Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

59 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	84.247.41[.]230	Attacker	—	1 feed
10-12 09:30	89.46.223[.]59	Attacker	—	1 feed
10-12 08:55	2a01[:]4020[:]2[:]b[:]101[:][:]11	Attacker	—	1 feed
10-12 08:55	2a01[:]4020[:]2[:]b[:]101[:][:]248	Attacker	—	1 feed
10-12 08:55	2a01[:]4020[:]2[:]b[:]101[:][:]2bb	Attacker	—	1 feed
10-12 08:55	2a01[:]4020[:]2[:]b[:]101[:][:]633	Attacker	—	1 feed
10-12 08:20	2a01[:]4020[:]1[:]1[:]101[:][:]49	Attacker	—	1 feed
10-12 08:20	2a01[:]4020[:]2[:]b[:]102[:][:]242	Attacker	—	1 feed
10-12 08:20	2a01[:]4020[:]2[:]b[:]102[:][:]479	Attacker	—	1 feed
10-12 08:20	2a01[:]4020[:]2[:]b[:]102[:][:]687	Attacker	—	1 feed
10-12 08:20	2a01[:]4020[:]2[:]b[:]102[:][:]79a	Attacker	—	1 feed
10-12 07:15	2a01[:]4020[:]1[:]1[:]103[:][:]476	Attacker	—	1 feed
10-12 07:15	2a01[:]4020[:]1[:]1[:]103[:][:]58a	Attacker	—	1 feed
10-12 05:00	2a01[:]4020[:]31[:]0[:]101[:][:]34c	Attacker	—	1 feed
10-12 05:00	2a01[:]4020[:]31[:]0[:]101[:][:]51a	Attacker	—	1 feed
10-12 04:35	2a01[:]4020[:]1[:]1[:]102[:][:]7a	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]101[:][:]255	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]148	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]196	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]19d	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]1c5	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]1fc	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]234	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]2c9	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]2ec	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]32f	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]33a	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]357	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]3d5	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]3e8	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]3f5	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]42d	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]541	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]5f9	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]65e	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]70c	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]71c	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]761	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]c5	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]1b1	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]4fe	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]2c6	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]86	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]ad	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]160	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]101[:][:]cd	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]18f	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]4c3	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]61a	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]102[:][:]74	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]211	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]31[:]0[:]101[:][:]520	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]1[:]1[:]103[:][:]529	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]1[:]1[:]103[:][:]590	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]103[:][:]220	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]103[:][:]293	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]103[:][:]29a	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]103[:][:]41d	Attacker	—	2 feeds
10-12 04:35	2a01[:]4020[:]2[:]b[:]102[:][:]8d	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check