Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
14 indicators match · newest first · updated 2026-10-12 10:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 05:00 | 2a01[:]4020[:]31[:]0[:]101[:][:]34c | Attacker | — | 1 feed | |||
| 10-12 05:00 | 2a01[:]4020[:]31[:]0[:]101[:][:]51a | Attacker | — | 1 feed | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]1b1 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]4fe | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]2c6 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]86 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]ad | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]160 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]18f | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]4c3 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]61a | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]102[:][:]74 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]211 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]31[:]0[:]101[:][:]520 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.