Light Theme · Dark Theme
Facebook Share Button Twitter Share Button Reddit Share Button

As an Amazon Associate I earn from qualifying purchases. All product links on this page are monetized.

Worst Recent Malicious IP Addresses

 

Here are the IP addresses of up to 15 of the worst recent attackers on the servers from which my blocklists are compiled, sorted in order of number of attacks over the past three to six days, without regard to the specific type of malicious attack. The time refers to the most recent attack by the IP. All times are expressed in America / New York time, adjusted for DST when applicable.

These IP addresses were gathered from block reports issued by firewalls running on servers that the author of this site personally owns or manages, and from hacker honeypots installed on sites that the author owns or manages.

A * in the ports column means that the port(s) has/have been redacted to protect non-standard port assignments.

You can run a WHOIS search on the IP addresses by clicking the IP address links. Please note, however, that the owner of the IP address probably is not the party responsible for the malicious acts. Most Internet hackers, crackers, spammers, and scammers use either public proxy services, TOR, hacked servers, or infected or otherwise compromised personal computers to launch their attacks. Infected or compromised "Internet of Things" devices like routers, security cameras, and even thermostats also are being increasingly used for malicious Internet activity.

 

Oct 25, 2020 08:32:36 pm
103.146.202.150
Ports 80, 443
GET /wp-login.php HTTP/1.1
Oct 28, 2020 08:58:02 am
104.236.100.42
Ports 80, 443
GET /wp-login.php HTTP/1.1
Oct 26, 2020 05:56:28 pm
161.35.230.3
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Oct 29, 2020 03:28:59 pm
115.159.117.88
Ports 80, 443
Web-based SQL injection attempt
Oct 29, 2020 04:24:37 pm
39.101.65.235
Ports 80, 443
GET /data/admin/allowurl.txt HTTP/1.1
Oct 27, 2020 08:37:01 pm
84.17.60.214
Ports 80, 443
Web form spam
Oct 26, 2020 02:18:45 pm
85.107.93.221
Ports 80, 443
Web-based SQL injection attempt
Oct 29, 2020 01:59:06 pm
147.135.211.127
Ports 80, 443
Web-based SQL injection attempt
Oct 28, 2020 10:47:03 pm
14.139.171.142
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Oct 24, 2020 01:37:09 pm
167.99.107.57
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Oct 29, 2020 10:27:00 pm
45.113.201.134
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Oct 29, 2020 10:35:52 pm
210.242.28.15
Ports 22, 1433, 1434, 3389, 8443, 10000, 17500
Probing for vulnerable services
Oct 29, 2020 11:37:38 pm
14.245.165.85
Ports *
Multiple failed FTP logins
Oct 30, 2020 02:46:38 am
115.77.34.57
Ports 80, 443
GET /wp-login.php HTTP/1.1
Oct 30, 2020 02:46:50 am
189.148.173.189
Ports 80, 443
GET /wp-login.php HTTP/1.1

 

Are you in business? Create an Amazon Business Account.