Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
34 indicators match · newest first · updated 2026-10-12 10:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 142.44.220[.]192 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 148.113.128[.]255 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 51.161.37[.]1 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 15.235.98[.]178 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 2607[:]5300[:]203[:]ae1b[:][:] | Attacker | — | 1 feed | |||
| 10-12 09:30 | 142.44.225[.]226 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 51.161.65[.]208 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 51.222.95[.]203 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 51.222.95[.]76 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 15.235.96[.]231 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 15.235.98[.]214 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 15.235.98[.]97 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 51.161.37[.]56 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 54.39.0[.]49 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 142.44.220[.]102 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 142.44.233[.]255 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 54.39.136[.]21 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 148.113.128[.]32 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 15.235.96[.]208 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 51.222.168[.]34 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 54.39.136[.]98 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 54.39.6[.]144 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 54.39.89[.]175 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 148.113.128[.]10 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 167.114.139[.]157 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 54.39.203[.]109 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 54.39.203[.]60 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 54.39.203[.]79 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 15.235.27[.]4 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 15.235.98[.]39 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 51.222.95[.]235 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 54.39.136[.]52 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 54.39.203[.]197 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 54.39.6[.]9 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.