Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
30 indicators match · newest first · updated 2026-10-12 10:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:15 | 143.198.40[.]11 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 167.99.184[.]8 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 146.190.249[.]139 | Attacker | — | 1 feed | |||
| 10-12 09:43 | 143.110.219[.]27:443 | C2 | 1 feed | ||||
| 10-12 08:10 | 159.203.60[.]181 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 137.184.172[.]134 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 138.197.143[.]55 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 142.93.154[.]115 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 143.110.209[.]198 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 143.110.213[.]194 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 146.190.245[.]102 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 159.203.27[.]11 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 159.203.27[.]154 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 159.203.28[.]134 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 165.227.35[.]36 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 167.99.185[.]195 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 178.128.227[.]164 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 178.128.239[.]223 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 165.227.39[.]37 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 138.197.142[.]230 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 143.198.45[.]59 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 146.190.251[.]167 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 147.182.157[.]76 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 159.203.14[.]221 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 159.89.119[.]49 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 165.245.236[.]126 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.99.180[.]125 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.99.183[.]219 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 138.197.131[.]117 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 159.89.127[.]126 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.