Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

54 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	218.149.228[.]165	Attacker	—	1 feed
10-12 10:30	220.87.51[.]245	Attacker	—	1 feed
10-12 10:15	211.43.97[.]233	Attacker	—	2 feeds
10-12 10:15	124.199.164[.]209	Attacker	—	1 feed
10-12 10:15	180.182.228[.]201	Attacker	—	1 feed
10-12 10:00	218.149.228[.]177	Attacker	—	1 feed
10-12 10:00	59.2.66[.]105	Attacker	—	1 feed
10-12 09:30	182.31.71[.]26	Attacker	—	1 feed
10-12 09:30	221.159.164[.]18	Attacker	—	1 feed
10-12 08:10	121.191.167[.]81	Attacker	—	1 feed
10-12 07:55	43.108.40[.]41	Attacker	—	1 feed
10-12 07:55	8.213.156[.]11	Attacker	—	1 feed
10-12 07:50	220.124.37[.]193	Attacker	—	1 feed
10-12 06:55	61.76.136[.]25	Attacker	—	3 feeds
10-12 06:10	58.230.189[.]186	Attacker	—	1 feed
10-12 06:10	121.185.91[.]80	Attacker	—	1 feed
10-12 06:10	221.160.226[.]82	Attacker	—	1 feed
10-12 06:10	118.40.55[.]91	Attacker	—	1 feed
10-12 06:10	175.207.203[.]204	Attacker	—	1 feed
10-12 06:10	59.26.147[.]247	Attacker	—	1 feed
10-12 05:35	222.103.13[.]176	Attacker	—	1 feed
10-12 05:00	119.195.48[.]94	Attacker	—	1 feed
10-12 05:00	43.108.21[.]21	Attacker	—	1 feed
10-12 04:35	211.107.234[.]83	Attacker	—	2 feeds
10-12 04:35	210.178.251[.]33	Attacker	—	2 feeds
10-12 04:35	211.63.184[.]9	Attacker	—	2 feeds
10-12 04:35	222.116.47[.]79	Attacker	—	2 feeds
10-12 04:35	43.108.39[.]232	Attacker	—	2 feeds
10-12 04:35	61.254.218[.]184	Attacker	—	2 feeds
10-12 04:35	112.133.90[.]88	Attacker	—	2 feeds
10-12 04:35	112.164.211[.]228	Attacker	—	2 feeds
10-12 04:35	119.206.78[.]158	Attacker	—	2 feeds
10-12 04:35	173.244.42[.]175	Attacker	—	3 feeds
10-12 04:35	210.105.238[.]245	Attacker	—	2 feeds
10-12 04:35	121.154.186[.]17	Attacker	—	2 feeds
10-12 04:35	220.124.221[.]84	Attacker	—	2 feeds
10-12 04:35	14.51.67[.]158	Attacker	—	2 feeds
10-12 04:35	220.90.167[.]202	Attacker	—	2 feeds
10-12 04:35	121.186.206[.]39	Attacker	—	2 feeds
10-12 04:35	112.164.239[.]83	Attacker	—	2 feeds
10-12 04:35	183.109.131[.]73	Attacker	—	2 feeds
10-12 04:35	221.162.63[.]153	Attacker	—	2 feeds
10-12 04:35	43.108.34[.]246	Attacker	—	2 feeds
10-12 04:35	183.106.237[.]120	Attacker	—	2 feeds
10-12 04:35	218.157.170[.]134	Attacker	—	2 feeds
10-12 04:35	221.152.103[.]163	Attacker	—	2 feeds
10-12 04:35	59.16.47[.]42	Attacker	—	2 feeds
10-12 04:35	222.121.178[.]235	Attacker	—	2 feeds
10-12 04:35	121.172.92[.]108	Attacker	—	2 feeds
10-12 04:35	14.46.77[.]198	Attacker	—	2 feeds
10-12 04:35	112.162.36[.]59	Attacker	—	2 feeds
10-12 04:35	121.153.75[.]162	Attacker	—	2 feeds
10-12 04:35	121.155.6[.]214	Attacker	—	2 feeds
10-12 04:35	221.159.163[.]36	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check