Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

26 indicators match · newest first · updated 2026-10-12 11:51 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	195.96.139[.]12	Attacker	—	1 feed
10-12 10:30	195.96.139[.]23	Attacker	—	1 feed
10-12 10:30	87.236.176[.]22	Attacker	—	1 feed
10-12 09:30	195.96.139[.]145	Attacker	—	1 feed
10-12 05:00	195.96.139[.]111	Attacker	—	1 feed
10-12 05:00	195.96.139[.]126	Attacker	—	1 feed
10-12 05:00	195.96.139[.]135	Attacker	—	1 feed
10-12 05:00	87.236.176[.]132	Attacker	—	1 feed
10-12 05:00	87.236.176[.]137	Attacker	—	1 feed
10-12 04:35	185.247.137[.]221	Attacker	—	2 feeds
10-12 04:35	195.96.139[.]241	Attacker	—	2 feeds
10-12 04:35	185.247.137[.]235	Attacker	—	2 feeds
10-12 04:35	87.236.176[.]238	Attacker	—	2 feeds
10-12 04:35	87.236.176[.]247	Attacker	—	2 feeds
10-12 04:35	193.163.125[.]106	Attacker	—	2 feeds
10-12 04:35	87.236.176[.]143	Attacker	—	2 feeds
10-12 04:35	185.247.137[.]24	Attacker	—	2 feeds
10-12 04:35	195.96.139[.]134	Attacker	—	2 feeds
10-12 04:35	195.96.139[.]35	Attacker	—	2 feeds
10-12 04:35	185.247.137[.]115	Attacker	—	3 feeds
10-12 04:35	195.96.139[.]138	Attacker	—	2 feeds
10-12 04:35	87.236.176[.]124	Attacker	—	2 feeds
10-12 04:35	185.247.137[.]16	Attacker	—	2 feeds
10-12 04:35	185.247.137[.]34	Attacker	—	2 feeds
10-12 04:35	195.96.139[.]17	Attacker	—	3 feeds
10-12 04:35	185.247.137[.]154	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check