Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

16 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:55135.136.61[.]70Attacker—1 feed
10-12 08:5592.222.104[.]212Attacker—1 feed
10-12 08:2046.39.212[.]111Attacker—1 feed
10-12 08:10212.231.192[.]62Attacker—1 feed
10-12 05:0086.109.171[.]174Attacker—1 feed
10-12 04:352a09[:]bac5[:]3132[:]191[:][:]28[:]12bAttacker—2 feeds
10-12 04:352a09[:]bac1[:]2380[:]50[:][:]39f[:]bfAttacker—2 feeds
10-12 04:352a09[:]bac1[:]23a0[:]1138[:][:]39f[:]bfAttacker—2 feeds
10-12 04:3588.18.15[.]106Attacker—2 feeds
10-12 04:352.136.213[.]204Attacker—2 feeds
10-12 04:3589.46.88[.]248Attacker—2 feeds
10-12 04:35185.214.137[.]39Attacker—2 feeds
10-12 04:3589.128.44[.]92Attacker—3 feeds
10-12 04:3585.118.245[.]29Attacker—2 feeds
10-12 04:35185.74.240[.]90Attacker—2 feeds
10-12 04:35139.28.190[.]217Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.