Malicious IP Address Feed

Newly reported malicious IP addresses; 90,418 tracked.

23 indicators match · newest first · updated 2026-10-12 11:31 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:151.145.29[.]140Attacker—1 feed
10-12 10:0054.252.219[.]215Attacker—1 feed
10-12 09:30134.199.166[.]29Attacker—1 feed
10-12 09:3034.1.176[.]177Attacker—1 feed
10-12 08:20170.64.203[.]248Attacker—1 feed
10-12 07:5513.238.55[.]255Attacker—2 feeds
10-12 07:15110.142.146[.]188Attacker—1 feed
10-12 07:15170.64.164[.]138Attacker—1 feed
10-12 06:41120.157.79[.]189Attacker—1 feed
10-12 05:55170.64.174[.]95Attacker—1 feed
10-12 05:55170.64.165[.]134Attacker—1 feed
10-12 05:00168.144.161[.]127Attacker—1 feed
10-12 05:00168.144.162[.]30Attacker—1 feed
10-12 05:00168.144.165[.]69Attacker—1 feed
10-12 05:00170.64.198[.]250Attacker—1 feed
10-12 05:00209.38.17[.]150Attacker—1 feed
10-12 05:00209.38.90[.]16Attacker—1 feed
10-12 04:3515.135.163[.]9Attacker—2 feeds
10-12 04:35202.67.92[.]254Attacker—2 feeds
10-12 04:352001[:]8003[:]7827[:]6b01[:]a1cc[:]7c59[:]1ef3[:]b769Attacker—2 feeds
10-12 04:3560.226.229[.]92Attacker—2 feeds
10-12 04:35168.144.172[.]171Attacker—2 feeds
10-12 04:35134.199.158[.]34Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.