Malicious IP Address Feed

Newly reported malicious IP addresses; 90,756 tracked.

18 indicators match · newest first · updated 2026-10-12 09:40 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:20116.97.109[.]120Attacker—1 feed
10-12 06:41115.79.24[.]90Attacker—1 feed
10-12 06:10117.6.63[.]135Attacker—1 feed
10-12 04:35171.238.24[.]170Attacker—2 feeds
10-12 04:35115.77.57[.]26Attacker—2 feeds
10-12 04:35116.98.218[.]147Attacker—2 feeds
10-12 04:35171.250.215[.]103Attacker—3 feeds
10-12 04:35171.225.139[.]147Attacker—2 feeds
10-12 04:35171.243.148[.]90Attacker—2 feeds
10-12 04:35171.231.176[.]253Attacker—2 feeds
10-12 04:35116.101.14[.]169Attacker—2 feeds
10-12 04:3527.74.71[.]111Attacker—2 feeds
10-12 04:352402[:]800[:]6139[:]35d4[:]9905[:]366e[:]298e[:]47a2Attacker—2 feeds
10-12 04:35171.252.189[.]37Attacker—2 feeds
10-12 04:35116.104.87[.]58Attacker—3 feeds
10-12 04:3527.79.41[.]27Attacker—2 feeds
10-12 04:35171.244.38[.]3Attacker—2 feeds
10-12 04:35125.234.213[.]17Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.