Malicious IP Address Feed
Newly reported malicious IP addresses; 90,756 tracked.
43 indicators match · newest first · updated 2026-10-12 09:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 08:10 | 46.101.77[.]221 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 138.68.167[.]17 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 138.68.180[.]110 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 139.59.175[.]48 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 139.59.179[.]185 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 142.93.37[.]226 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 165.227.234[.]227 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 165.227.238[.]90 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 167.172.50[.]215 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 167.172.50[.]253 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 167.99.192[.]170 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 178.62.50[.]22 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 188.166.174[.]100 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 134.209.188[.]23 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 46.101.86[.]32 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 68.183.43[.]157 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 134.209.20[.]249 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 138.68.168[.]148 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 138.68.172[.]230 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 138.68.176[.]14 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 139.59.166[.]49 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 142.93.35[.]38 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 144.126.196[.]158 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 144.126.200[.]43 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 157.245.44[.]71 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 159.65.17[.]173 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 159.65.55[.]240 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 161.35.166[.]104 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 161.35.37[.]48 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 161.35.46[.]73 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 165.227.234[.]61 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 165.232.109[.]197 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 165.232.45[.]146 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.172.51[.]237 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.99.82[.]186 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 188.166.171[.]107 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 139.59.179[.]31 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 46.101.63[.]33 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 138.68.143[.]97 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 142.93.43[.]142 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 144.126.201[.]130 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 144.126.225[.]56 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 178.128.162[.]180 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.