Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
47 indicators match · newest first · updated 2026-10-12 10:35 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 165.154.46[.]184 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 47.238.250[.]211 | Attacker | — | 1 feed | — | ||
| 10-12 09:30 | 185.218.86[.]21 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 20.24.84[.]218 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 218.188.196[.]90 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 162.222.194[.]138 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 35.215.152[.]196 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 40.83.91[.]59 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 77.67.26[.]103 | Attacker | — | 3 feeds | |||
| 10-12 08:20 | 58.177.166[.]134 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 47.86.59[.]110 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 8.217.134[.]43 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 8.210.235[.]224 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 43.103.2[.]241 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 165.154.1[.]144 | Attacker | — | 4 feeds | |||
| 10-12 06:10 | 165.154.63[.]38 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 45.138.12[.]65 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 193.24.211[.]219 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.67.26[.]76 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 143.14.189[.]160 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.161.234[.]54 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 61.244.37[.]196 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.187[.]66 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 118.193.44[.]243 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.138.12[.]52 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 193.176.211[.]163 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 193.176.211[.]188 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.92.55[.]47 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.226[.]188 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.216[.]157 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 165.154.71[.]78 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 165.154.7[.]74 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 38.175.195[.]232 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.138.12[.]34 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 123.58.220[.]223 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 118.26.39[.]18 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.132.147[.]209 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 72.57.238[.]251 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.99.7[.]152 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 103.185.249[.]26 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.210[.]14 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.172[.]183 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.161.214[.]13 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 165.154.67[.]220 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 122.10.117[.]181 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 217.60.248[.]173 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 161.81.89[.]214 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.