Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

35 indicators match · newest first · updated 2026-10-12 10:40 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:30167.99.209[.]139Attacker—1 feed
10-12 10:15142.93.134[.]19Attacker—1 feed
10-12 10:15142.93.235[.]143Attacker—1 feed
10-12 10:15146.190.21[.]254Attacker—1 feed
10-12 10:15165.22.193[.]86Attacker—1 feed
10-12 09:04167.99.35[.]88Malware1 feed 266 sandbox samples
10-12 08:10104.248.192[.]7Attacker—1 feed
10-12 08:10152.42.138[.]189Attacker—1 feed
10-12 08:10157.245.73[.]143Attacker—1 feed
10-12 08:10161.35.94[.]154Attacker—1 feed
10-12 08:10164.92.219[.]13Attacker—1 feed
10-12 08:10174.138.3[.]141Attacker—1 feed
10-12 08:10178.128.255[.]217Attacker—1 feed
10-12 07:15159.65.197[.]5Attacker—1 feed
10-12 07:04188.166.12[.]8:443C21 feed
10-12 07:0464.227.72[.]68:443C21 feed
10-12 06:1064.227.65[.]24Attacker—1 feed
10-12 06:1068.183.14[.]68Attacker—1 feed
10-12 06:10104.248.199[.]239Attacker—1 feed
10-12 06:10104.248.93[.]115Attacker—1 feed
10-12 06:10134.209.95[.]137Attacker—1 feed
10-12 06:10142.93.129[.]217Attacker—1 feed
10-12 06:10146.190.22[.]46Attacker—1 feed
10-12 06:10159.223.208[.]99Attacker—1 feed
10-12 06:10164.92.159[.]92Attacker—1 feed
10-12 06:10167.172.40[.]251Attacker—1 feed
10-12 06:10167.172.40[.]29Attacker—1 feed
10-12 06:10167.172.43[.]72Attacker—1 feed
10-12 06:10167.99.221[.]87Attacker—1 feed
10-12 06:10178.128.252[.]170Attacker—1 feed
10-12 06:10178.128.253[.]153Attacker—1 feed
10-12 06:10206.189.111[.]55Attacker—1 feed
10-12 06:10206.189.15[.]147Attacker—1 feed
10-12 06:10209.38.108[.]205Attacker—1 feed
10-12 05:35104.248.193[.]172Attacker—1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.