Malicious IP Address Feed
Newly reported malicious IP addresses; 90,756 tracked.
24 indicators match · newest first · updated 2026-10-12 09:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:10 | 210.212.97[.]243 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 117.213.134[.]111 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 117.223.189[.]239 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 117.194.124[.]248 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 117.243.127[.]240 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 117.250.231[.]131 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 117.193.25[.]194 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 117.209.92[.]52 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 117.221.139[.]18 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 117.242.44[.]142 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 59.178.61[.]136 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 59.178.61[.]231 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.222.6[.]66 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.195.74[.]217 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.196.253[.]208 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.248.249[.]126 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.215.155[.]227 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.194.61[.]142 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.253.195[.]232 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.211.31[.]124 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 59.92.136[.]85 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.195.200[.]115 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.250.248[.]123 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 117.247.81[.]154 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.