Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

77 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	101.128.96[.]107	Attacker	—	1 feed
10-12 10:10	48.193.42[.]209	Attacker	—	1 feed
10-12 09:30	103.228.26[.]38	Attacker	—	1 feed
10-12 09:30	180.241.240[.]23	Attacker	—	1 feed
10-12 09:30	180.241.241[.]8	Attacker	—	1 feed
10-12 09:30	36.75.4[.]115	Attacker	—	1 feed
10-12 09:30	9.154.224[.]102	Attacker	—	1 feed
10-12 08:55	103.190.47[.]39	Attacker	—	1 feed
10-12 08:55	180.241.242[.]3	Attacker	—	1 feed
10-12 08:55	180.241.243[.]110	Attacker	—	1 feed
10-12 08:55	180.244.0[.]79	Attacker	—	1 feed
10-12 08:55	36.90.149[.]144	Attacker	—	1 feed
10-12 08:20	2404[:]c0[:]d402[:]170f[:]826[:]b3c9[:]86e6[:]1a53	Attacker	—	1 feed
10-12 08:20	36.73.143[.]0	Attacker	—	1 feed
10-12 08:20	36.78.8[.]22	Attacker	—	1 feed
10-12 07:55	175.158.55[.]114	Attacker	—	1 feed
10-12 07:50	2001[:]448a[:]5040[:]cdf3[:]6cf2[:]8fce[:]2a10[:]71ba	Attacker	—	1 feed
10-12 07:15	36.80.164[.]180	Attacker	—	1 feed
10-12 06:41	114.5.209[.]74	Attacker	—	1 feed
10-12 06:41	182.23.5[.]226	Attacker	—	2 feeds
10-12 06:41	36.80.163[.]201	Attacker	—	1 feed
10-12 06:10	103.126.172[.]146	Attacker	—	1 feed
10-12 06:10	103.159.221[.]207	Attacker	—	2 feeds
10-12 06:10	182.253.89[.]114	Attacker	—	1 feed
10-12 06:10	36.83.50[.]30	Attacker	—	1 feed
10-12 05:55	180.243.200[.]68	Attacker	—	2 feeds
10-12 05:35	142.111.15[.]137	Attacker	—	1 feed
10-12 05:35	163.7.9[.]194	Attacker	—	1 feed
10-12 05:35	182.3.51[.]131	Attacker	—	1 feed
10-12 04:35	38.253.224[.]56	Attacker	—	2 feeds
10-12 04:35	103.125.88[.]6	Attacker	—	3 feeds
10-12 04:35	182.9.48[.]23	Attacker	—	2 feeds
10-12 04:35	36.64.148[.]186	Attacker	—	3 feeds
10-12 04:35	125.162.214[.]119	Attacker	—	2 feeds
10-12 04:35	192.42.85[.]90	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]113	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]117	Attacker	—	2 feeds
10-12 04:35	160.19.166[.]160	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]112	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]114	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]115	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]116	Attacker	—	2 feeds
10-12 04:35	138.252.92[.]118	Attacker	—	2 feeds
10-12 04:35	125.165.111[.]72	Attacker	—	2 feeds
10-12 04:35	182.10.129[.]202	Attacker	—	2 feeds
10-12 04:35	103.234.255[.]178	Attacker	—	2 feeds
10-12 04:35	110.137.131[.]55	Attacker	—	2 feeds
10-12 04:35	203.17.81[.]36	Attacker	—	2 feeds
10-12 04:35	218.33.80[.]66	Attacker	—	2 feeds
10-12 04:35	39.194.2[.]130	Attacker	—	2 feeds
10-12 04:35	182.8.211[.]51	Attacker	—	2 feeds
10-12 04:35	202.65.238[.]55	Attacker	—	2 feeds
10-12 04:35	202.154.19[.]177	Attacker	—	2 feeds
10-12 04:35	103.139.11[.]214	Attacker	—	2 feeds
10-12 04:35	103.160.205[.]37	Attacker	—	3 feeds
10-12 04:35	162.4.96[.]222	Attacker	—	2 feeds
10-12 04:35	182.8.131[.]15	Attacker	—	2 feeds
10-12 04:35	182.10.97[.]67	Attacker	—	2 feeds
10-12 04:35	182.8.249[.]47	Attacker	—	2 feeds
10-12 04:35	157.66.19[.]105	Attacker	—	2 feeds
10-12 04:35	153.76.64[.]148	Attacker	—	3 feeds
10-12 04:35	39.194.1[.]58	Attacker	—	2 feeds
10-12 04:35	180.241.36[.]150	Attacker	—	2 feeds
10-12 04:35	180.241.39[.]87	Attacker	—	2 feeds
10-12 04:35	180.246.205[.]2	Attacker	—	2 feeds
10-12 04:35	36.75.103[.]103	Attacker	—	2 feeds
10-12 04:35	36.75.103[.]192	Attacker	—	2 feeds
10-12 04:35	103.59.160[.]84	Attacker	—	2 feeds
10-12 04:35	202.169.247[.]6	Attacker	—	2 feeds
10-12 04:35	2402[:]8780[:]1019[:]2da4[:]60d9[:]9b53[:]1f62[:]60a9	Attacker	—	2 feeds
10-12 04:35	182.10.98[.]58	Attacker	—	2 feeds
10-12 04:35	180.252.174[.]196	Attacker	—	2 feeds
10-12 04:35	103.77.106[.]44	Attacker	—	2 feeds
10-12 04:35	117.18.21[.]115	Attacker	—	2 feeds
10-12 04:35	103.133.62[.]30	Attacker	—	2 feeds
10-12 04:35	34.101.200[.]201	Attacker	—	2 feeds
10-12 04:35	202.46.68[.]113	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check