Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

98 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	117.64.68[.]231	Attacker	—	1 feed
10-12 10:15	58.59.233[.]180	Attacker	—	1 feed
10-12 10:15	61.164.34[.]74	Attacker	—	1 feed
10-12 10:15	106.117.9[.]40	Attacker	—	1 feed
10-12 10:15	106.41.93[.]48	Attacker	—	1 feed
10-12 10:15	111.113.89[.]16	Attacker	—	1 feed
10-12 10:15	113.94.72[.]205	Attacker	—	1 feed
10-12 10:15	117.40.114[.]61	Attacker	—	1 feed
10-12 10:15	121.12.245[.]254	Attacker	—	1 feed
10-12 10:15	123.178.210[.]112	Attacker	—	1 feed
10-12 10:15	123.178.210[.]39	Attacker	—	1 feed
10-12 10:15	123.245.85[.]240	Attacker	—	1 feed
10-12 10:15	125.118.239[.]10	Attacker	—	1 feed
10-12 10:15	171.12.10[.]222	Attacker	—	1 feed
10-12 10:15	175.30.48[.]231	Attacker	—	1 feed
10-12 10:15	180.117.207[.]230	Attacker	—	1 feed
10-12 10:15	182.141.202[.]145	Attacker	—	1 feed
10-12 10:08	218.85.157[.]99	Malware		1 feed 8,026 sandbox samples
10-12 09:30	110.81.21[.]244	Attacker	—	1 feed
10-12 09:30	124.115.70[.]227	Attacker	—	1 feed
10-12 08:55	223.198.160[.]191	Attacker	—	1 feed
10-12 08:20	49.115.217[.]99	Attacker	—	1 feed
10-12 08:20	60.170.197[.]78	Attacker	—	1 feed
10-12 08:10	113.95.138[.]105	Attacker	—	3 feeds
10-12 08:10	1.83.125[.]9	Attacker	—	1 feed
10-12 08:10	58.212.237[.]155	Attacker	—	1 feed
10-12 08:10	58.212.237[.]243	Attacker	—	1 feed
10-12 08:10	58.212.237[.]251	Attacker	—	1 feed
10-12 08:10	58.212.237[.]70	Attacker	—	1 feed
10-12 08:10	58.59.233[.]136	Attacker	—	1 feed
10-12 08:10	59.53.166[.]27	Attacker	—	1 feed
10-12 08:10	60.166.82[.]88	Attacker	—	1 feed
10-12 08:10	110.179.81[.]214	Attacker	—	1 feed
10-12 08:10	111.113.88[.]105	Attacker	—	1 feed
10-12 08:10	111.113.88[.]191	Attacker	—	1 feed
10-12 08:10	111.113.88[.]251	Attacker	—	1 feed
10-12 08:10	111.113.89[.]189	Attacker	—	1 feed
10-12 08:10	113.220.235[.]28	Attacker	—	1 feed
10-12 08:10	123.178.210[.]114	Attacker	—	1 feed
10-12 08:10	123.178.210[.]162	Attacker	—	1 feed
10-12 08:10	123.178.210[.]230	Attacker	—	1 feed
10-12 08:10	123.245.85[.]125	Attacker	—	1 feed
10-12 08:10	123.245.85[.]170	Attacker	—	1 feed
10-12 08:10	125.84.251[.]0	Attacker	—	1 feed
10-12 08:10	144.123.76[.]88	Attacker	—	1 feed
10-12 08:10	171.104.83[.]150	Attacker	—	1 feed
10-12 08:10	171.108.182[.]242	Attacker	—	1 feed
10-12 08:10	171.8.138[.]172	Attacker	—	1 feed
10-12 08:10	180.139.162[.]47	Attacker	—	1 feed
10-12 08:10	180.140.129[.]15	Attacker	—	1 feed
10-12 08:10	182.138.158[.]252	Attacker	—	1 feed
10-12 08:10	183.31.95[.]75	Attacker	—	1 feed
10-12 08:10	220.174.31[.]136	Attacker	—	1 feed
10-12 08:10	220.185.75[.]44	Attacker	—	1 feed
10-12 08:10	221.226.171[.]227	Attacker	—	1 feed
10-12 07:15	182.35.248[.]227	Attacker	—	1 feed
10-12 06:41	114.139.224[.]140	Attacker	—	1 feed
10-12 06:10	1.83.125[.]169	Attacker	—	1 feed
10-12 06:10	1.83.125[.]221	Attacker	—	1 feed
10-12 06:10	14.105.27[.]17	Attacker	—	1 feed
10-12 06:10	58.212.237[.]145	Attacker	—	1 feed
10-12 06:10	58.44.47[.]235	Attacker	—	1 feed
10-12 06:10	59.57.253[.]178	Attacker	—	1 feed
10-12 06:10	60.166.83[.]237	Attacker	—	1 feed
10-12 06:10	60.166.83[.]61	Attacker	—	1 feed
10-12 06:10	106.117.111[.]194	Attacker	—	1 feed
10-12 06:10	111.113.88[.]138	Attacker	—	1 feed
10-12 06:10	115.224.69[.]113	Attacker	—	1 feed
10-12 06:10	117.40.113[.]233	Attacker	—	1 feed
10-12 06:10	122.240.128[.]58	Attacker	—	1 feed
10-12 06:10	123.245.85[.]50	Attacker	—	1 feed
10-12 06:10	171.213.186[.]184	Attacker	—	1 feed
10-12 06:10	175.30.48[.]105	Attacker	—	1 feed
10-12 06:10	180.140.129[.]21	Attacker	—	no longer listed
10-12 06:10	180.142.81[.]75	Attacker	—	1 feed
10-12 06:10	182.138.158[.]140	Attacker	—	1 feed
10-12 06:10	220.171.34[.]196	Attacker	—	1 feed
10-12 06:10	219.139.151[.]55	Attacker	—	1 feed
10-12 06:10	222.86.211[.]32	Attacker	—	1 feed
10-12 05:55	222.187.100[.]82	Attacker	—	2 feeds
10-12 05:35	59.42.180[.]12	Attacker	—	1 feed
10-12 04:35	14.155.236[.]159	Attacker	—	2 feeds
10-12 04:35	222.244.170[.]207	Attacker	—	2 feeds
10-12 04:35	202.98.62[.]18	Attacker	—	3 feeds
10-12 04:35	171.94.255[.]66	Attacker	—	2 feeds
10-12 04:35	110.81.21[.]231	Attacker	—	2 feeds
10-12 04:35	222.83.114[.]152	Attacker	—	2 feeds
10-12 04:35	110.81.22[.]244	Attacker	—	2 feeds
10-12 04:35	182.244.0[.]100	Attacker	—	2 feeds
10-12 04:35	49.67.34[.]196	Attacker	—	2 feeds
10-12 04:35	58.53.167[.]178	Attacker	—	2 feeds
10-12 04:35	124.225.204[.]105	Attacker	—	2 feeds
10-12 04:35	14.155.219[.]240	Attacker	—	2 feeds
10-12 04:35	117.39.43[.]9	Attacker	—	2 feeds
10-12 04:35	222.223.177[.]118	Attacker	—	2 feeds
10-12 04:35	220.175.70[.]81	Attacker	—	2 feeds
10-12 04:35	171.216.138[.]138	Attacker	—	2 feeds
10-12 04:35	61.190.16[.]210	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check