Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
10 indicators match · newest first · updated 2026-10-12 11:45 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 11:15 | 221.217.95[.]158 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 111.199.197[.]33 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 114.252.202[.]127 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 111.192.53[.]33 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.121.75[.]126 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 114.253.6[.]84 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.121.103[.]42 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 111.193.242[.]242 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.118.128[.]147 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.121.121[.]123 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.