Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

14 indicators match · newest first · updated 2026-10-12 11:45 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:3037.221.157[.]68Attacker—1 feed
10-12 07:1537.221.144[.]111Attacker—1 feed
10-12 07:1537.221.149[.]162Attacker—1 feed
10-12 05:3537.221.132[.]134Attacker—1 feed
10-12 04:3537.221.141[.]166Attacker—2 feeds
10-12 04:3537.221.147[.]6Attacker—2 feeds
10-12 04:3537.221.128[.]69Attacker—2 feeds
10-12 04:3537.221.131[.]24Attacker—2 feeds
10-12 04:3537.221.153[.]144Attacker—2 feeds
10-12 04:3537.221.133[.]140Attacker—2 feeds
10-12 04:3537.221.133[.]88Attacker—2 feeds
10-12 04:3537.221.137[.]186Attacker—2 feeds
10-12 04:3537.221.153[.]252Attacker—2 feeds
10-12 04:3537.221.156[.]65Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.