Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

307 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	103.122.15[.]164	Attacker	—	1 feed
10-12 09:30	103.167.194[.]138	Attacker	—	1 feed
10-12 09:30	106.0.40[.]253	Attacker	—	1 feed
10-12 09:30	122.163.121[.]16	Attacker	—	1 feed
10-12 09:30	125.23.220[.]130	Attacker	—	1 feed
10-12 09:30	157.15.235[.]102	Attacker	—	1 feed
10-12 09:30	2402[:]a00[:]403[:]1cc2[:]a51b[:]b784[:]6443[:]d8dc	Attacker	—	1 feed
10-12 09:30	2409[:]40d2[:]6b[:]a741[:]807f[:]2a83[:]cba2[:]4850	Attacker	—	1 feed
10-12 09:30	43.252.194[.]250	Attacker	—	1 feed
10-12 09:30	47.30.54[.]145	Attacker	—	1 feed
10-12 09:30	49.36.138[.]240	Attacker	—	1 feed
10-12 09:10	137.97.80[.]58	Attacker	—	2 feeds
10-12 09:10	103.66.98[.]192	Attacker	—	1 feed
10-12 09:10	150.107.9[.]150	Attacker	—	1 feed
10-12 09:10	210.212.97[.]243	Attacker	—	1 feed
10-12 09:10	144.48.48[.]73	Attacker	—	1 feed
10-12 09:10	103.91.72[.]217	Attacker	—	1 feed
10-12 09:10	122.160.128[.]65	Attacker	—	1 feed
10-12 08:55	103.211.15[.]74	Attacker	—	1 feed
10-12 08:55	117.213.134[.]111	Attacker	—	1 feed
10-12 08:55	117.223.189[.]239	Attacker	—	1 feed
10-12 08:55	122.162.146[.]141	Attacker	—	1 feed
10-12 08:55	152.58.37[.]115	Attacker	—	1 feed
10-12 08:55	2401[:]4900[:]1cb5[:]1bfb[:]25ff[:]4d80[:]686f[:]819c	Attacker	—	1 feed
10-12 08:55	2409[:]4090[:]808f[:]9403[:]8121[:]a100[:]4c9[:]5170	Attacker	—	1 feed
10-12 08:55	2409[:]4090[:]808f[:]9403[:]ec23[:]fab5[:]b9e9[:]b553	Attacker	—	1 feed
10-12 08:55	49.47.133[.]139	Attacker	—	1 feed
10-12 08:55	111.223.3[.]190	Attacker	—	1 feed
10-12 08:55	2401[:]4900[:]360a[:]1914[:]7df5[:]840a[:]d610[:]f984	Attacker	—	1 feed
10-12 08:20	103.172.210[.]133	Attacker	—	1 feed
10-12 08:20	103.183.90[.]233	Attacker	—	1 feed
10-12 08:20	103.74.220[.]10	Attacker	—	1 feed
10-12 08:20	106.219.227[.]226	Attacker	—	1 feed
10-12 08:20	117.194.124[.]248	Attacker	—	1 feed
10-12 08:20	122.168.2[.]247	Attacker	—	1 feed
10-12 08:20	122.168.4[.]49	Attacker	—	1 feed
10-12 08:20	122.187.229[.]160	Attacker	—	1 feed
10-12 08:20	14.99.117[.]118	Attacker	—	1 feed
10-12 08:20	152.59.146[.]217	Attacker	—	1 feed
10-12 08:20	157.119.214[.]142	Attacker	—	1 feed
10-12 08:20	223.180.182[.]165	Attacker	—	1 feed
10-12 08:20	223.184.152[.]74	Attacker	—	1 feed
10-12 08:20	2401[:]4900[:]d148[:]c31f[:]4c75[:]2bc7[:]29c5[:]9027	Attacker	—	1 feed
10-12 08:20	2409[:]40d0[:]1398[:]a19e[:]b4c1[:]95c2[:]6e58[:]9551	Attacker	—	1 feed
10-12 08:20	49.37.73[.]167	Attacker	—	1 feed
10-12 08:10	168.144.112[.]61	Attacker	—	1 feed
10-12 08:10	168.144.95[.]14	Attacker	—	1 feed
10-12 08:10	206.189.128[.]250	Attacker	—	1 feed
10-12 07:55	66.116.251[.]167	Attacker	—	1 feed
10-12 07:55	14.139.59[.]212	Attacker	—	1 feed
10-12 07:55	103.86.173[.]95	Attacker	—	1 feed
10-12 07:50	1.38.153[.]175	Attacker	—	1 feed
10-12 07:50	1.38.43[.]124	Attacker	—	1 feed
10-12 07:50	103.123.234[.]219	Attacker	—	1 feed
10-12 07:50	103.30.80[.]210	Attacker	—	1 feed
10-12 07:50	103.85.132[.]164	Attacker	—	1 feed
10-12 07:50	103.85.205[.]4	Attacker	—	1 feed
10-12 07:50	106.202.69[.]162	Attacker	—	1 feed
10-12 07:50	117.243.127[.]240	Attacker	—	1 feed
10-12 07:50	122.187.230[.]154	Attacker	—	1 feed
10-12 07:50	16.113.64[.]237	Attacker	—	1 feed
10-12 07:50	160.250.80[.]197	Attacker	—	2 feeds
10-12 07:50	203.194.105[.]248	Attacker	—	1 feed
10-12 07:50	2401[:]4900[:]a8b1[:]6677[:]65b8[:]c6fb[:]fad2[:]6411	Attacker	—	1 feed
10-12 07:50	2405[:]201[:]901b[:]6050[:]20c3[:]388c[:]73cd[:]d99a	Attacker	—	1 feed
10-12 07:50	2409[:]40d2[:]10d9[:]ca91[:]b916[:]16a8[:]6304[:]e601	Attacker	—	1 feed
10-12 07:50	42.104.213[.]120	Attacker	—	1 feed
10-12 07:50	49.205.98[.]185	Attacker	—	1 feed
10-12 07:15	112.79.18[.]6	Attacker	—	1 feed
10-12 07:15	122.179.95[.]157	Attacker	—	1 feed
10-12 07:15	163.223.102[.]143	Attacker	—	1 feed
10-12 07:15	2401[:]4900[:]8828[:]469a[:]39cd[:]588a[:]dc3[:]fccf	Attacker	—	1 feed
10-12 07:15	2401[:]4900[:]a8b1[:]6677[:]f9d1[:]7549[:]de4d[:]8622	Attacker	—	1 feed
10-12 07:15	2401[:]4900[:]b55c[:]304e[:]c[:]6c77[:]fb44[:]e2ab	Attacker	—	1 feed
10-12 07:15	2409[:]40d2[:]12ac[:]b76f[:]548a[:]7d80[:]f8e5[:]8ffa	Attacker	—	1 feed
10-12 07:15	2409[:]40f4[:]1116[:]d2da[:]c940[:]52c3[:]e904[:]4176	Attacker	—	1 feed
10-12 07:15	47.15.216[.]149	Attacker	—	1 feed
10-12 06:55	117.250.231[.]131	Attacker	—	1 feed
10-12 06:55	183.83.235[.]77	Attacker	—	1 feed
10-12 06:55	103.191.203[.]95	Attacker	—	1 feed
10-12 06:41	103.191.89[.]252	Attacker	—	2 feeds
10-12 06:41	103.206.58[.]82	Attacker	—	2 feeds
10-12 06:41	122.187.208[.]2	Attacker	—	1 feed
10-12 06:41	160.30.82[.]42	Attacker	—	1 feed
10-12 06:41	202.0.148[.]194	Attacker	—	1 feed
10-12 06:41	202.141.121[.]50	Attacker	—	1 feed
10-12 06:41	2406[:]b400[:]28[:]6083[:]85df[:]9b9c[:]a5f1[:]5da2	Attacker	—	1 feed
10-12 06:41	45.251.236[.]216	Attacker	—	1 feed
10-12 06:41	49.248.251[.]106	Attacker	—	1 feed
10-12 06:10	103.203.173[.]190	Attacker	—	1 feed
10-12 06:10	103.61.224[.]252	Attacker	—	1 feed
10-12 06:10	134.209.158[.]20	Attacker	—	1 feed
10-12 06:10	1.38.158[.]48	Attacker	—	1 feed
10-12 06:10	103.208.68[.]17	Attacker	—	1 feed
10-12 06:10	112.79.13[.]124	Attacker	—	1 feed
10-12 06:10	116.72.152[.]197	Attacker	—	1 feed
10-12 06:10	117.193.25[.]194	Attacker	—	1 feed
10-12 06:10	117.209.92[.]52	Attacker	—	1 feed
10-12 06:10	119.252.194[.]140	Attacker	—	1 feed
10-12 06:10	122.179.90[.]73	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check