Malicious IP Address Feed
Newly reported malicious IP addresses; 90,756 tracked.
10 indicators match · newest first · updated 2026-10-12 09:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 08:10 | 41.111.208[.]66 | Attacker | — | 3 feeds | |||
| 10-12 07:50 | 154.241.1[.]17 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 154.241.100[.]14 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 105.99.174[.]71 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 41.105.8[.]197 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 105.100.73[.]22 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 105.96.109[.]45 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 105.98.64[.]141 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 197.207.78[.]69 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 154.241.0[.]211 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.