Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

118 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	142.44.220[.]192	Attacker	—	1 feed
10-12 10:30	148.113.128[.]255	Attacker	—	1 feed
10-12 10:30	155.117.13[.]197	Attacker	—	1 feed
10-12 10:30	51.161.37[.]1	Attacker	—	1 feed
10-12 10:30	51.195.244[.]223	Attacker	—	1 feed
10-12 10:15	51.38.12[.]12	Attacker	—	1 feed
10-12 10:08	145.239.202[.]9	Malware		1 feed 32 sandbox samples
10-12 10:00	141.11.96[.]193	Attacker	—	1 feed
10-12 10:00	15.235.98[.]178	Attacker	—	1 feed
10-12 10:00	155.117.197[.]33	Attacker	—	1 feed
10-12 10:00	2607[:]5300[:]203[:]ae1b[:][:]	Attacker	—	1 feed
10-12 10:00	51.77.107[.]231	Attacker	—	1 feed
10-12 10:00	51.81.110[.]91	Attacker	—	1 feed
10-12 09:30	142.44.225[.]226	Attacker	—	1 feed
10-12 09:30	2001[:]41d0[:]304[:]300[:][:]c15d	Attacker	—	1 feed
10-12 09:30	46.105.81[.]160	Attacker	—	1 feed
10-12 09:30	51.161.65[.]208	Attacker	—	1 feed
10-12 09:30	51.222.95[.]203	Attacker	—	1 feed
10-12 09:30	51.222.95[.]76	Attacker	—	1 feed
10-12 09:30	51.83.150[.]96	Attacker	—	1 feed
10-12 09:04	51.254.84[.]37	Malware		1 feed 56 sandbox samples
10-12 08:55	198.244.242[.]7	Attacker	—	1 feed
10-12 08:55	2001[:]41d0[:]33a[:]a00[:][:]40e	Attacker	—	1 feed
10-12 08:55	51.81.103[.]241	Attacker	—	1 feed
10-12 08:55	51.81.103[.]250	Attacker	—	1 feed
10-12 08:55	51.81.111[.]134	Attacker	—	1 feed
10-12 08:55	54.38.147[.]83	Attacker	—	1 feed
10-12 08:55	92.222.104[.]212	Attacker	—	1 feed
10-12 08:46	51.89.16[.]8	Malware		1 feed 251 sandbox samples
10-12 08:21	178.32.215[.]165	Malware		1 feed 32 sandbox samples
10-12 08:20	198.244.242[.]152	Attacker	—	1 feed
10-12 08:20	51.195.215[.]82	Attacker	—	1 feed
10-12 08:20	51.81.164[.]194	Attacker	—	1 feed
10-12 07:53	91.121.67[.]60	Malware		1 feed 1,252 sandbox samples
10-12 07:50	15.235.96[.]231	Attacker	—	1 feed
10-12 07:50	15.235.98[.]214	Attacker	—	1 feed
10-12 07:50	15.235.98[.]97	Attacker	—	1 feed
10-12 07:50	198.244.183[.]218	Attacker	—	1 feed
10-12 07:50	198.244.242[.]240	Attacker	—	1 feed
10-12 07:50	51.161.37[.]56	Attacker	—	1 feed
10-12 07:50	51.81.103[.]245	Attacker	—	1 feed
10-12 07:50	51.81.103[.]251	Attacker	—	1 feed
10-12 07:50	51.81.103[.]252	Attacker	—	1 feed
10-12 07:50	51.81.104[.]34	Attacker	—	1 feed
10-12 07:50	51.81.104[.]45	Attacker	—	1 feed
10-12 07:50	51.81.104[.]46	Attacker	—	1 feed
10-12 07:50	51.81.105[.]19	Attacker	—	1 feed
10-12 07:50	51.81.105[.]31	Attacker	—	1 feed
10-12 07:50	51.81.110[.]17	Attacker	—	1 feed
10-12 07:50	51.81.110[.]24	Attacker	—	1 feed
10-12 07:50	51.81.110[.]27	Attacker	—	1 feed
10-12 07:50	51.81.110[.]53	Attacker	—	1 feed
10-12 07:50	51.81.110[.]58	Attacker	—	1 feed
10-12 07:50	51.81.110[.]59	Attacker	—	1 feed
10-12 07:50	51.81.110[.]60	Attacker	—	1 feed
10-12 07:50	51.81.110[.]80	Attacker	—	1 feed
10-12 07:50	51.81.110[.]81	Attacker	—	1 feed
10-12 07:50	51.81.110[.]84	Attacker	—	1 feed
10-12 07:50	51.81.110[.]85	Attacker	—	1 feed
10-12 07:50	51.81.110[.]89	Attacker	—	1 feed
10-12 07:50	51.81.110[.]95	Attacker	—	1 feed
10-12 07:50	51.81.111[.]10	Attacker	—	1 feed
10-12 07:50	51.81.111[.]113	Attacker	—	1 feed
10-12 07:50	51.81.111[.]114	Attacker	—	1 feed
10-12 07:50	51.81.111[.]119	Attacker	—	1 feed
10-12 07:50	51.81.111[.]125	Attacker	—	1 feed
10-12 07:50	51.81.111[.]127	Attacker	—	1 feed
10-12 07:50	51.81.111[.]130	Attacker	—	1 feed
10-12 07:50	51.81.111[.]135	Attacker	—	1 feed
10-12 07:50	51.81.111[.]136	Attacker	—	1 feed
10-12 07:50	51.81.111[.]138	Attacker	—	1 feed
10-12 07:50	51.81.111[.]139	Attacker	—	1 feed
10-12 07:50	51.81.111[.]142	Attacker	—	1 feed
10-12 07:50	51.81.111[.]15	Attacker	—	1 feed
10-12 07:50	51.81.111[.]5	Attacker	—	1 feed
10-12 07:50	51.81.111[.]66	Attacker	—	1 feed
10-12 07:50	51.81.111[.]72	Attacker	—	1 feed
10-12 07:50	51.81.111[.]75	Attacker	—	1 feed
10-12 07:50	54.36.60[.]45	Attacker	—	1 feed
10-12 07:50	54.39.0[.]49	Attacker	—	1 feed
10-12 07:15	142.44.220[.]102	Attacker	—	1 feed
10-12 07:15	142.44.233[.]255	Attacker	—	1 feed
10-12 07:15	198.244.226[.]209	Attacker	—	1 feed
10-12 07:15	54.39.136[.]21	Attacker	—	1 feed
10-12 06:58	37.187.167[.]53	Malware		1 feed 16 sandbox samples
10-12 06:55	137.74.246[.]152	Attacker	—	1 feed
10-12 06:41	148.113.128[.]32	Attacker	—	1 feed
10-12 06:41	148.113.130[.]55	Attacker	—	1 feed
10-12 06:41	15.235.96[.]208	Attacker	—	1 feed
10-12 06:41	51.195.183[.]236	Attacker	—	1 feed
10-12 06:41	51.222.168[.]34	Attacker	—	1 feed
10-12 06:41	51.81.110[.]54	Attacker	—	1 feed
10-12 06:41	54.38.147[.]163	Attacker	—	1 feed
10-12 06:41	54.39.136[.]98	Attacker	—	1 feed
10-12 06:41	54.39.6[.]144	Attacker	—	1 feed
10-12 06:32	217.182.169[.]148	Malware		1 feed 113 sandbox samples
10-12 06:32	51.255.34[.]118	Malware		1 feed 105 sandbox samples
10-12 06:10	198.244.168[.]186	Attacker	—	1 feed
10-12 06:10	198.244.168[.]251	Attacker	—	1 feed
10-12 06:10	51.81.165[.]81	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check