244.78.172 # 9gag.com
104.245.12.38 # mastodon.sdf.org
104.248.130.5 # dabrni.com
104.248.156.203 # boyernews.com
104.248.31.5 # 47segundos.com
104.248.41.59 # app.teslacrypto.me
104.248.92.238 # esebari.it
104.36.84.146 # Vortex
104.36.84.18 # .git is visible
104.36.84.31 # microsoft.com
107.172.167.252 # doctorswithoutborders.org
107.172.32.185 # arabnews.com
107.174.102.113 # getsharex.com
107.174.172.254 # foreignpolicy.com
107.174.228.87 # Apple Store
107.174.63.163 # visitdubai.com
107.174.92.107 # privacytools.io
107.175.183.191 # four-paws.org
107.175.222.54 # download.ir
107.189.16.42 # muckrock.com
107.189.22.178 # TD Bank / TD Easy Web
107.189.25.197 # Interac
107.189.5.14 # amazon.co.jp
108.165.128.113 # concern.net
108.174.155.6 # Investec
108.59.199.190 # stthomasaquinassociety.org
108.61.171.127 # ple.com.au
108.61.198.77 # download.cnet.com
108.61.209.64 # knowyourmeme.com
108.61.250.169 # Trust Wallet
109.107.165.182 # uncaccoalition.org
109.120.139.210 # slack.com
109.120.156.173 # arabnews.com
109.120.157.43 # doctorswithoutborders.org
109.120.176.184 # arabnews.com
109.120.187.71 # now.org
109.120.188.67 # dppo.pro
109.172.80.235 # slate.com
109.176.198.98 # beparsi.com
109.205.181.138 # Bancolombia
109.61.95.86 # wickr.com
111.68.15.82 # Cloudflare
113.105.100.25 # China Telecom, has told us that public DNS queries...
113.30.191.120 # arxiv.org
115.190.235.48 # China domain compliance
116.202.111.124 # mega.io
116.202.15.101 # nextpit.com
116.202.8.64 # geschichtsdramaturgie.de
116.203.192.213 # inspavo.com
116.203.196.37 # speeddater.co.uk
116.203.23.38 # slack.com
118.107.59.218 # TikTok
124.156.207.253 # terredeshommes.nl
124.156.6.174 # lalgbtcenter.org
128.140.10.175 # alea-italia.it
128.140.109.240 # Notion
128.140.13.221 # buyrealfollows.com
128.140.15.52 # account4web.com
128.140.36.89 # elbapit.it
128.140.39.65 # dia.mil
128.140.52.186 # apple.com
128.140.56.172 # n4g.com
128.140.77.135 # n4g.com
128.140.8.187 # phone.com
128.140.85.249 # zibastyler.com
128.140.89.200 # junior-report.media
128.140.92.102 # chinasentry.com
128.140.97.90 # kff.org
129.121.113.18 # Costco
129.121.114.197 # Costco
129.151.147.169 # terredeshommes.org
129.225.88.25 # Universal Navigation Inc. (DBA “Uniswap Labs”)
129.80.218.5 # actionaid.org
13.140.150.177 # Bank al Etihad
13.140.225.108 # IAC Inc health.com
13.159.98.193 # Amazon
13.205.89.0 # React CVE-2025-55182
13.209.188.54 # mediamba.ssu.ac.kr
13.233.15.116 # malicious Android
13.235.0.237 # eduloanzm.com
13.36.237.118 # GitHub
13.49.239.35 # citylife.az
13.51.233.237 # Netflix
13.63.172.241 # Costco
13.68.154.26 # Costco
13.80.65.209 # last.fm
132.145.49.90 # tradingview.com
132.145.89.187 # oneworld.net
133.242.233.224 # Aeon Card
134.122.66.162 # flymizar.com
134.122.75.15 # bathelalnada.com
134.209.181.141 # bluehedgerelocators.com
134.209.185.94 # thestar.com
134.209.190.61 # thestar.com
134.209.228.38 # afilmywap.org.tw
134.209.31.184 # gallerina-egypt.com
135.148.113.128 # support.mozilla.org
135.181.109.197 # projectveritas.com
135.181.157.72 # waqfeya.net
135.181.197.31 # brothersroad.org
135.181.28.176 # marinetraffic.pro
135.181.30.103 # meduza.io
135.181.37.8 # cesr.org
135.181.89.225 # foodpix.ai
135.237.45.132 # coinbase
136.0.10.117 # Apple Online Store
136.243.60.98 # malware
136.244.69.219 # MEO
136.244.84.246 # ilo.org
136.244.84.68 # pirateparty.org.au
137.184.224.51 # ford-market.com.ua
137.184.226.70 # blogease.co
137.220.157.25 # TikTok
138.124.103.200 # Apple
138.124.54.253 # Fragment (Telegram Messenger)
138.197.128.25 # phoenixagritech.com
138.197.183.135 # actionaid.org
138.68.138.112 # thestar.com
138.68.180.24 # thestar.com
138.68.77.97 # laborrights.org
139.144.97.232 # dtdcaustralia.com.au
139.180.132.86 # Apple
139.180.155.59 # various Japanese banks
139.198.158.74 # @yongzhi-weee: not obtain/acquiring a ICP license
139.28.232.233 # khabarcanada.ca
139.59.176.152 # thestar.com
139.59.20.162 # artgram.co
139.59.34.114 # myawady.net.mm
139.59.58.64 # Scotiabank
139.59.6.237 # gadgetsnow.com
139.59.88.201 # lbry.com
139.84.167.74 # delta.chat
139.84.171.117 # lgbtqnation.com
140.238.3.112 # usatoday.com
140.82.39.13 # ekonomiveyatirim.com
141.11.1.41 # Fraudulent ssh logins
141.11.107.70 # Apple
141.11.107.89 # linphone.org
141.11.246.231 # un.org
141.11.96.34 # nytimes.com
141.133.174.33 # Orca
141.136.44.156 # VZ VermöGenszentrum
141.144.204.180 # opendns.com
141.227.128.238 # UNFPA
141.94.173.106 # cvut.cz
141.94.2.52 # defcad.com
141.95.103.173 # rebellion.global
141.98.119.198 # gnupg.org
141.98.210.133 # mastodon.xyz
141.98.235.244 # Slack
142.171.230.151 # whatsoproudlywehail.org
142.171.230.250 # lanacion.com.ar
142.171.81.119 # aljazeera.net
142.4.38.74 # Trust Wallet
142.93.161.236 # landmarkproductions.live
142.93.207.151 # Microsoft
142.93.238.38 # almanar.com.lb
142.93.46.4 # thestar.com
143.42.19.49 # gutschein724.de
144.126.145.43 # parsine.com
144.172.101.220 # Interac
144.172.115.128 # Interac
144.172.115.99 # Interac
144.172.94.210 # Interac
144.202.10.114 # deerhunterforum.com
144.217.18.111 # wickr.com
144.24.3.30 # React CVE-2025-55182
144.24.57.205 # "Your version of Ghost is vulnerable to a critical SQL injection vulnerability"
144.24.58.105 # SQL injection vulnerability in Ghost (CVE-2026-26980)
144.31.14.212 # Slack
144.31.234.53 # Fox News
144.31.247.106 # Slack
144.31.79.72 # Microsoft
145.239.54.184 # witness.org
145.241.118.82 # React CVE-2025-55182
145.79.12.16 # Jennison Associates LLC amg.com
146.103.121.162 # TikTok
146.103.41.40 # amazon
146.19.247.75 # slate.com
146.19.75.114 # ashfootwear.co.uk
146.19.75.3 # slate.com
146.190.18.201 # nytimes.com
146.190.88.137 # rama168.co
146.235.246.49 # WhatsApp
146.59.192.162 # privacytools.io
146.70.157.96 # slack.com
147.189.131.181 # coolmathgames.com
147.45.43.91 # oca.org
147.45.78.152 # tails.net
147.78.1.232 # FC Lorient - AS Monaco -- Ligue 1 / Canal+ International
148.113.223.167 # LinkedIn
148.113.242.140 # Care Above All Else
148.113.3.154 # tacticaltech.org
148.253.215.107 # Slack
149.104.107.155 # EBSA (?)
149.104.107.220 # EBSA (?)
149.248.15.223 # abc13.com
15.204.89.177 # boursemrooz.com
15.235.184.26 # byond
15.235.207.99 # ghost.org
15.235.86.211 # Wells Fargo
151.243.190.72 # Robinhood
151.244.30.56 # Tasheel Finance
151.245.163.92 # Fox News
151.247.22.39 # Nordic Financial CERT
151.80.106.167 # rg.ru
152.228.134.77 # TradingView
152.239.112.102 # coinbase
152.42.129.213 # React CVE-2025-55182
152.42.142.21 # tacticaltech.org
152.42.188.133 # nu.or.id
152.42.226.149 # witness.org
152.53.47.35 # theintercept.com
152.70.94.211 # muckrock.com
154.12.61.243 # tvb.com
154.13.7.222 # TikTok shop
154.16.16.103 # doctorswithoutborders.org
154.205.130.176 # climaterealityproject.org
154.205.148.163 # UNFPA
154.44.9.56 # Adobe
154.64.251.131 # panties.com
154.90.54.178 # khanacademy.org
156.255.1.134 # download.cnet.com
157.173.125.142 # Apple
157.245.96.129 # atomapi.in
157.90.149.110 # beyondexgay.com
157.90.245.228 # sputnikglobe.com
157.90.28.252 # fruitcraft.co
158.160.32.235 # atomyze.ru
158.178.229.68 # usatoday.com
158.247.223.122 # Some Japanese site
158.69.116.36 # Yatırım Finansman
159.195.17.180 # Orca
159.195.69.114 # React CVE-2025-55182
159.198.47.54 # TikTok
159.223.3.6 # oratie.com
159.65.122.63 # upgrade.rs
159.69.122.252 # junior-report.media
159.69.150.196 # undp.org
159.69.202.38 # kastanienhof-lemgo.de
159.69.35.159 # defcad.com
159.69.53.79 # zapalean.com
159.89.104.113 # ilo.org
159.89.232.65 # Raccoon Labs Pte Ltd.
161.35.74.213 # cs-app.xyz
162.210.96.129 # microsoft 365
162.243.216.143 # TikTok
162.33.177.74 # Paperless Post
162.55.21.181 # khamenei.ir
163.245.209.194 # Huntington National Bank huntington.com
164.132.76.71 # Crédit Agricole
164.90.187.137 # ekoyapidergisi.org
164.90.211.63 # drudgereport.com
164.90.223.13 # gadgetsnow.com
164.90.229.173 # chirurgie-delitzsch.de
164.90.238.192 # schnauzerminiaturadelagonal.com
164.92.136.56 # tommymyllymaki.se
164.92.139.32 # palmy-investing.com
164.92.168.210 # fysm.co
164.92.172.100 # slate.com
164.92.225.172 # mp4moviez.legal
165.22.1.235 # Microsoft
165.22.18.3 # musicema.com
165.22.206.116 # Endesa, Enel S.p.A., Enel Group
165.22.26.12 # ilo.org
165.227.133.84 # king.com
165.227.145.52 # credibilitycoalition.org
165.227.148.243 # foodizone.net
165.227.225.17 # thestar.com
165.232.110.168 # Bank al Etihad
165.245.153.53 # React CVE-2025-55182
167.114.90.232 # okala.com
167.172.150.42 # mercari (Japanese)
167.172.212.184 # Coinbase
167.233.126.230 # TradingView Inc. tradingview.com
167.233.59.205 # Raiffeisen Bank
167.234.213.68 # brew.sh
167.235.128.251 # spotmyenergy.com
167.235.149.231 # templatemo.com
167.235.157.229 # aljazeera.com
167.235.158.56 # ai-techfusion.com
167.235.18.77 # smtb.io
167.235.29.143 # blog.denic.de
167.235.65.210 # merriam-webster.com
167.71.134.82 # thestar.com
167.86.96.35 # Etsy
167.88.162.29 # Bank of America
167.88.164.90 # North Yorkshire Council notification
167.99.110.33 # coinbase
167.99.201.224 # TikTok
167.99.214.34 # Libertex
168.119.121.187 # proton.me
168.119.160.60 # akharinnews.com
168.119.185.233 # wsj.com
168.119.94.3 # pcgamesn.com
168.144.189.54 # Scotiabank
168.222.97.149 # Tasheel
168.222.97.171 # Tasheel
168.231.113.180 # n8n
169.255.57.46 # JPMorgan Chase
169.58.175.111 # Bancolombia
169.58.181.213 # epayco (?)
169.58.206.212 # Bancolombia
169.58.217.109 # Bancolombia
169.58.232.34 # Bancolombia
169.58.236.15 # "collecting personal and sensitive information about children and vulnerable families in the Gaza Strip"
169.58.249.21 # TikTok
169.58.54.165 # Suez Canal Bank https://scbank.com.eg/
170.64.134.93 # clarenicholson.com
170.64.140.55 # waihekecarrental.co.nz
170.64.170.123 # daronmont.com.au
170.65.0.0/16 # TTEC
172.104.203.95 # unfpa.org
172.105.107.43 # bestchildrensdentistsudbury.ca
172.176.253.0 # Costco
172.182.204.23 # JPMorgan Chase
172.188.114.154 # jahannews.com
172.232.142.143 # f-droid.org
172.232.146.24 # unfpa.org
172.232.148.63 # aljazeera.net
172.232.159.186 # epa.gov
172.233.47.114 # doctorswithoutborders.org
172.234.99.74 # ente.io
172.86.105.216 # thecafemeow.com
172.86.106.182 # nypost.com
172.86.110.55 # telsur
172.86.117.50 # Banque Nationale
172.86.65.133 # lbry.com
172.86.70.223 # sfsi.org
172.86.74.137 # UNFPA
172.86.77.127 # laco.org
172.86.77.42 # f-droid.org
172.86.88.198 # HSBC & other banks
172.93.185.171 # ectaco.com
172.96.191.241 # betflik5.info
173.212.208.59 # Microsoft
173.212.212.74 # OKEx
173.212.236.59 # Bancolombia
173.212.243.5 # Bancolombia
173.231.200.13 # Costco
173.231.229.189 # OPTUS
174.138.15.168 # thecatsite.com
174.138.27.137 # denniswu.com
174.138.39.196 # "Connect Wallet"
176.105.255.204 # businesstoday.in
176.120.64.60 # engenderhealth.org
176.123.1.51 # bendodson.com
176.124.220.184 # arabnews.com
176.124.221.172 # arabnews.com
176.222.52.130 # websplosion.com
176.222.53.110 # freepik.com
176.222.55.49 # slate.com
176.58.111.183 # this-person-does-not-exist.com
178.104.90.18 # kraken.com
178.105.215.186 # BetKing
178.105.92.231 # Instagram
178.128.194.220 # uisp.com
178.128.253.192 # aljazeera.net
178.128.38.7 # gitlab-staging.riders.ai
178.20.47.52 # arriyadiyah.com
178.236.246.214 # madmaxworld.tv
178.32.224.219 # superuser.com
178.62.196.150 # aljazeera.net
178.62.79.170 # pcgamesn.com
178.73.210.233 # aljazeera.com
178.79.142.33 # aljazeera.net
178.95.176.51 # DHL
178.95.176.52 # DHL
179.43.140.198 # Allica Bank
179.43.175.10 # Revolut
179.61.249.10 # csmonitor.com
18.184.57.83 # shenoto.com
18.216.136.92 # Bancolombia
18.218.70.131 # nuevoleon.travel
18.219.211.22 # velhaestancia.com.br
18.223.143.133 # Kraken
180.184.49.234 # Alibaba
180.93.127.141 # Operating Shopee
181.214.208.102 # telegram
184.174.96.189 # mozilla.org
185.106.94.156 # indiatimes.com
185.113.223.164 # mstdn.jp
185.140.12.132 # telegram
185.146.234.250 # Robinhood Markets, Inc.
185.158.251.213 # A Phishing Command & Control Panel is an online interface used to set up, distribute, and receive stolen information from phishing campaigns.
185.17.136.135 # ebaumsworld.com
185.17.136.39 # ebaumsworld.com
185.171.26.40 # jojobet.com
185.186.78.97 # slack.com
185.198.234.74 # u4.no
185.198.57.133 # pogo.com
185.214.108.239 # Apple
185.216.87.32 # Apple ID
185.219.84.223 # cpimlm.org
185.222.241.107 # pcgamer.com
185.226.92.129 # metmuseum.org
185.229.65.160 # ¿"benarponpombahk"?
185.230.143.180 # jhu.edu
185.244.218.204 # csmonitor.com
185.248.144.24 # CommBank
185.31.200.36 # worldwildlife.org
185.70.185.70 # newsvl.ru
185.87.48.156 # penza-elegant.ru
185.92.182.83 # Slack
185.99.255.17 # Hook (?)
187.124.214.30 # ? marked as "resolved"
187.124.246.235 # Apple
187.124.99.59 # Kotak Life Insurance
187.77.204.153 # TD Bank
187.77.55.29 # Robinhood Markets, Inc.
187.77.85.185 # Acorns
188.116.25.165 # atlasofsurveillance.org
188.132.188.114 # ebaumsworld.com
188.132.188.25 # saatkac.info.tr
188.132.192.168 # usatoday.com
188.132.209.133 # ebaumsworld.com
188.132.209.230 # ebaumsworld.com
188.166.144.179 # Revolut
188.166.174.56 # crypt.ee
188.166.39.77 # aljazeera.net
188.245.104.226 # afp.com
188.245.148.2 # iranhiv.com
188.245.54.212 # bonbast.com
188.245.96.82 # jhu.edu
188.245.98.56 # news12.com
188.34.167.93 # bazicenter.com
188.64.13.153 # https://188.64.13.153.sslip.io/business Facebook phishing
192.119.64.121 # moeclipse.org
192.145.236.112 # Costco
192.163.161.150 # TikTok
192.227.215.249 # Raccoon Labs Pte Ltd, meteora.ag
192.248.159.51 # ynet.co.il
192.248.166.135 # TikTok
192.248.186.12 # Apple / Apple Online Store
192.249.114.127 # xfinity
192.249.120.152 # Costco Wholesale
192.249.126.143 # Xfinity
192.253.229.229 # TikTok
192.9.152.157 # slate.com
192.9.153.69 # store.steampowered.com
192.9.157.126 # obsproject.com
192.99.210.176 # undp.org
193.111.125.8 # Trust Wallet
193.123.94.90 # sputnikglobe.com
193.163.200.15 # nbcnews.com
193.168.141.15 # minorityrights.org
193.17.182.172 # Foxnews
193.187.129.82 # Bancolombia
193.23.55.15 # plus.im
193.233.126.53 # code injection
193.24.209.143 # globalpolicy.org
193.24.210.210 # uscg.mil
193.26.115.32 # Apple ID
194.116.190.25 # wechat.com
194.116.214.162 # rt.com
194.116.214.238 # videolan.org
194.120.24.173 # my.webramz.com
194.124.43.116 # arabnews.com
194.127.178.244 # Apple
194.146.123.175 # kickasstorrents.to
194.15.152.82 # csmonitor.com
194.163.175.75 # Claude
194.26.232.15 # slate.com
194.28.225.187 # ymca.int
194.33.61.115 # Facebook
194.35.226.168 # ФССП (FSSP)
194.36.170.226 # sputnikglobe.com
194.58.111.143 # prodoctorov.ru
194.61.120.156 # hellopoetry.com
194.62.251.127 # goodreads.com
194.62.251.128 # reliefweb.int
194.62.55.122 # Foxnews
194.99.79.28  # LinkedIn
195.110.43.75 # React CVE-2025-55182
195.123.233.55 # Microsoft
195.133.2.12 # Kleinanzeigen
195.16.74.5 # ebaumsworld.com
195.20.227.112 # digg.com
195.200.30.15 # Apple
195.201.223.122 # w3schools.com
195.201.232.127 # TikTok
195.201.234.54 # nextpit.com
195.219.251.74 # utoronto.ca
195.54.175.152 # Crowdstrike, Inc. crowdstrike.com
196.251.116.208 # generic login
196.251.117.198 # Microsoft (LinkedIn)
196.251.66.19 # a screenshot of random characters, many Chinese
196.251.66.224 # rando sign-in
196.251.69.189 # Mistral
196.251.70.227 # webmail
196.251.73.194 # Magyar Posta Zrt.
196.251.81.202 # adobe
196.251.86.108 # NetBSD
198.181.36.122 # actionaid.org
199.231.235.28 # Banco Galicia
199.247.13.156 # rog.asus.com
199.247.14.108 # brothersroad.org
199.250.203.93 # Xfinity
199.91.220.41 # Raccoon Labs Pte Ltd,
2.24.124.66 # Mercado Livre (Brazil)
2.25.209.181 # BONDDESK
2.26.123.138 # Telegram Mini App that offers gambling games
20.119.100.146 # Costco
20.119.57.19 # Costco
20.124.191.59 # Costco
20.124.199.183 # Costco
20.169.219.52 # Costco
20.201.66.162 # Comprovação BNDES
20.55.22.3 # Costco
20.55.32.72 # hxxps://bofa-tablas-v2.20-55-32-72[.]sslip[.]io/#/user
20.85.241.39 # Costco
20.87.120.31 # React CVE-2025-55182
20.87.120.31 # React CVE-2025-55182
20.87.244.127 # React CVE-2025-55182
20.97.5.57 # TikTok
204.152.217.239 # getdial.ai
204.168.175.48 # Revolut
205.172.56.59 # transformunow.org
205.209.121.76 # Starlink
206.189.140.121 # gadgetsnow.com
206.189.21.72 # polymarket.com
206.189.243.3 # gameignition.io
206.189.51.165 # obsproject.com
206.206.104.221 # doctorswithoutborders.org
206.206.76.66 # American Express
207.148.116.21 # Apple Store
207.148.98.212 # Babylon Labs Ltd babylonlabs.io
207.154.216.14 # unfpa.org
207.154.229.160 # haqi.org
207.174.31.80 # Amazon
207.246.83.11 # foreignpolicy.com
209.141.40.61 # pytorch.org
209.38.194.217 # elpha.com
209.38.234.73 # fardanews.com
209.38.250.14 # concern.net
209.38.38.51 # cesr.org
209.54.104.181 # Apple
212.108.83.24 # acquisition.com
212.132.124.61 # key2gaming.com
212.24.110.231 # seclists.org
212.64.193.246 # ebaumsworld.com
212.64.193.61 # ebaumsworld.com
212.64.193.63 # ebaumsworld.com
212.64.214.103 # ebaumsworld.com
212.64.214.13 # ebaumsworld.com
212.64.214.161 # ebaumsworld.com
212.64.214.169 # ebaumsworld.com
212.64.214.22 # ebaumsworld.com
212.64.214.246 # tails.net
212.64.214.31 # technorati.com
212.64.214.54 # ebaumsworld.com
212.64.214.77 # ebaumsworld.com
212.64.214.87 # ebaumsworld.com
212.64.214.90 # ebaumsworld.com
212.64.223.249 # ebaumsworld.com
212.64.223.251 # heritage.org
212.64.223.40 # download.cnet.com
212.64.223.51 # ebaumsworld.com
212.64.223.53 # ebaumsworld.com
212.64.223.72 # ebaumsworld.com
212.83.46.41 # isscr.org
213.111.149.123 # Roblox
213.171.208.189 # "Your version of Ghost is vulnerable to a critical SQL injection vulnerability"
213.176.18.145 # Instagram
213.238.167.10 # ebaumsworld.com
213.238.167.197 # ebaumsworld.com
213.238.167.51 # ebaumsworld.com
213.238.167.52 # ebaumsworld.com
216.126.239.216 # Interac
216.194.172.107 # Costco
216.203.20.179 # jup.ag Raccoon Labs Pte Ltd
216.24.189.4 # undp.org
216.245.184.111 # Paperless Post
216.9.227.101 # saatkac.info.tr
216.9.227.8 # frontlineaids.org
217.144.188.8 # sputnikglobe.com
217.216.37.67 # Tasheel United Company for Financial Services
217.60.195.75 # Mayor of Greater Sudbury
217.69.13.138 # download.cnet.com
222.92.156.238 # retired HDNY test endpoint
23.162.152.72 # fruitcraft.co
23.177.136.104 # UNFPA
23.235.221.235 # https://www.optimum.net
23.254.161.20 # 2shared.com
23.27.202.35 # Apple Online Store
23.88.103.245 # laughfactory.com
23.94.174.148 # nbcnews.com
23.94.253.213 # slack.com
23.94.57.87 # nypost.com
3.129.18.10 # Bancolombia / Nequi
3.135.10.112 # popularenlinea.com
3.141.63.144 # TikTok
3.147.73.227 # Amazon
3.237.252.127 # cesr.org
3.6.171.182 # hasura.io
3.67.106.44 # nabaliaenergia.com
3.8.119.3 # optical.toys
31.129.106.225 # 1800respect.org.au
31.14.139.105 # cursor.com
31.214.157.178 # freeimages
31.56.113.98 # Slack
31.57.201.80 # Tasheel
31.59.175.51 # Alchemy Insights, Inc. alchemy.com
31.59.209.5 # AutoTrader (Cox Auto)
31.70.153.49 # State Street / Charles River Development
31.76.240.211 # "a bot selling drugs"
32.186.93.121 # Langley FCU Banking
34.117.27.160 # TikTok
34.125.139.171 # Linkedin
34.128.147.132 # React CVE-2025-55182
34.149.137.0 # Herdez
34.204.76.216 # KeyBank
34.41.213.207 # Navy Federal Credit Union navyfederal.org
34.49.122.129 # Telus
34.80.136.10 # arabnews.com
35.176.194.163 # .gov.uk grants center of excellence
35.179.113.219 # coinbase
35.207.208.144 # Fidelity
35.216.100.240 # Bithumb Co.,Ltd.
35.220.234.208 # falconx.io FalconX Holdings Limited
35.42.6.166 # Game Cheat Software
35.80.21.115 # crazygames.com
35.85.65.126 # foreignpolicy.com
35.88.54.82 # crazygames.com
37.221.125.82 # thestar.com
37.27.10.56 # techniker-forum.de
37.27.12.156 # uptvs.com
37.27.16.237 # reliefweb.int
37.27.37.68 # winespectator.com
37.27.41.197 # speedtest.net
37.27.46.150 # foreignpolicy.com
37.27.80.4 # actionaid.org
37.28.157.12 # Belfius Bank, also Argenta.be
37.58.18.232 # download.cnet.com
38.180.104.125 # actionaid.org
38.180.146.222 # priceshoes
38.180.15.105 # stonewall.org.uk
38.180.154.91 # earthwatch.org
38.180.160.83 # Google
38.180.202.142 # Robinhood Markets, Inc. robinhood.com
38.180.62.143 # winespectator.com
38.54.30.247 # actionaid.org
38.54.68.74 # hootsuite.com
38.54.8.58 # jami.net
38.54.84.228 # climaterealityproject.org
38.54.85.248 # TikTok
38.60.196.184 # celebon.ir
38.60.208.121 # arabnews.com
38.60.255.239 # actionaid.org
38.60.255.84 # sputnikglobe.com
38.87.117.108 # "encourage users to deposit money and purchase so-called VIP products"
4.236.165.11 # PayPal
43.134.66.67 # Netflix, https://nf-43-134-66-67.sslip.io/sg
43.134.66.67/24 # Netflix
43.156.4.197 # Etsy
43.173.94.152 # ChatGPT
43.225.108.140 # aimer-web.jp
43.229.150.11 # bicommunitynews.co.uk
44.192.53.252 # imagene-ai.com
45.11.182.161 # thestar.com
45.116.14.101 # usatoday.com
45.12.108.203 # standardnotes.com
45.128.205.186 # TikTok
45.13.186.74 # robinhood.com
45.133.118.77 # unfpa.org
45.133.17.198 # IAC Inc health.com
45.138.183.44 # kashoob.com
45.138.74.44 # secfirst.org
45.14.247.9 # secondlife.com
45.141.118.210 # Lycos
45.143.234.112 # Bitget
45.144.234.170 # rfa.org
45.145.4.81 # slate.com
45.150.131.146 # TikTok
45.154.98.208 # qnb (Qatar National Bank)
45.156.24.10 # amazon.co.jp
45.156.27.4 # Fox News
45.158.15.124 # ebaumsworld.com
45.158.15.135 # ebaumsworld.com
45.158.15.184 # ebaumsworld.com
45.159.248.190 # sliding.toys
45.159.249.169 # sheypoor.com
45.189.109.197 # React CVE-2025-55182
45.195.250.148 # cdnjs.com
45.195.69.178 # sliding.toys
45.252.183.181 # out.com
45.252.183.185 # nbcnews.com
45.32.104.26 # Robinhood (?)
45.32.223.5 # Wells Fargo — my bank!
45.38.3.121 # Netflix
45.59.118.106 # hootsuite.com
45.59.118.58 # news.gooya.com
45.59.170.69 # isscr.org
45.61.134.40 # download.cnet.com
45.61.136.57 # Microsoft
45.61.154.115 # foreignpolicy.com
45.61.161.168 # Apple (Korean? Japanese?)
45.63.117.88 # u4.no
45.66.228.248 # Binance
45.67.86.25 # stonewall.org.uk
45.76.126.95 # HSBC Hong Kong
45.76.95.134 # donya-e-eqtesad.com
45.77.237.215 # foxnews.com
45.79.121.173 # Venmo
45.79.121.173 # venmo.com
45.79.126.65 # Wells Fargo
45.8.147.169 # csmonitor.com
45.8.147.233 # mojogem.com
45.8.21.98 # doostihaa.com
45.82.251.70 # ??
45.86.63.248 # Bank of America
45.87.251.218 # Slack
45.87.41.92 # pogo.com
45.87.43.205 # TikTok Business Center
45.88.186.173 # Scotiabank
45.9.250.228 # arabnews.com
45.90.237.175 # Spotify
45.91.138.110 # BMO Financial Group
45.92.111.164 # holakoueearchive.co
45.95.174.89 # sfr.fr
45.95.233.96 # proton.me
45.95.99.119 # ФССП fssp.gov.ru
46.101.131.66 # gadgetsnow.com
46.101.72.21 # coolmathgames.com
46.17.101.214 # nytimes.com
46.17.102.186 # cadenza.ir
46.183.27.211 # akharinnews.com
46.202.130.214 # VermoegensZentrum
46.224.119.161 # React CVE-2025-55182
46.225.230.37 # Unauthenticated SQL Injection (CVE-2026-72898)
46.249.100.129 # theintercept.com
46.249.98.17 # Apple Store
46.250.237.97 # UNFPA
46.29.239.47 # episcopalrelief.org
46.31.79.79 # onedio.com
46.37.123.109 # Instagram
46.4.148.166 # unfpa.org
46.4.162.14 # foreignpolicy.com
46.4.98.13 # Bank of America
46.62.216.152 # Universal Navigation Inc. (DBA “Uniswap Labs”)
46.8.236.174 # fardanews.com
47.236.160.90 # uzum market
47.245.106.224 # uzum market
47.245.54.43 # TD Ameritrade WebBroker Login
47.251.27.123 # getdial.ai
47.79.86.23 # Chilean gov't
47.84.49.45 # uzum market
48.216.217.16 # coinbase
49.12.0.222 # catholicsforchoice.org
49.12.103.72 # reliefweb.int
49.12.204.135 # dailysabah.com
49.12.208.158 # dotabuff.com
49.12.227.226 # f-secure.com
49.12.241.120 # roam.news
49.12.41.51 # slate.com
49.13.14.86 # csmonitor.com
49.13.144.216 # oldschoololdfriends.com
49.13.145.55 # glsen.org
49.13.150.236 # internetsociety.org
49.13.156.202 # vandermast.be
49.13.159.110 # unicef.org
49.13.196.224 # fliesenverlegung-hoertnagl.at
49.13.214.82 # radiopaedia.org
49.13.84.154 # slate.com
49.13.84.255 # linguee.de
5.104.72.41 # Federal Bailiff Service of Russia (ФССП — Федеральная служба судебных приставов / Federal'naya Sluzhba Sudebnykh Pristavov)
5.129.208.141 # asana.com
5.129.228.180 # Amazon
5.161.108.76 # shopmeramedical.com
5.161.138.203 # starconfig.com.au
5.161.149.183 # download.cnet.com
5.161.216.141 # foreignpolicy.com
5.161.43.35 # Abyss
5.161.44.48 # nypost.com
5.161.56.94 # nypost.com
5.161.68.244 # Facebook
5.180.30.211 # jadidonline.com
5.181.50.243 # React CVE-2025-55182
5.182.36.181 # Protonmail
5.189.221.55 # amazon.com
5.206.224.115 # ABNAMRO.nl
5.250.187.205 # brave.com
5.252.21.29 # giphy.com
5.255.117.196 # eln-voces.com
5.255.117.216 # soon.works
5.42.102.77 # e4gl.com
5.42.106.119 # arabnews.com
5.42.106.54 # csmonitor.com
5.42.78.43 # farayad.co
5.42.82.86 # foreignpolicy.com
5.45.101.76 # Phantom Technologies Inc
5.45.93.79 # indiatimes.com
5.75.140.81 # kishss2.ir
5.75.193.98 # muscleandfitness.com
5.75.194.181 # childrensdefense.org
5.75.195.227 # wildriftfire.com
5.75.200.244 # merriam-webster.com
5.75.200.8 # untappd.com
5.75.200.95 # ebaumsworld.com
5.75.201.168 # witness.org
5.75.202.84 # ebaumsworld.com
5.75.205.208 # my-diary.org
5.75.207.83 # ebaumsworld.com
5.75.233.237 # fhi360.org
5.78.110.219 # thestar.com
5.78.117.154 # nypost.com
5.78.51.159 # arriyadiyah.com
5.78.58.233 # csmonitor.com
5.8.19.46 # Fox News
50.6.22.93 # Amazon
50.6.227.32 # Cash App
50.6.4.187 # Amazon Prime
50.6.4.99 # Costco
51.178.236.99 # speedify.com
51.178.36.27 # TikTok
51.195.150.117 # gov.uh
51.222.206.184 # Anthropic
51.79.38.120 # INFO-YATIRIM infoyatirimfx.com
51.89.156.250 # fosfeminista.org
51.89.164.107 # TikTok
51.89.204.166 # Google
51.91.52.71 # TikTok
52.220.134.5 # arabnews.com
54.147.2.250 # TradingView Inc. tradingview.com
54.152.242.38 # usatoday.com
54.187.9.45 # Amazon
54.204.89.15 # Bank of Philippine Islands (BPI) (https://www.bpi.com.ph)
54.214.15.21 # untappd.com
54.229.43.6 # csmonitor.com
54.234.5.223 # ticketmaster
54.36.119.4 # nypost.com
57.128.107.209 # wickr.com
57.155.183.218 # React CVE-2025-55182
57.180.206.7 # infini-cloud.net
62.113.255.125 # pogo.com
62.171.130.122 # https://pagos.acueducto.com.co/
62.238.127.119 # ROBINHOOD
63.186.43.96 # React CVE-2025-55182
64.120.94.224 # Deutsche Telekom
64.176.189.63 # climaterealityproject.org
64.176.22.9 # Costco
64.176.22.9 # JPMorgan Chase / Chase.com
64.176.5.116 # Ramp Chile
64.188.74.204 # Apple / iCloud
64.226.82.36 # liveayurprana.com
64.227.132.89 # Banco Popular
64.227.45.81 # thestar.com
64.94.84.123 # Paperless Post
64.95.11.10 # TikTok
64.95.11.149 # Paperless Post
64.95.12.182 # Paperless Post
64.95.13.216 # Paperless Post
65.0.177.47 # Binance
65.108.247.57 # pcgamesn.com
65.108.58.0 # arvehaldus.ee
65.109.15.45 # speedtest.net
65.109.176.33 # eventbrite.com
65.109.178.204 # UNFPA
65.109.18.60 # garden.finance (crypto)?
65.109.183.180 # superuser.com
65.109.184.35 # 1800respect.org.au
65.109.186.107 # coolmathgames.com
65.109.186.19 # my-diary.org
65.109.189.250 # afp.com
65.109.193.200 # tacticaltech.org
65.109.198.229 # artsandculture.google.com
65.109.198.30 # nbcnewyork.com
65.109.198.80 # ebaumsworld.com
65.109.200.95 # 2degrees.nz
65.109.204.11 # worldhealth.net
65.109.208.36 # pof.com
65.109.215.176 # heritage.org
65.109.218.141 # ebaumsworld.com
65.109.221.11 # defcad.com
65.109.221.214 # gamespot.com
65.109.232.185 # sierraclub.org
65.109.236.170 # pcgamesn.com
65.109.238.97 # heyatonline.ir
65.20.103.236 # aljazeera.net
65.21.179.255 # wsj.com
65.21.48.238 # itexcgroup.com
66.151.33.226 # sputniknews.in
66.23.193.126 # Interstellar
66.245.194.10 # laborrights.org
66.245.197.41 # emailaddresses.com
66.42.57.227 # Uzum Market
66.94.120.142 # UPS
68.183.106.84 # EasyWeb Login
68.183.120.73 # vezafy.com
68.183.46.0 # tacticaltech.org
69.169.109.120 # Microsoft
69.62.123.92 # n8n
70.34.196.214 # foreignpolicy.com
70.34.216.244 # reliefweb.int
72.60.104.60 # Apple / App Store
72.60.56.106 # Performa
72.60.78.94 # Pegadaian
72.61.203.163 # "Your version of Ghost is vulnerable to a critical SQL injection vulnerability..."
72.61.214.93 # TikTok
72.62.243.209 # Tokyo Metropolitan Police Department
72.62.71.182 # WhatsApp / Mikha Internal Comms
74.0.48.198 # coinbase
74.208.54.68 # React CVE-2025-55182
77.105.147.35 # indiatimes.com
77.110.114.149 # Robinhood Markets, Inc.
77.221.136.77 # firstpost.com
77.221.136.78 # worldhealth.net
77.221.137.56 # Amazon
77.221.141.201 # telegram
77.221.151.104 # sputnikglobe.com
77.221.157.3 # indiatimes.com
77.223.98.77 # fhi360.org
77.238.228.48 # UNFPA
77.238.238.216 # sci-hub.se
77.238.248.166 # gamespot.com
77.83.203.86 # southcom.mil
77.90.8.81 # element.io
77.91.78.26 # xenu.net
77.92.145.191 # atlaq.com
77.92.151.38 # time.is
78.129.155.147 # Lycos
78.135.104.164 # cesr.org
78.135.104.19 # UNFPA
78.135.80.144 # ebaumsworld.com
78.135.80.210 # ebaumsworld.com
78.135.80.217 # ebaumsworld.com
78.135.80.254 # ebaumsworld.com
78.135.80.44 # ebaumsworld.com
78.141.193.47 # Lycos
78.141.246.36 # wccftech.com
78.153.139.39 # easycomposites.co.uk
78.17.70.177 # Raccoon Labs Pte Ltd, jup.ag
78.17.70.177 # numerous
78.47.196.26 # dailywire.com
78.47.48.110 # freeconvert.com
79.132.135.157 # concern.net
79.132.139.29 # harvard.edu
79.137.199.3 # iotdesignpro.com
79.137.202.34 # "The Global Fund"
79.137.202.87 # circumcision.org
8.209.115.155 # TikTok
8.222.135.173 # uzum market
80.225.199.157 # "Your version of Ghost is vulnerable to a critical SQL injection vulnerability"
80.240.21.194 # bigdev.ir
80.242.56.112 # dailywire.com
80.251.219.99 # kickasstorrents.to
80.253.254.10 # ebaumsworld.com
80.253.255.2 # ebaumsworld.com
80.66.87.109 # NBC news
80.71.144.178 # chemdryloscabos.com
80.71.224.105 # Spotify
80.78.30.192 # Banco Galicia
80.87.206.55 # dalfak.com
81.161.238.97 # arriyadiyah.com
81.19.137.126 # rcsb.org
81.19.137.196 # trezor
81.29.149.131 # slate.com
82.115.17.9 # ted.com
82.115.18.148 # flooringinstaller.org
82.115.18.250 # citizensclimatelobby.org
82.115.5.6 # norml.org
82.115.8.149 # hsbc uk
82.165.105.40 # illegal drugs
82.165.110.7 # Instagram
82.202.156.103 # Notion Labs, Inc.
82.25.34.83 # UNFPA
82.25.39.168 # "redirects to a Russian App download site" "it does look phish-y"
82.25.46.0/24 # United Company for Financial Services https://www.tasheelfinance.com/
83.217.9.85 # apt.ch
84.200.24.243 # Microsoft
84.32.100.30 # speakeasy / fusionconnect
84.32.190.7 # slate.com
85.155.176.74 # Apple
85.159.226.73 # substack.com
85.159.229.32 # pikabu.ru
85.159.230.171 # actionaid.org
85.192.56.134 # kennedy-center.org
85.234.106.111 # CloudCLI
85.239.52.124 # sayt.ws
85.239.63.67 # tumblr.com
86.106.104.0/24 # ValkyrieHosting (Romania)?
86.106.104.12 # team blue
86.106.104.18 # Government of India Ministry of External Affairs (mea.gov.in)
86.106.104.190 # generic login
86.106.104.22 # webmail
86.106.104.24 # isleofman.com / manx.net
86.106.104.30 # Microsoft Outlook
86.106.104.8 # nominalia
86.38.156.169 # sxyprn.com
86.53.110.170 # Craigslist
87.120.254.22 # Interac
87.247.170.234 # shenoto.com
87.58.152.45 # HDFC Bank
88.198.203.52 # Kaufland
88.218.17.193 # architectureau.com
88.218.79.18 # Apple / Apple Online Store
88.99.108.110 # download.cnet.com
88.99.21.170 # csmonitor.com
89.107.62.251 # limetorrents.lol
89.110.65.182 # apple.com
89.167.102.27 # some weird trading platform
89.167.63.119 # revolut.com
89.168.58.113 # n8n
89.185.85.193 # tomato.gg
89.208.106.240 # steam-currency.ru
89.22.224.202 # pcgamer.com
89.221.224.170 # foreignpolicy.com
89.23.103.58 # don't know, but Namecheap wants 'em shut down
89.23.107.250 # Westpac Bank Australia
89.251.22.110 # Mercantil Servicios Financieros
89.251.9.57 # projectveritas.com
89.38.129.99 # UNFPA
89.38.129.99 # UNFPA
91.107.128.116 # ilo.org
91.107.129.135 # onlinesim.io
91.107.136.156 # aljazeera.net
91.107.137.210 # csmonitor.com
91.107.138.86 # ddo.com
91.107.139.245 # catholic.org
91.107.139.71 # triller.co
91.107.144.251 # ebaumsworld.com
91.107.145.135 # ebaumsworld.com
91.107.145.237 # nbcnews.com
91.107.146.169 # ebaumsworld.com
91.107.146.89 # mastodon.sdf.org
91.107.148.133 # ebaumsworld.com
91.107.149.19 # ebaumsworld.com
91.107.152.217 # crypt.ee
91.107.152.37 # ebaumsworld.com
91.107.154.162 # my-diary.org
91.107.154.247 # United Nations Population Fund UNFPA
91.107.156.115 # ebaumsworld.com
91.107.156.17 # panda.org
91.107.156.231 # ebaumsworld.com
91.107.163.211 # pogo.com
91.107.170.178 # timcast.com
91.107.172.10 # unfpa.org
91.107.172.136 # arabnews.com
91.107.175.212 # muckrock.com
91.107.176.158 # photoroom.com
91.107.178.59 # isscr.org
91.107.178.82 # Linkedin Phishing
91.107.181.88 # bat.com
91.107.182.82 # space.com
91.107.224.123 # foreignpolicy.com
91.107.240.195 # cesr.org
91.107.242.111 # keystone.guru
91.107.244.181 # panda.org
91.107.245.20 # ebaumsworld.com
91.107.245.21 # ebaumsworld.com
91.107.245.231 # ebaumsworld.com
91.107.245.247 # ebaumsworld.com
91.107.247.129 # ebaumsworld.com
91.107.247.95 # ebaumsworld.com
91.107.248.66 # ebaumsworld.com
91.107.249.25 # ebaumsworld.com
91.107.252.71 # ebaumsworld.com
91.107.253.226 # ebaumsworld.com
91.107.254.171 # ebaumsworld.com
91.107.255.196 # mastodon.xyz
91.108.241.48 # digg.com
91.147.92.70 # React CVE-2025-55182
91.192.81.2 # nypost.com
91.202.233.230 # Interac
91.207.183.233 # slate.com
91.210.169.16 # overwiki.ru
91.216.104.115 # Google
91.217.206.29 # DHL
91.225.217.17 # weather.com
91.241.49.48 # wordreference.com
91.98.134.136 # TikTok
91.98.86.167 # Microsoft
91.99.154.136 # Workday Inc
92.118.114.109 # slate.com
92.119.124.99 # arabnews.com
92.119.59.97 # arthive.com
92.205.111.135 # Banque Misr (بنك مصر)
92.246.136.54 # slate.com
92.246.137.149 # foreignpolicy.com
92.50.249.198 # mechel.ru
92.51.45.76 # rescue.org
93.113.25.186 # phishing command & control panel
93.127.160.24 # DHL
93.127.160.4 # apple.com
93.127.223.129 # reliefweb.int
93.188.161.162 # nypost.com
94.103.92.125 # arriyadiyah.com
94.130.76.212 # pcgamesn.com
94.130.78.56 # arabic.rt.com
94.131.111.62 # Amazon
94.131.123.13 # sbs.com.au
94.131.123.161 # drudgereport.com
94.131.123.230 # columbia.edu
94.131.3.65 # Apple
94.154.32.229 # jahannews.com
94.154.33.158 # download.cnet.com
94.156.175.27 # webmail
94.156.175.28 # phishing, can't read, Valkyrie Hosting
94.177.198.203 # Apple
95.111.255.96 # Tripadvisor
95.164.16.5 # sbs.com.au
95.164.22.254 # getdrupe.com
95.179.140.173 # varzesh3.com
95.179.155.148 # roozno.com
95.179.163.90 # foreignpolicy.com
95.179.170.223 # credibilitycoalition.org
95.179.217.91 # download.cnet.com
95.179.245.161 # mobile.de
95.216.109.218 # beintheknow.org
95.216.147.91 # roozno.com
95.216.186.128 # artforum.com
95.216.23.154 # phantom.app
95.217.232.185 # mama.tv
95.217.99.94 # gamespot.com
96.9.125.197 # web shell
98.158.28.139 # TikTok
98.158.28.140 # TikTok