Malicious IP Address Feed

Newly reported malicious IP addresses; 90,741 tracked.

48 indicators match · newest first · updated 2026-10-12 12:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 11:35102.64.35[.]176Attacker—1 feed
10-12 11:05102.64.42[.]173Attacker—1 feed
10-12 11:05102.129.57[.]185Attacker—1 feed
10-12 09:30102.129.54[.]82Attacker—1 feed
10-12 08:20102.129.56[.]200Attacker—1 feed
10-12 08:20102.129.60[.]160Attacker—1 feed
10-12 07:15102.129.55[.]69Attacker—1 feed
10-12 07:15102.129.59[.]23Attacker—1 feed
10-12 07:15102.64.32[.]101Attacker—1 feed
10-12 07:15102.64.47[.]130Attacker—1 feed
10-12 07:15102.64.47[.]54Attacker—1 feed
10-12 07:15102.129.53[.]110Attacker—1 feed
10-12 07:15102.129.56[.]114Attacker—1 feed
10-12 06:41102.129.55[.]9Attacker—1 feed
10-12 06:41102.129.59[.]145Attacker—1 feed
10-12 06:41102.64.35[.]185Attacker—1 feed
10-12 06:41102.64.38[.]157Attacker—1 feed
10-12 06:10102.129.53[.]40Attacker—1 feed
10-12 05:35102.64.42[.]50Attacker—1 feed
10-12 05:35102.64.46[.]235Attacker—1 feed
10-12 05:00102.64.45[.]152Attacker—1 feed
10-12 04:35102.129.56[.]199Attacker—2 feeds
10-12 04:35102.64.46[.]53Attacker—2 feeds
10-12 04:35102.129.52[.]219Attacker—2 feeds
10-12 04:35102.129.63[.]174Attacker—2 feeds
10-12 04:35102.129.52[.]18Attacker—2 feeds
10-12 04:35102.64.33[.]95Attacker—2 feeds
10-12 04:35102.64.45[.]235Attacker—2 feeds
10-12 04:35102.64.47[.]53Attacker—2 feeds
10-12 04:35102.129.61[.]137Attacker—2 feeds
10-12 04:35102.64.46[.]115Attacker—2 feeds
10-12 04:35102.129.55[.]223Attacker—2 feeds
10-12 04:35102.129.52[.]160Attacker—2 feeds
10-12 04:35102.129.61[.]32Attacker—2 feeds
10-12 04:35102.64.32[.]238Attacker—2 feeds
10-12 04:35102.64.47[.]76Attacker—2 feeds
10-12 04:35102.129.59[.]117Attacker—2 feeds
10-12 04:35102.64.37[.]190Attacker—2 feeds
10-12 04:35102.129.53[.]34Attacker—2 feeds
10-12 04:35102.129.59[.]201Attacker—2 feeds
10-12 04:35102.64.40[.]74Attacker—2 feeds
10-12 04:35102.64.42[.]203Attacker—2 feeds
10-12 04:35102.64.41[.]61Attacker—2 feeds
10-12 04:35102.64.37[.]186Attacker—2 feeds
10-12 04:35102.64.42[.]193Attacker—2 feeds
10-12 04:35102.129.53[.]183Attacker—2 feeds
10-12 04:35102.129.62[.]161Attacker—2 feeds
10-12 04:35102.64.40[.]70Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.