Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

22 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:20216.238.85[.]59Attacker—1 feed
10-12 08:10187.170.123[.]246Attacker—1 feed
10-12 08:10189.216.43[.]2Attacker—1 feed
10-12 05:35187.208.61[.]10Attacker—1 feed
10-12 04:35189.222.81[.]236Attacker—2 feeds
10-12 04:35201.116.10[.]58Attacker—2 feeds
10-12 04:35201.130.121[.]116Attacker—2 feeds
10-12 04:3538.194.249[.]139Attacker—2 feeds
10-12 04:35177.224.36[.]51Attacker—2 feeds
10-12 04:35189.218.223[.]99Attacker—2 feeds
10-12 04:35189.135.66[.]242Attacker—2 feeds
10-12 04:35201.143.98[.]117Attacker—2 feeds
10-12 04:35170.239.148[.]92Attacker—2 feeds
10-12 04:35187.154.96[.]215Attacker—3 feeds
10-12 04:35132.247.187[.]62Attacker—2 feeds
10-12 04:35189.250.90[.]51Attacker—2 feeds
10-12 04:35187.214.144[.]2Attacker—2 feeds
10-12 04:3538.65.137[.]102Attacker—2 feeds
10-12 04:35189.190.143[.]229Attacker—2 feeds
10-12 04:35187.225.98[.]100Attacker—1 feed
10-12 04:3538.65.175[.]40Attacker—2 feeds
10-12 04:35189.174.215[.]93Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.