Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

79 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	112.86.225[.]94	Attacker	—	1 feed
10-12 10:15	36.249.208[.]109	Attacker	—	1 feed
10-12 10:15	42.177.70[.]81	Attacker	—	1 feed
10-12 10:15	101.68.5[.]89	Attacker	—	1 feed
10-12 10:15	118.212.121[.]119	Attacker	—	1 feed
10-12 10:15	121.29.149[.]141	Attacker	—	1 feed
10-12 10:15	124.88.113[.]188	Attacker	—	1 feed
10-12 10:15	182.119.231[.]144	Attacker	—	1 feed
10-12 10:15	182.54.23[.]48	Attacker	—	1 feed
10-12 10:15	220.250.10[.]65	Attacker	—	1 feed
10-12 08:20	116.177.174[.]231	Attacker	—	1 feed
10-12 08:10	1.24.16[.]159	Attacker	—	1 feed
10-12 08:10	1.24.16[.]73	Attacker	—	1 feed
10-12 08:10	1.28.234[.]6	Attacker	—	1 feed
10-12 08:10	27.207.182[.]175	Attacker	—	1 feed
10-12 08:10	27.215.50[.]54	Attacker	—	1 feed
10-12 08:10	27.222.101[.]176	Attacker	—	1 feed
10-12 08:10	43.248.108[.]120	Attacker	—	1 feed
10-12 08:10	112.195.202[.]157	Attacker	—	1 feed
10-12 08:10	118.212.123[.]172	Attacker	—	1 feed
10-12 08:10	121.22.11[.]33	Attacker	—	1 feed
10-12 08:10	121.29.149[.]37	Attacker	—	1 feed
10-12 08:10	122.96.28[.]174	Attacker	—	1 feed
10-12 08:10	124.88.113[.]168	Attacker	—	1 feed
10-12 08:10	124.88.113[.]65	Attacker	—	1 feed
10-12 08:10	139.170.72[.]144	Attacker	—	1 feed
10-12 08:10	139.170.72[.]156	Attacker	—	1 feed
10-12 08:10	139.170.72[.]210	Attacker	—	1 feed
10-12 08:10	139.170.72[.]79	Attacker	—	1 feed
10-12 08:10	139.170.73[.]248	Attacker	—	1 feed
10-12 08:10	139.170.73[.]55	Attacker	—	1 feed
10-12 08:10	153.0.251[.]227	Attacker	—	1 feed
10-12 08:10	182.54.23[.]125	Attacker	—	1 feed
10-12 08:10	182.54.23[.]240	Attacker	—	1 feed
10-12 08:10	182.54.23[.]44	Attacker	—	1 feed
10-12 08:10	220.202.112[.]12	Attacker	—	1 feed
10-12 08:10	220.202.112[.]35	Attacker	—	1 feed
10-12 07:55	122.114.69[.]235	Attacker	—	2 feeds
10-12 06:41	112.86.225[.]78	Attacker	—	1 feed
10-12 06:10	1.24.16[.]111	Attacker	—	1 feed
10-12 06:10	1.24.16[.]26	Attacker	—	1 feed
10-12 06:10	43.248.108[.]33	Attacker	—	2 feeds
10-12 06:10	58.19.140[.]95	Attacker	—	1 feed
10-12 06:10	110.53.55[.]35	Attacker	—	1 feed
10-12 06:10	111.85.83[.]114	Attacker	—	1 feed
10-12 06:10	120.7.216[.]71	Attacker	—	1 feed
10-12 06:10	122.96.28[.]90	Attacker	—	no longer listed
10-12 06:10	124.88.113[.]173	Attacker	—	1 feed
10-12 06:10	124.88.113[.]209	Attacker	—	1 feed
10-12 06:10	125.44.116[.]156	Attacker	—	1 feed
10-12 06:10	139.170.72[.]226	Attacker	—	1 feed
10-12 06:10	139.170.73[.]114	Attacker	—	no longer listed
10-12 06:10	182.54.23[.]147	Attacker	—	1 feed
10-12 06:10	182.54.23[.]166	Attacker	—	1 feed
10-12 06:10	220.202.112[.]63	Attacker	—	1 feed
10-12 06:10	220.202.112[.]99	Attacker	—	no longer listed
10-12 06:10	220.250.11[.]124	Attacker	—	1 feed
10-12 06:10	221.0.11[.]181	Attacker	—	1 feed
10-12 06:10	221.199.14[.]244	Attacker	—	1 feed
10-12 04:35	119.184.29[.]87	Attacker	—	2 feeds
10-12 04:35	124.88.113[.]216	Attacker	—	2 feeds
10-12 04:35	1.60.59[.]150	Attacker	—	2 feeds
10-12 04:35	101.74.154[.]151	Attacker	—	2 feeds
10-12 04:35	110.53.0[.]118	Attacker	—	2 feeds
10-12 04:35	112.86.225[.]58	Attacker	—	2 feeds
10-12 04:35	221.1.218[.]230	Attacker	—	2 feeds
10-12 04:35	220.250.11[.]131	Attacker	—	2 feeds
10-12 04:35	101.75.224[.]26	Attacker	—	2 feeds
10-12 04:35	115.57.194[.]92	Attacker	—	2 feeds
10-12 04:35	123.232.164[.]67	Attacker	—	2 feeds
10-12 04:35	116.179.37[.]95	Attacker	—	2 feeds
10-12 04:35	182.115.75[.]254	Attacker	—	2 feeds
10-12 04:35	119.114.63[.]12	Attacker	—	2 feeds
10-12 04:35	42.49.81[.]60	Attacker	—	2 feeds
10-12 04:35	122.188.208[.]21	Attacker	—	2 feeds
10-12 04:35	123.158.54[.]67	Attacker	—	2 feeds
10-12 04:35	42.49.82[.]10	Attacker	—	2 feeds
10-12 04:35	119.187.167[.]166	Attacker	—	2 feeds
10-12 04:35	175.153.221[.]109	Attacker	—	3 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check