Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

494 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	167.99.209[.]139	Attacker	—	1 feed
10-12 10:15	64.227.30[.]51	Attacker	—	1 feed
10-12 10:15	67.205.129[.]118	Attacker	—	1 feed
10-12 10:15	67.205.135[.]33	Attacker	—	1 feed
10-12 10:15	67.205.166[.]190	Attacker	—	1 feed
10-12 10:15	67.205.170[.]68	Attacker	—	1 feed
10-12 10:15	68.183.127[.]195	Attacker	—	1 feed
10-12 10:15	68.183.18[.]43	Attacker	—	1 feed
10-12 10:15	68.183.20[.]182	Attacker	—	1 feed
10-12 10:15	68.183.96[.]46	Attacker	—	1 feed
10-12 10:15	104.248.123[.]218	Attacker	—	1 feed
10-12 10:15	104.248.169[.]7	Attacker	—	1 feed
10-12 10:15	104.248.224[.]130	Attacker	—	1 feed
10-12 10:15	104.248.58[.]164	Attacker	—	1 feed
10-12 10:15	134.122.30[.]6	Attacker	—	1 feed
10-12 10:15	134.209.125[.]135	Attacker	—	1 feed
10-12 10:15	134.209.127[.]159	Attacker	—	2 feeds
10-12 10:15	134.209.144[.]190	Attacker	—	1 feed
10-12 10:15	137.184.104[.]249	Attacker	—	1 feed
10-12 10:15	137.184.143[.]227	Attacker	—	2 feeds
10-12 10:15	137.184.77[.]24	Attacker	—	1 feed
10-12 10:15	138.197.82[.]241	Attacker	—	1 feed
10-12 10:15	138.68.97[.]180	Attacker	—	1 feed
10-12 10:15	139.59.5[.]74	Attacker	—	2 feeds
10-12 10:15	139.59.88[.]134	Attacker	—	1 feed
10-12 10:15	142.93.112[.]30	Attacker	—	1 feed
10-12 10:15	142.93.112[.]31	Attacker	—	1 feed
10-12 10:15	142.93.134[.]19	Attacker	—	1 feed
10-12 10:15	142.93.187[.]208	Attacker	—	1 feed
10-12 10:15	142.93.196[.]5	Attacker	—	1 feed
10-12 10:15	142.93.235[.]143	Attacker	—	1 feed
10-12 10:15	142.93.244[.]69	Attacker	—	1 feed
10-12 10:15	142.93.3[.]55	Attacker	—	1 feed
10-12 10:15	142.93.72[.]162	Attacker	—	1 feed
10-12 10:15	143.198.123[.]171	Attacker	—	1 feed
10-12 10:15	143.198.169[.]113	Attacker	—	1 feed
10-12 10:15	143.198.3[.]83	Attacker	—	1 feed
10-12 10:15	143.198.40[.]11	Attacker	—	1 feed
10-12 10:15	146.190.144[.]118	Attacker	—	2 feeds
10-12 10:15	146.190.21[.]254	Attacker	—	1 feed
10-12 10:15	147.182.135[.]6	Attacker	—	1 feed
10-12 10:15	147.182.220[.]232	Attacker	—	1 feed
10-12 10:15	157.230.183[.]24	Attacker	—	2 feeds
10-12 10:15	157.230.94[.]122	Attacker	—	2 feeds
10-12 10:15	157.245.34[.]217	Attacker	—	1 feed
10-12 10:15	157.245.89[.]200	Attacker	—	1 feed
10-12 10:15	157.245.93[.]38	Attacker	—	1 feed
10-12 10:15	159.203.190[.]155	Attacker	—	1 feed
10-12 10:15	159.223.156[.]208	Attacker	—	1 feed
10-12 10:15	159.65.236[.]23	Attacker	—	1 feed
10-12 10:15	159.89.88[.]192	Attacker	—	1 feed
10-12 10:15	161.35.109[.]209	Attacker	—	1 feed
10-12 10:15	161.35.114[.]197	Attacker	—	1 feed
10-12 10:15	161.35.127[.]132	Attacker	—	1 feed
10-12 10:15	161.35.8[.]119	Attacker	—	1 feed
10-12 10:15	165.22.193[.]86	Attacker	—	1 feed
10-12 10:15	165.227.207[.]182	Attacker	—	1 feed
10-12 10:15	167.172.239[.]241	Attacker	—	2 feeds
10-12 10:15	167.99.0[.]34	Attacker	—	1 feed
10-12 10:15	167.99.145[.]2	Attacker	—	1 feed
10-12 10:15	167.99.154[.]192	Attacker	—	1 feed
10-12 10:15	167.99.184[.]8	Attacker	—	1 feed
10-12 10:15	167.99.230[.]156	Attacker	—	1 feed
10-12 10:15	167.99.56[.]195	Attacker	—	1 feed
10-12 10:15	178.128.149[.]177	Attacker	—	1 feed
10-12 10:15	178.128.150[.]18	Attacker	—	1 feed
10-12 10:15	178.128.151[.]56	Attacker	—	1 feed
10-12 10:15	178.128.156[.]22	Attacker	—	1 feed
10-12 10:15	192.241.152[.]79	Attacker	—	1 feed
10-12 10:15	198.199.69[.]186	Attacker	—	1 feed
10-12 10:15	198.211.102[.]7	Attacker	—	1 feed
10-12 10:15	198.211.115[.]10	Attacker	—	1 feed
10-12 10:15	198.211.96[.]244	Attacker	—	1 feed
10-12 10:15	204.48.19[.]165	Attacker	—	1 feed
10-12 10:15	206.189.116[.]1	Attacker	—	2 feeds
10-12 10:15	206.189.188[.]55	Attacker	—	1 feed
10-12 10:15	206.189.233[.]172	Attacker	—	1 feed
10-12 10:15	206.189.235[.]198	Attacker	—	1 feed
10-12 10:15	208.68.39[.]105	Attacker	—	1 feed
10-12 10:00	146.190.249[.]139	Attacker	—	1 feed
10-12 10:00	159.65.91[.]223	Attacker	—	1 feed
10-12 09:43	143.110.219[.]27:443	C2		1 feed
10-12 09:30	134.199.166[.]29	Attacker	—	1 feed
10-12 09:04	167.99.35[.]88	Malware		1 feed 266 sandbox samples
10-12 08:55	167.172.222[.]61	Attacker	—	1 feed
10-12 08:46	206.189.61[.]126	Malware		1 feed 306 sandbox samples
10-12 08:20	146.190.214[.]139	Attacker	—	2 feeds
10-12 08:20	161.35.207[.]127	Attacker	—	1 feed
10-12 08:20	164.92.176[.]76	Attacker	—	1 feed
10-12 08:20	170.64.203[.]248	Attacker	—	1 feed
10-12 08:10	159.203.60[.]181	Attacker	—	2 feeds
10-12 08:10	67.205.155[.]78	Attacker	—	2 feeds
10-12 08:10	64.227.23[.]105	Attacker	—	1 feed
10-12 08:10	46.101.77[.]221	Attacker	—	1 feed
10-12 08:10	64.225.19[.]102	Attacker	—	1 feed
10-12 08:10	64.225.57[.]182	Attacker	—	1 feed
10-12 08:10	64.227.2[.]39	Attacker	—	1 feed
10-12 08:10	64.227.7[.]88	Attacker	—	1 feed
10-12 08:10	64.23.171[.]69	Attacker	—	1 feed
10-12 08:10	64.23.171[.]76	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check