Light Theme · Dark Theme
Facebook Share Button Twitter Share Button Reddit Share Button

Help Support this Site

Worst Recent Malicious IP Addresses

 

Backup your employees laptops and desktops. Unlimited data backup for sixty dollars a year

Here are the IP addresses of up to 15 of the worst recent attackers on the servers from which my blocklists are compiled, sorted in order of number of attacks over the past three to six days, without regard to the specific type of malicious attack. The time refers to the most recent attack by the IP. All times are expressed in America / New York time, adjusted for DST when applicable.

These IP addresses were gathered from block reports issued by firewalls running on servers that the author of this site personally owns or manages, and from hacker honeypots installed on sites that the author owns or manages.

A * in the ports column means that the port(s) has/have been redacted to protect non-standard port assignments.

You can check AbuseIPDB's current reports on the IP addresses by clicking the IP address links. Please note, however, that the owner of the IP address probably is not the party responsible for the malicious acts. Most Internet hackers, crackers, spammers, and scammers use either public proxy services, TOR, hacked servers, or infected or otherwise compromised personal computers to launch their attacks. Infected or compromised "Internet of Things" devices like routers, security cameras, and even thermostats also are being increasingly used for malicious Internet activity.

 

Aug 10, 2022 08:30:40 am
46.161.11.197
Ports 80, 443
Web form spam (honeypot)
Aug 10, 2022 02:52:07 am
46.161.11.244
Ports 80, 443
Web form spam
Aug 10, 2022 05:30:11 pm
46.161.11.199
Ports 80, 443
Web form spam
Aug 09, 2022 05:49:56 pm
46.161.11.222
Ports 80, 443
Web form spam
Aug 14, 2022 02:59:12 pm
46.161.11.187
Ports 80, 443
Web form spam
Aug 10, 2022 04:20:30 am
46.161.11.232
Ports 80, 443
Web form spam
Aug 12, 2022 07:41:08 pm
31.210.22.190
Ports 25, 465, 587
Multiple failed SASL logins
Aug 11, 2022 11:37:31 am
212.70.149.66
Ports 25, 465, 587
Multiple failed SASL logins
Aug 11, 2022 11:19:17 am
121.229.45.222
Ports 25, 465, 587
Multiple failed SASL logins
Aug 11, 2022 07:56:43 am
5.188.210.21
Ports 80, 443
Web form spam
Aug 12, 2022 02:54:03 pm
46.161.11.238
Ports 80, 443
Web form spam
Aug 10, 2022 05:12:12 pm
185.107.56.27
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Aug 13, 2022 05:13:33 pm
212.70.149.18
Ports 25, 465, 587
Multiple failed SMTP logins
Aug 09, 2022 11:13:53 pm
180.76.179.193
Ports 25, 465, 587
Multiple failed SASL logins
Aug 11, 2022 04:39:22 am
172.98.64.183
Ports 25, 465, 587
Multiple failed SASL logins

 

Are you in business? Create an Amazon Business Account.