Malicious IP Address Feed

Newly reported malicious IP addresses; 90,741 tracked.

22 indicators match · newest first · updated 2026-10-12 12:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 11:35	165.245.221[.]219	Attacker	—	1 feed
10-12 10:15	138.68.97[.]180	Attacker	—	1 feed
10-12 08:46	206.189.61[.]126	Malware		1 feed 306 sandbox samples
10-12 08:20	161.35.207[.]127	Attacker	—	1 feed
10-12 08:20	164.92.176[.]76	Attacker	—	1 feed
10-12 08:10	139.59.159[.]62	Attacker	—	1 feed
10-12 08:10	142.93.160[.]120	Attacker	—	1 feed
10-12 08:10	201.79.4[.]38	Attacker	—	1 feed
10-12 08:10	207.154.210[.]60	Attacker	—	1 feed
10-12 08:10	207.154.247[.]141	Attacker	—	1 feed
10-12 07:15	165.245.253[.]47	Attacker	—	1 feed
10-12 07:04	157.230.127[.]22:443	C2		1 feed
10-12 07:04	164.90.186[.]13:443	C2		1 feed
10-12 06:41	164.90.173[.]131	Attacker	—	1 feed
10-12 06:41	206.189.48[.]155	Attacker	—	1 feed
10-12 06:10	46.101.110[.]33	Attacker	—	1 feed
10-12 06:10	46.101.244[.]246	Attacker	—	1 feed
10-12 06:10	134.209.254[.]178	Attacker	—	1 feed
10-12 06:10	164.92.204[.]82	Attacker	—	1 feed
10-12 06:10	46.101.238[.]190	Attacker	—	1 feed
10-12 04:50	209.38.238[.]163	Attacker	—	1 feed
10-12 04:35	165.245.208[.]225	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check