Malicious IP Address Feed
Newly reported malicious IP addresses; 90,541 tracked.
5,000 indicators match · newest first · updated 2026-10-12 08:46 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 08:25 | 84.38.133[.]187:3270 | C2 | 1 feed | ||||
| 10-12 08:20 | 102.129.56[.]200 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 102.129.60[.]160 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 102.91.132[.]96 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 103.123.113[.]169 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 103.172.210[.]133 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 103.183.90[.]233 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 103.74.220[.]10 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 106.219.227[.]226 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 107.150.117[.]187 | Attacker | — | 3 feeds | |||
| 10-12 08:20 | 109.72.12[.]37 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 110.38.247[.]135 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 116.177.174[.]231 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 116.97.109[.]120 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 117.194.124[.]248 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 118.104.215[.]19 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 119.73.8[.]7 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 122.168.2[.]247 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 122.168.4[.]49 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 122.187.229[.]160 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 14.1.81[.]143 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 14.99.117[.]118 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 145.224.73[.]94 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 146.190.214[.]139 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 149.54.36[.]187 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 149.88.24[.]230 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 151.158.44[.]55 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 152.59.146[.]217 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 157.119.214[.]142 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 157.22.47[.]104 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 161.118.235[.]207 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 161.35.207[.]127 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 164.92.176[.]76 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 170.245.250[.]151 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 170.64.203[.]248 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 174.0.205[.]170 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 176.103.4[.]19 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 176.192.201[.]80 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 177.23.208[.]121 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 178.201.26[.]162 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 178.202.56[.]192 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 178.48.71[.]238 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 18.156.142[.]154 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.108.132[.]216 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.108.135[.]126 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.229.120[.]185 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.68.178[.]211 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.87.194[.]145 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 186.109.226[.]24 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 190.213.146[.]219 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 190.6.37[.]250 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 196.0.107[.]98 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 197.234.201[.]189 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 198.244.242[.]152 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2.208.37[.]119 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2.243.83[.]196 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2001[:]470[:]1[:]fb5[:]a715[:]fda3[:]5257[:]ff4d | Attacker | — | 1 feed | |||
| 10-12 08:20 | 202.47.36[.]44 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 207.175.138[.]62 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 212.237.175[.]5 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 216.180.246[.]42 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 216.234.213[.]94 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 216.238.85[.]59 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 217.165.147[.]14 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 217.227.106[.]51 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 220.181.108[.]158 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 223.180.182[.]165 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 223.184.152[.]74 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2400[:]adcc[:]10a[:]2600[:]2cba[:]22d5[:]347[:]454d | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2401[:]4900[:]d148[:]c31f[:]4c75[:]2bc7[:]29c5[:]9027 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2403[:]3800[:]2206[:]2ffb[:]ad39[:]7a52[:]f6be[:]3f5c | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2404[:]c0[:]d402[:]170f[:]826[:]b3c9[:]86e6[:]1a53 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2407[:]1400[:]b000[:]4900[:]54e0[:]512d[:]e4d8[:]33e3 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2409[:]40d0[:]1398[:]a19e[:]b4c1[:]95c2[:]6e58[:]9551 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2605[:]59c8[:]6cda[:]208[:]99fc[:]b17e[:]a8a1[:]140 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]1[:]1[:]101[:][:]49 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]242 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]479 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]687 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]79a | Attacker | — | 1 feed | |||
| 10-12 08:20 | 34.140.170[.]45 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 34.158.63[.]109 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 34.70.209[.]231 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 34.95.246[.]208 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 34.95.255[.]126 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 35.187.250[.]232 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 35.194.250[.]178 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 36.73.143[.]0 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 36.78.8[.]22 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 37.19.195[.]85 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 37.5.242[.]178 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 41.193.162[.]227 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 41.223.251[.]166 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 41.74.5[.]176 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 45.66.35[.]41 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 46.227.217[.]186 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 46.39.212[.]111 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 46.5.35[.]120 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 47.128.111[.]102 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 47.64.115[.]203 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.