Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
74 indicators match · newest first · updated 2026-10-12 11:51 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 11:35 | 83.135.166[.]23 | Attacker | — | 1 feed | |||
| 10-12 11:35 | 83.135.173[.]113 | Attacker | — | 1 feed | |||
| 10-12 11:35 | 87.122.31[.]231 | Attacker | — | 1 feed | |||
| 10-12 11:35 | 94.134.107[.]109 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 83.135.10[.]39 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 88.130.221[.]178 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 89.244.87[.]196 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 89.245.180[.]70 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 92.116.69[.]223 | Attacker | — | 1 feed | |||
| 10-12 11:05 | 88.130.172[.]127 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 88.130.146[.]147 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 88.130.49[.]18 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 89.244.87[.]225 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 89.244.92[.]191 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 89.245.22[.]90 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 2001[:]9e8[:]5056[:]f300[:]88e2[:]50b1[:]6f0e[:]2793 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 87.122.26[.]148 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 87.123.245[.]160 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 83.135.3[.]20 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 87.123.244[.]74 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 89.244.122[.]73 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 89.245.181[.]185 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 92.116.180[.]207 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 87.122.22[.]67 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 89.246.162[.]72 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 89.247.161[.]191 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 89.247.254[.]87 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 94.134.96[.]200 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 87.122.25[.]141 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 89.247.228[.]129 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 83.135.167[.]214 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 83.135.9[.]120 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 87.122.30[.]211 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 89.244.123[.]147 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 89.244.84[.]193 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 89.246.164[.]220 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 94.134.193[.]39 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 2001[:]9e8[:]dd16[:]2800[:]7cf9[:]3182[:]4a06[:]7d83 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 62.214.249[.]185 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 87.122.16[.]125 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 89.245.177[.]1 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 89.246.103[.]183 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 89.246.160[.]50 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 94.134.178[.]200 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 87.122.62[.]49 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 87.123.243[.]130 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 88.130.219[.]38 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 89.244.89[.]104 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 89.247.168[.]219 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 88.130.157[.]154 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 89.246.39[.]8 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 83.135.1[.]112 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 87.122.16[.]88 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 87.122.43[.]107 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 88.130.104[.]157 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 88.130.217[.]47 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 89.247.252[.]175 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 94.134.111[.]120 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 88.130.155[.]162 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 94.134.176[.]170 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 109.250.85[.]162 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 83.135.188[.]122 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 88.130.144[.]210 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 88.130.150[.]10 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 88.130.174[.]213 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 88.130.220[.]55 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 89.247.167[.]180 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 89.247.229[.]227 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 94.134.183[.]246 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 89.245.178[.]60 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 83.135.188[.]54 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 83.135.190[.]156 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 89.247.157[.]199 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 89.247.229[.]238 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.