Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

23 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:1543.98.193[.]190Attacker—1 feed
10-12 09:3047.77.217[.]63Attacker—2 feeds
10-12 08:2047.88.53[.]172Attacker—1 feed
10-12 07:5547.86.59[.]110Attacker—1 feed
10-12 07:5543.108.40[.]41Attacker—1 feed
10-12 07:5543.110.18[.]1Attacker—1 feed
10-12 07:558.219.212[.]202Attacker—1 feed
10-12 07:558.217.134[.]43Attacker—1 feed
10-12 07:558.213.156[.]11Attacker—1 feed
10-12 07:558.219.147[.]205Attacker—1 feed
10-12 07:5547.236.197[.]68Attacker—1 feed
10-12 07:5547.79.125[.]30Attacker—1 feed
10-12 07:558.210.235[.]224Attacker—1 feed
10-12 07:5543.103.2[.]241Attacker—1 feed
10-12 07:5047.245.117[.]142Attacker—1 feed
10-12 07:1547.236.174[.]33Attacker—1 feed
10-12 07:158.222.180[.]150Attacker—1 feed
10-12 06:4147.254.192[.]213Attacker—3 feeds
10-12 06:1043.98.189[.]56Attacker—1 feed
10-12 05:0043.108.21[.]21Attacker—1 feed
10-12 04:3543.108.39[.]232Attacker—2 feeds
10-12 04:3543.108.34[.]246Attacker—2 feeds
10-12 04:3543.99.7[.]152Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.