Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

8 indicators match · newest first · updated 2026-10-12 11:45 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:302407[:]1400[:]b002[:]3640[:]7d81[:]8457[:]fabd[:]e0f2Attacker—1 feed
10-12 08:202407[:]1400[:]b000[:]4900[:]54e0[:]512d[:]e4d8[:]33e3Attacker—1 feed
10-12 08:2049.244.244[.]159Attacker—1 feed
10-12 07:502407[:]1400[:]b001[:]ad00[:]54e0[:]512d[:]e4d8[:]33e3Attacker—1 feed
10-12 04:352407[:]1400[:]b000[:]d2e8[:]e8f9[:]3408[:]4321[:]b16eAttacker—2 feeds
10-12 04:3549.244.243[.]209Attacker—2 feeds
10-12 04:352407[:]1400[:]aa3f[:]57d0[:]a5c3[:]ae84[:]d3a6[:]9b02Attacker—2 feeds
10-12 04:352407[:]1400[:]aa35[:]3628[:]1de0[:]9850[:]c585[:]bc2fAttacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.