Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
7 indicators match · newest first · updated 2026-10-12 11:45 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 84.247.41[.]230 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]1[:]1[:]101[:][:]49 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 2a01[:]4020[:]1[:]1[:]103[:][:]476 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 2a01[:]4020[:]1[:]1[:]103[:][:]58a | Attacker | — | 1 feed | |||
| 10-12 04:35 | 2a01[:]4020[:]1[:]1[:]102[:][:]7a | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]1[:]1[:]103[:][:]529 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]1[:]1[:]103[:][:]590 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.