Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

47 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:30165.154.46[.]184Attacker—1 feed
10-12 10:3047.238.250[.]211Attacker—1 feed —
10-12 09:30185.218.86[.]21Attacker—1 feed
10-12 09:3020.24.84[.]218Attacker—1 feed
10-12 09:30218.188.196[.]90Attacker—1 feed
10-12 08:55162.222.194[.]138Attacker—1 feed
10-12 08:5535.215.152[.]196Attacker—1 feed
10-12 08:5540.83.91[.]59Attacker—1 feed
10-12 08:5577.67.26[.]103Attacker—3 feeds
10-12 08:2058.177.166[.]134Attacker—1 feed
10-12 07:5547.86.59[.]110Attacker—1 feed
10-12 07:558.217.134[.]43Attacker—1 feed
10-12 07:558.210.235[.]224Attacker—1 feed
10-12 07:5543.103.2[.]241Attacker—1 feed
10-12 06:55165.154.1[.]144Attacker—4 feeds
10-12 06:10165.154.63[.]38Attacker—1 feed
10-12 06:1045.138.12[.]65Attacker—1 feed
10-12 05:00193.24.211[.]219Attacker—2 feeds
10-12 04:3577.67.26[.]76Attacker—3 feeds
10-12 04:35143.14.189[.]160Attacker—2 feeds
10-12 04:3543.161.234[.]54Attacker—2 feeds
10-12 04:3561.244.37[.]196Attacker—2 feeds
10-12 04:35152.32.187[.]66Attacker—2 feeds
10-12 04:35118.193.44[.]243Attacker—2 feeds
10-12 04:3545.138.12[.]52Attacker—2 feeds
10-12 04:35193.176.211[.]163Attacker—2 feeds
10-12 04:35193.176.211[.]188Attacker—2 feeds
10-12 04:3534.92.55[.]47Attacker—2 feeds
10-12 04:35152.32.226[.]188Attacker—2 feeds
10-12 04:35152.32.216[.]157Attacker—2 feeds
10-12 04:35165.154.71[.]78Attacker—2 feeds
10-12 04:35165.154.7[.]74Attacker—2 feeds
10-12 04:3538.175.195[.]232Attacker—2 feeds
10-12 04:3545.138.12[.]34Attacker—2 feeds
10-12 04:35123.58.220[.]223Attacker—2 feeds
10-12 04:35118.26.39[.]18Attacker—2 feeds
10-12 04:3543.132.147[.]209Attacker—2 feeds
10-12 04:3572.57.238[.]251Attacker—2 feeds
10-12 04:3543.99.7[.]152Attacker—2 feeds
10-12 04:35103.185.249[.]26Attacker—2 feeds
10-12 04:35152.32.210[.]14Attacker—2 feeds
10-12 04:35152.32.172[.]183Attacker—2 feeds
10-12 04:3543.161.214[.]13Attacker—2 feeds
10-12 04:35165.154.67[.]220Attacker—2 feeds
10-12 04:35122.10.117[.]181Attacker—2 feeds
10-12 04:35217.60.248[.]173Attacker—2 feeds
10-12 04:35161.81.89[.]214Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.