Malicious IP Address Feed

Newly reported malicious IP addresses; 90,756 tracked.

270 indicators match · newest first · updated 2026-10-12 09:40 UTC

First seen	Indicator	Category	Family	Reported by
10-12 08:55	167.172.222[.]61	Attacker	—	1 feed
10-12 08:20	146.190.214[.]139	Attacker	—	2 feeds
10-12 08:10	67.205.155[.]78	Attacker	—	2 feeds
10-12 08:10	64.227.23[.]105	Attacker	—	1 feed
10-12 08:10	64.225.19[.]102	Attacker	—	1 feed
10-12 08:10	64.225.57[.]182	Attacker	—	1 feed
10-12 08:10	64.227.2[.]39	Attacker	—	1 feed
10-12 08:10	64.227.7[.]88	Attacker	—	1 feed
10-12 08:10	64.23.171[.]69	Attacker	—	1 feed
10-12 08:10	64.23.171[.]76	Attacker	—	1 feed
10-12 08:10	67.205.131[.]159	Attacker	—	1 feed
10-12 08:10	67.205.134[.]54	Attacker	—	1 feed
10-12 08:10	67.205.140[.]208	Attacker	—	1 feed
10-12 08:10	67.205.156[.]213	Attacker	—	1 feed
10-12 08:10	67.205.169[.]130	Attacker	—	1 feed
10-12 08:10	67.205.184[.]194	Attacker	—	1 feed
10-12 08:10	67.205.187[.]189	Attacker	—	1 feed
10-12 08:10	67.205.188[.]157	Attacker	—	1 feed
10-12 08:10	67.207.90[.]140	Attacker	—	1 feed
10-12 08:10	68.183.124[.]192	Attacker	—	1 feed
10-12 08:10	68.183.125[.]191	Attacker	—	1 feed
10-12 08:10	68.183.135[.]110	Attacker	—	1 feed
10-12 08:10	104.248.11[.]185	Attacker	—	2 feeds
10-12 08:10	104.248.123[.]100	Attacker	—	1 feed
10-12 08:10	104.248.52[.]47	Attacker	—	1 feed
10-12 08:10	104.248.57[.]6	Attacker	—	1 feed
10-12 08:10	104.248.62[.]44	Attacker	—	1 feed
10-12 08:10	134.122.117[.]122	Attacker	—	1 feed
10-12 08:10	134.122.18[.]48	Attacker	—	1 feed
10-12 08:10	134.122.24[.]252	Attacker	—	1 feed
10-12 08:10	134.209.124[.]85	Attacker	—	1 feed
10-12 08:10	134.209.125[.]18	Attacker	—	1 feed
10-12 08:10	134.209.160[.]56	Attacker	—	1 feed
10-12 08:10	134.209.71[.]190	Attacker	—	1 feed
10-12 08:10	134.209.73[.]152	Attacker	—	1 feed
10-12 08:10	137.184.122[.]187	Attacker	—	1 feed
10-12 08:10	137.184.23[.]38	Attacker	—	1 feed
10-12 08:10	137.184.26[.]158	Attacker	—	1 feed
10-12 08:10	137.184.27[.]51	Attacker	—	1 feed
10-12 08:10	137.184.28[.]171	Attacker	—	1 feed
10-12 08:10	137.184.54[.]22	Attacker	—	1 feed
10-12 08:10	137.184.57[.]0	Attacker	—	1 feed
10-12 08:10	137.184.64[.]20	Attacker	—	1 feed
10-12 08:10	137.184.67[.]74	Attacker	—	1 feed
10-12 08:10	138.197.105[.]41	Attacker	—	1 feed
10-12 08:10	138.197.72[.]180	Attacker	—	1 feed
10-12 08:10	138.197.87[.]70	Attacker	—	1 feed
10-12 08:10	138.197.94[.]141	Attacker	—	1 feed
10-12 08:10	142.93.120[.]123	Attacker	—	1 feed
10-12 08:10	142.93.198[.]225	Attacker	—	1 feed
10-12 08:10	142.93.203[.]3	Attacker	—	1 feed
10-12 08:10	142.93.241[.]248	Attacker	—	1 feed
10-12 08:10	142.93.3[.]84	Attacker	—	1 feed
10-12 08:10	143.198.119[.]38	Attacker	—	1 feed
10-12 08:10	143.198.126[.]67	Attacker	—	1 feed
10-12 08:10	143.198.14[.]111	Attacker	—	2 feeds
10-12 08:10	143.198.170[.]122	Attacker	—	1 feed
10-12 08:10	143.198.178[.]148	Attacker	—	1 feed
10-12 08:10	143.198.188[.]25	Attacker	—	1 feed
10-12 08:10	143.198.19[.]59	Attacker	—	1 feed
10-12 08:10	143.198.26[.]14	Attacker	—	1 feed
10-12 08:10	143.244.147[.]25	Attacker	—	1 feed
10-12 08:10	143.244.174[.]238	Attacker	—	1 feed
10-12 08:10	147.182.176[.]232	Attacker	—	1 feed
10-12 08:10	147.182.214[.]177	Attacker	—	1 feed
10-12 08:10	147.182.228[.]19	Attacker	—	2 feeds
10-12 08:10	157.230.184[.]14	Attacker	—	1 feed
10-12 08:10	157.230.190[.]184	Attacker	—	1 feed
10-12 08:10	157.230.191[.]111	Attacker	—	1 feed
10-12 08:10	157.230.209[.]61	Attacker	—	1 feed
10-12 08:10	157.230.232[.]255	Attacker	—	1 feed
10-12 08:10	157.230.235[.]229	Attacker	—	1 feed
10-12 08:10	157.230.52[.]249	Attacker	—	1 feed
10-12 08:10	157.230.56[.]53	Attacker	—	1 feed
10-12 08:10	157.230.63[.]125	Attacker	—	1 feed 1 sandbox sample
10-12 08:10	157.230.90[.]245	Attacker	—	1 feed
10-12 08:10	157.230.91[.]109	Attacker	—	1 feed
10-12 08:10	157.230.93[.]126	Attacker	—	1 feed
10-12 08:10	157.245.134[.]73	Attacker	—	1 feed
10-12 08:10	157.245.138[.]7	Attacker	—	1 feed
10-12 08:10	157.245.241[.]215	Attacker	—	1 feed
10-12 08:10	157.245.250[.]83	Attacker	—	1 feed
10-12 08:10	157.245.253[.]120	Attacker	—	1 feed
10-12 08:10	157.245.254[.]81	Attacker	—	1 feed
10-12 08:10	157.245.81[.]166	Attacker	—	2 feeds
10-12 08:10	157.245.85[.]4	Attacker	—	1 feed
10-12 08:10	157.245.91[.]44	Attacker	—	1 feed
10-12 08:10	157.245.92[.]219	Attacker	—	1 feed
10-12 08:10	159.203.119[.]174	Attacker	—	2 feeds
10-12 08:10	159.203.137[.]114	Attacker	—	1 feed
10-12 08:10	159.203.191[.]62	Attacker	—	1 feed
10-12 08:10	159.223.109[.]246	Attacker	—	1 feed
10-12 08:10	159.223.125[.]134	Attacker	—	2 feeds
10-12 08:10	159.223.189[.]82	Attacker	—	1 feed
10-12 08:10	159.223.196[.]114	Attacker	—	1 feed
10-12 08:10	159.223.204[.]5	Attacker	—	1 feed
10-12 08:10	159.65.164[.]146	Attacker	—	1 feed
10-12 08:10	159.65.184[.]139	Attacker	—	1 feed
10-12 08:10	159.89.224[.]4	Attacker	—	1 feed
10-12 08:10	159.89.226[.]48	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check