Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

21 indicators match · newest first · updated 2026-10-12 11:45 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 11:1561.5.147[.]228Attacker—2 feeds
10-12 10:30202.47.51[.]174Attacker—1 feed
10-12 09:30103.18.15[.]242Attacker—1 feed
10-12 09:302400[:]adcc[:]1c1[:]2200[:]8c42[:]b30a[:]e79c[:]3cd7Attacker—1 feed
10-12 09:302400[:]adcc[:]1c1[:]2200[:]8dcc[:]1430[:]427b[:]84a0Attacker—1 feed
10-12 09:302400[:]adcc[:]1c1[:]2200[:]adb1[:]594d[:]dee7[:]9d46Attacker—1 feed
10-12 09:10202.47.34[.]118Attacker—1 feed
10-12 09:10101.53.230[.]88Attacker—1 feed
10-12 09:10202.47.40[.]36Attacker—1 feed
10-12 08:20202.47.36[.]44Attacker—2 feeds
10-12 08:202400[:]adcc[:]10a[:]2600[:]2cba[:]22d5[:]347[:]454dAttacker—1 feed
10-12 07:55202.47.44[.]203Attacker—1 feed
10-12 07:55192.140.149[.]163Attacker—1 feed
10-12 07:502400[:]adcc[:]10a[:]2600[:]2c36[:]2a89[:]9e18[:]d0dAttacker—1 feed
10-12 07:502400[:]adcc[:]10a[:]2600[:]ad05[:]f409[:]37cb[:]7330Attacker—1 feed
10-12 07:502400[:]adcc[:]10a[:]2600[:]cda9[:]7144[:]b5a2[:]460bAttacker—1 feed
10-12 04:35124.29.194[.]19Attacker—2 feeds
10-12 04:352400[:]adc7[:]4110[:]fc00[:]a456[:]d356[:]de88[:]18eaAttacker—2 feeds
10-12 04:35139.135.46[.]255Attacker—2 feeds
10-12 04:352400[:]adc1[:]1d8[:]6400[:]c9d8[:]7cbb[:]8999[:]c725Attacker—2 feeds
10-12 04:352400[:]adcc[:]1b6[:]ae00[:]55eb[:]ecde[:]46fa[:]d91cAttacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.