Directory of Dictionary Attacker IPs

The list below is comprised of Dictionary Attacker IPs (limited to the top 25 — login to see more) that are:

  • Arranged by their Total Bad Events
  • Seen with User-Agent: Mozilla/5.0 (Linux; Android 7.0; Lenovo P2a42 Build/HDLenovo P2a42) AppleWebKit/537.36 (KHTML. like Gecko) Version/4.0 Chrome/39.0.0.0 Mobile Safari/537.36

Dictionary Attacker IP Event Total First  Last 
 106.203.52.29 | D Bad Event 224 2015-11-02  2015-11-02 
 106.76.216.18 | SD Bad Event 67 2014-04-24  2014-04-24 
 49.14.158.4 | SD Bad Event 61 2011-02-01  2012-12-10 
 112.110.126.126 | SD Bad Event 61 2009-05-04  2017-06-05 
 223.186.89.232 | SD Bad Event 50 2011-08-06  2011-08-06 
 27.97.31.177 | SD Bad Event 46 2011-04-28  2011-10-04 
 42.108.44.248 | SD Bad Event 44 2011-05-27  2011-05-27 
 106.206.127.241 | SD Bad Event 36 2012-05-24  2012-05-24 
 106.76.159.179 | D Bad Event 27 2012-01-31  2013-01-09 
 42.109.213.117 | SD Bad Event 26 2011-05-13  2011-05-13 
 106.66.62.150 | SD Bad Event 26 2013-07-04  2013-07-04 
 27.97.25.178 | SD Bad Event 25 2010-09-27  2010-09-27 
 42.110.144.181 | SD Bad Event 25 2012-07-03  2012-07-03 
 27.97.19.254 | SD Bad Event 22 2010-07-22  2011-04-10 
 42.108.231.195 | SD Bad Event 22 2011-06-15  2011-06-23 
 27.97.64.84 | SD Bad Event 21 2010-09-24  2010-09-24 
 27.97.175.133 | SD Bad Event 20 2011-06-30  2011-09-29 
 106.76.151.214 | D Bad Event 20 2011-08-11  2011-10-13 
 27.97.184.231 | SD Bad Event 19 2010-11-05  2012-06-04 
 106.76.147.164 | D Bad Event 19 2012-01-23  2013-04-08 
 42.108.29.7 | D Bad Event 18 2013-04-09  2013-04-09 
 42.108.204.232 | D Bad Event 18 2011-06-03  2011-06-03 
 1.187.252.208 | D Bad Event 17 2013-03-06  2013-03-06 
 106.76.151.91 | D Bad Event 17 2013-02-04  2013-02-04 
 106.223.67.182 | D Bad Event 17 2012-12-25  2012-12-25 
Click any IP address for more details  |  Last updated: April 21 2021 06:00:31 PM 

Information is obtained from our worldwide network of honey pots. Please note: being listed on these pages does not necessarily mean an IP address is owned by a spammer. For example, it may have been hijacked from its true owner. If you believe an IP address is listed here in error, contact us and we will investigate.

To track harvesters and other malicious robots visiting your own website, sign up with Project Honey Pot today. It's fast, free, easy, and one of the ways you can help make the Internet a better, safer place.

Link to this page:
RSS for this page:


do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–21, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email