Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

30 indicators match · newest first · updated 2026-10-12 10:40 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:15143.198.40[.]11Attacker—1 feed
10-12 10:15167.99.184[.]8Attacker—1 feed
10-12 10:00146.190.249[.]139Attacker—1 feed
10-12 09:43143.110.219[.]27:443C21 feed
10-12 08:10159.203.60[.]181Attacker—2 feeds
10-12 08:10137.184.172[.]134Attacker—1 feed
10-12 08:10138.197.143[.]55Attacker—1 feed
10-12 08:10142.93.154[.]115Attacker—1 feed
10-12 08:10143.110.209[.]198Attacker—1 feed
10-12 08:10143.110.213[.]194Attacker—1 feed
10-12 08:10146.190.245[.]102Attacker—1 feed
10-12 08:10159.203.27[.]11Attacker—1 feed
10-12 08:10159.203.27[.]154Attacker—1 feed
10-12 08:10159.203.28[.]134Attacker—1 feed
10-12 08:10165.227.35[.]36Attacker—1 feed
10-12 08:10167.99.185[.]195Attacker—1 feed
10-12 08:10178.128.227[.]164Attacker—1 feed
10-12 08:10178.128.239[.]223Attacker—1 feed
10-12 06:55165.227.39[.]37Attacker—1 feed
10-12 06:41138.197.142[.]230Attacker—1 feed
10-12 06:10143.198.45[.]59Attacker—1 feed
10-12 06:10146.190.251[.]167Attacker—1 feed
10-12 06:10147.182.157[.]76Attacker—1 feed
10-12 06:10159.203.14[.]221Attacker—1 feed
10-12 06:10159.89.119[.]49Attacker—1 feed
10-12 06:10165.245.236[.]126Attacker—1 feed
10-12 06:10167.99.180[.]125Attacker—1 feed
10-12 06:10167.99.183[.]219Attacker—1 feed
10-12 05:35138.197.131[.]117Attacker—1 feed
10-12 04:50159.89.127[.]126Attacker—1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.