Directory of Malicious IPs

The list below is comprised of Malicious IPs (limited to the top 25 — login to see more) that are:

  • Arranged by their Total Bad Events
  • Seen with User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Linux 2.6.26-1-amd64) Lobo/0.98.3

Malicious IP Event Total First  Last 
 91.207.6.138 | C Bad Event 196,664 2011-01-25  2015-04-16 
 178.212.64.52 | SD Bad Event 127,892 2018-10-28  2021-09-27 
 195.24.61.7 | SDC Bad Event 116,826 2018-09-24  2021-01-18 
 182.16.245.54 | SDC Bad Event 93,706 2018-10-18  2024-02-29 
 91.207.8.78 | C Bad Event 87,660 2012-02-14  2014-12-11 
 117.103.5.186 | SDC Bad Event 83,414 2018-10-02  2022-07-03 
 185.188.218.10 | SDC Bad Event 76,471 2018-08-25  2020-12-21 
 200.35.56.161 | SDC Bad Event 75,386 2018-11-07  2022-03-16 
 85.117.63.98 | SDC Bad Event 71,983 2018-10-07  2020-11-26 
 37.32.125.241 | SDC Bad Event 71,381 2019-02-28  2020-07-31 
 131.161.68.45 | SDC Bad Event 68,686 2019-02-01  2022-04-07 
 186.224.238.32 | SD Bad Event 66,995 2018-09-24  2022-05-26 
 50.196.148.195 | SDC Bad Event 61,661 2018-09-21  2020-12-21 
 85.172.107.1 | SDC Bad Event 59,139 2008-08-08  2020-06-30 
 170.247.43.142 | SD Bad Event 59,032 2018-09-25  2024-04-18 
 119.10.177.90 | SD Bad Event 58,625 2018-08-08  2023-01-08 
 196.0.111.194 | SDC Bad Event 58,099 2018-10-20  2024-04-16 
 91.207.5.138 | CR Bad Event 57,395 2011-06-15  2015-03-06 
 189.80.219.58 | SD Bad Event 51,669 2018-10-30  2021-05-09 
 46.171.28.162 | SDC Bad Event 48,960 2018-09-13  2024-04-15 
 200.77.186.208 | SDC Bad Event 46,790 2018-08-14  2020-12-09 
 179.96.62.105 | SD Bad Event 41,296 2018-08-10  2020-12-21 
 37.252.72.189 | SDC Bad Event 41,219 2018-10-07  2020-10-25 
 103.236.114.38 | SDC Bad Event 40,415 2017-11-01  2020-06-22 
 112.220.151.204 | SDC Bad Event 40,142 2018-08-10  2023-02-23 
Click any IP address for more details  |  Last updated: April 18 2024 06:44:24 AM 

Information is obtained from our worldwide network of honey pots. Please note: being listed on these pages does not necessarily mean an IP address is owned by a spammer. For example, it may have been hijacked from its true owner. If you believe an IP address is listed here in error, contact us and we will investigate.

To track harvesters and other malicious robots visiting your own website, sign up with Project Honey Pot today. It's fast, free, easy, and one of the ways you can help make the Internet a better, safer place.

Link to this page:
RSS for this page:


This page displays the top IPs by different categories. You may sort or limit this list by selecting from the menus below.

See comment spammers, dictionary attackers, or mail servers from the same region.

You may also lookup information on a specific IP address.

If you want to see a list of IPs specifically targeting your own websites simply join Project Honey Pot and add honey pots to the sites you want to monitor.

An RSS feed for this page is available.

Follow us on Facebook

Follow projecthoneypot on Twitter

do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–24, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email