Light Theme · Dark Theme
Facebook Share Button Twitter Share Button Reddit Share Button

As an Amazon Associate I earn from qualifying purchases. All product links on this page are monetized.
Get a free trial of Backblaze Unlimited Online Backup.
Backup and sync your files with a free trial of Goodsync.

Most Recent Malicious IP Addresses

 

A hard drive crashes every 20 seconds. Backup and or synchronize your important files...

Here are the 25 most recent attacks on the servers from which my blocklists are compiled, sorted in order of recency without regard to the type of malicious attack. These IP's are literally up to the second because this list is generated when the page is requested. All times are expressed in America / New York time, adjusted for DST when applicable.

These IP addresses were gathered from block reports issued by firewalls running on servers that the author of this site personally owns or manages, and from hacker honeypots installed on sites that the author owns or manages.

A * in the ports column means that the port(s) has/have been redacted to protect non-standard port assignments.

You can run a WHOIS search on the IP addresses by clicking the IP address links. Please note, however, that the owner of the IP address probably is not the party responsible for the malicious acts. Most Internet hackers, crackers, spammers, and scammers use either public proxy services, TOR, hacked servers, or infected or otherwise compromised personal computers to launch their attacks. Infected or compromised "Internet of Things" devices like routers, security cameras, and even thermostats also are being increasingly used for malicious Internet activity.

 

Jan 18, 2021 05:31:42 pm
18.130.182.70
Ports 80, 443
GET /administrator/help/en-GB/toc.json HTTP/1.1
Jan 18, 2021 05:34:13 pm
143.215.247.68
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 09:25:22 pm
23.250.44.213
Ports 80, 443
Web form spam (honeypot)
Jan 18, 2021 04:24:30 pm
186.24.14.92
Ports 25, 465, 587
Multiple failed SASL logins
Jan 18, 2021 04:26:44 pm
143.215.247.68
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 04:08:50 pm
2.57.122.27
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 03:51:05 pm
160.238.132.44
Ports 80, 443
GET /wp-login.php HTTP/1.1
Jan 18, 2021 03:19:51 pm
203.243.17.167
Ports 80, 443
Multiple failed cPanel logins
Jan 18, 2021 03:15:08 pm
206.123.139.194
Ports 80, 443
Web form spam
Jan 18, 2021 03:03:51 pm
222.231.59.218
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 02:43:05 pm
111.21.79.122
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 02:18:25 pm
89.187.168.153
Ports 80, 443
Web form spam
Jan 18, 2021 02:05:52 pm
143.215.247.68
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 01:03:43 pm
111.118.154.89
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 12:59:53 pm
135.148.33.65
Ports 80, 443
Web form spam
Jan 18, 2021 12:39:19 pm
135.148.33.123
Ports 80, 443
Web form spam
Jan 18, 2021 12:10:48 pm
162.212.175.4
Ports 80, 443
Web form spam
Jan 18, 2021 11:32:07 am
204.48.20.47
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 11:29:32 am
176.111.173.249
Ports 80, 443
Multiple failed cPanel logins
Jan 18, 2021 11:21:46 am
202.164.138.232
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 10:49:43 am
39.152.179.231
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 10:32:44 am
152.243.89.254
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 10:35:39 am
69.117.227.86
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Jan 18, 2021 10:28:19 am
179.54.223.129
Ports 80, 443
GET /wp-login.php HTTP/1.1
Jan 18, 2021 10:24:58 am
119.10.179.6
Ports 25, 465, 587
Multiple failed SASL logins

 

Are you in business? Create an Amazon Business Account.