Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
8 indicators match · newest first · updated 2026-10-12 10:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 91.74.20[.]114 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 87.201.249[.]70 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 94.207.27[.]135 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 94.207.192[.]41 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a00[:]f29[:]1119[:]6046[:]55ee[:]de07[:]6133[:]9cd1 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a00[:]f29[:]202[:]3c09[:]c90b[:]5d88[:]cc9[:]e9c3 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 94.205.71[.]89 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 5.31.171[.]13 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.