Directory of Malicious IPs

The list below is comprised of Malicious IPs (limited to the top 25 — login to see more) that are:

  • Arranged by their Total Bad Events
  • Seen with User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)

Malicious IP Event Total First  Last 
 95.215.1.13 | CW Bad Event 3,881,830 2009-10-08  2010-10-14 
 188.143.232.111 | HSDC Bad Event 607,392 2011-02-13  2014-12-13 
 221.214.208.226 | SDC Bad Event 574,861 2016-02-14  2018-06-23 
 188.143.232.31 | HC Bad Event 483,363 2010-11-18  2014-04-29 
 103.71.152.249 | SDC Bad Event 359,505 2017-04-23  2017-09-01 
 188.143.232.37 | C Bad Event 277,145 2010-11-18  2017-01-07 
 61.141.21.34 | SDC Bad Event 252,072 2016-07-27  2022-07-10 
 188.143.232.26 | C Bad Event 246,763 2011-02-26  2017-01-07 
 188.143.232.10 | CR Bad Event 238,706 2010-11-06  2017-01-07 
 218.241.238.141 | SDC Bad Event 202,159 2017-01-06  2017-10-04 
 91.207.6.138 | C Bad Event 196,664 2011-01-25  2015-04-16 
 91.201.66.76 | C Bad Event 185,737 2010-06-04  2011-06-19 
 31.184.238.52 | C Bad Event 183,283 2011-10-06  2014-06-12 
 200.226.134.53 | HC Bad Event 150,163 2007-10-19  2007-12-07 
 93.182.36.82 | C Bad Event 94,138 2011-11-18  2015-02-05 
 222.74.200.2 | SDC Bad Event 94,011 2008-07-03  2015-06-16 
 211.111.250.177 | SDC Bad Event 90,987 2010-10-30  2014-04-14 
 61.177.248.202 | SDCR Bad Event 84,651 2017-01-06  2018-11-04 
 178.137.18.72 | C Bad Event 84,406 2011-06-29  2013-12-18 
 199.19.109.246 | C Bad Event 78,596 2011-11-01  2013-10-03 
 109.230.217.238 | C Bad Event 75,214 2010-12-02  2011-05-02 
 116.112.66.102 | HSDCR Bad Event 67,333 2012-02-21  2015-09-05 
 188.143.232.156 | C Bad Event 66,481 2011-06-14  2012-06-05 
 199.15.234.226 | CR Bad Event 65,907 2011-07-28  2013-05-18 
 195.229.242.154 | HC Bad Event 64,720 2008-01-23  2008-03-31 
Click any IP address for more details  |  Last updated: October 10 2024 11:44:16 PM 

Information is obtained from our worldwide network of honey pots. Please note: being listed on these pages does not necessarily mean an IP address is owned by a spammer. For example, it may have been hijacked from its true owner. If you believe an IP address is listed here in error, contact us and we will investigate.

To track harvesters and other malicious robots visiting your own website, sign up with Project Honey Pot today. It's fast, free, easy, and one of the ways you can help make the Internet a better, safer place.

Link to this page:
RSS for this page:


do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–24, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email