Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

19 indicators match · newest first · updated 2026-10-12 11:45 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 11:05197.39.114[.]128Attacker—1 feed
10-12 10:1541.36.34[.]85Attacker—1 feed
10-12 10:15196.219.43[.]245Attacker—1 feed
10-12 08:55154.176.118[.]89Attacker—1 feed
10-12 08:5541.44.128[.]95Attacker—1 feed
10-12 04:35156.215.160[.]135Attacker—2 feeds
10-12 04:35197.34.46[.]238Attacker—2 feeds
10-12 04:3541.235.174[.]126Attacker—2 feeds
10-12 04:3541.41.106[.]176Attacker—2 feeds
10-12 04:35197.35.38[.]233Attacker—2 feeds
10-12 04:3541.235.151[.]230Attacker—2 feeds
10-12 04:35156.204.234[.]152Attacker—2 feeds
10-12 04:3581.10.98[.]82Attacker—2 feeds
10-12 04:35154.177.167[.]66Attacker—2 feeds
10-12 04:35156.214.4[.]49Attacker—2 feeds
10-12 04:35156.216.183[.]16Attacker—2 feeds
10-12 04:35154.177.159[.]28Attacker—2 feeds
10-12 04:3541.35.113[.]242Attacker—2 feeds
10-12 04:35196.202.54[.]103Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.