Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
48 indicators match · newest first · updated 2026-10-12 11:51 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 11:15 | 39.100.82[.]83 | Attacker | — | 1 feed | |||
| 10-12 11:15 | 39.100.82[.]120 | Attacker | — | 1 feed | |||
| 10-12 10:10 | 120.55.64[.]167 | Attacker | — | 1 feed | |||
| 10-12 10:10 | 121.43.118[.]50 | Attacker | — | 1 feed | |||
| 10-12 10:10 | 47.95.208[.]69 | Attacker | — | 1 feed | |||
| 10-12 09:10 | 121.40.44[.]214 | Attacker | — | 1 feed | |||
| 10-12 09:10 | 121.43.154[.]179 | Attacker | — | 1 feed | |||
| 10-12 09:10 | 47.95.210[.]171 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 8.130.187[.]77 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 47.96.114[.]87 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 8.148.230[.]40 | Attacker | — | 2 feeds | |||
| 10-12 07:55 | 8.166.117[.]177 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 121.40.43[.]154 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 121.199.173[.]1 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 114.55.232[.]213 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 121.43.118[.]55 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 121.43.116[.]91 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 139.224.217[.]148 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 123.56.57[.]30 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 8.138.165[.]73 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 121.41.167[.]162 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 47.95.194[.]193 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 47.95.211[.]134 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 121.43.101[.]30 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 47.104.174[.]50 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 39.105.26[.]204 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 121.199.5[.]102 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 121.41.168[.]99 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 182.92.236[.]135 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 121.43.116[.]110 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 121.41.166[.]50 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 121.40.45[.]43 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 120.27.150[.]95 | Attacker | — | 1 feed | |||
| 10-12 04:50 | 39.100.75[.]215 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 47.112.213[.]113 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 8.134.49[.]64 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 47.120.52[.]161 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 8.130.128[.]55 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 8.134.80[.]200 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 39.106.169[.]235 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 8.134.128[.]211 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 120.27.8[.]183 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 47.95.109[.]57 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 8.134.163[.]87 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 47.100.222[.]52 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 47.120.4[.]180 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 47.109.104[.]63 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.56.24[.]159 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.