Malicious IP Address Feed
Newly reported malicious IP addresses; 90,755 tracked.
52 indicators match · newest first · updated 2026-10-12 09:36 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:30 | 2001[:]41d0[:]304[:]300[:][:]c15d | Attacker | — | 1 feed | |||
| 10-12 09:30 | 46.105.81[.]160 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 2001[:]41d0[:]33a[:]a00[:][:]40e | Attacker | — | 1 feed | |||
| 10-12 08:55 | 45.157.112[.]2 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 79.135.105[.]90 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 216.180.246[.]42 | Attacker | — | 2 feeds | |||
| 10-12 08:10 | 91.231.89[.]69 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 163.171.133[.]172 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 54.36.60[.]45 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 82.127.132[.]221 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 85.217.140[.]51 | Attacker | — | 3 feeds | |||
| 10-12 06:55 | 137.74.246[.]152 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 194.70.234[.]219 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 212.129.34[.]236 | Attacker | — | 2 feeds | |||
| 10-12 06:10 | 91.231.89[.]171 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 91.231.89[.]173 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 91.231.89[.]67 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 85.217.140[.]9 | Attacker | — | 2 feeds | |||
| 10-12 05:35 | 178.20.55[.]182 | Attacker | — | 2 feeds | |||
| 10-12 05:35 | 51.68.111[.]205 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 92.222.108[.]104 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 91.196.152[.]104 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 216.180.246[.]156 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.239.124[.]102 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 195.86.24[.]119 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a09[:]bac5[:]34b4[:]1c82[:][:]2d7[:]2 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.239.124[.]105 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 82.64.16[.]65 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.134.79[.]139 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 195.86.24[.]116 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.32.148[.]62 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 87.91.7[.]23 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 216.180.246[.]235 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]8 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 45.134.79[.]157 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.239.124[.]116 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 138.199.16[.]133 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 78.116.50[.]2 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 216.180.246[.]110 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]139 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]145 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]176 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 2a02[:]4780[:]28[:]9afa[:][:]1 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.59.30[.]149 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 216.180.246[.]47 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]154 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 92.92.129[.]40 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 92.205.229[.]83 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 216.180.246[.]113 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 216.180.246[.]159 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 185.177.72[.]29 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 5.48.159[.]28 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.