Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
138 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 167.99.209[.]139 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 34.7.93[.]86 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 45.8.17[.]9 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 142.93.134[.]19 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 142.93.235[.]143 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 145.90.8[.]9 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 146.190.21[.]254 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 165.22.193[.]86 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 185.242.226[.]64 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 178.16.53[.]247 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 34.12.225[.]42 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 89.46.223[.]59 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 91.92.242[.]121 | Attacker | — | 1 feed | |||
| 10-12 09:10 | 45.9.2[.]178 | Attacker | — | 3 feeds | |||
| 10-12 08:55 | 2a01[:]4020[:]2[:]b[:]101[:][:]11 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 2a01[:]4020[:]2[:]b[:]101[:][:]248 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 2a01[:]4020[:]2[:]b[:]101[:][:]2bb | Attacker | — | 1 feed | |||
| 10-12 08:55 | 2a01[:]4020[:]2[:]b[:]101[:][:]633 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 45.156.87[.]28 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]242 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]479 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]687 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 2a01[:]4020[:]2[:]b[:]102[:][:]79a | Attacker | — | 1 feed | |||
| 10-12 08:10 | 104.248.192[.]7 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 152.42.138[.]189 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 157.245.73[.]143 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.35.94[.]154 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 164.92.219[.]13 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 174.138.3[.]141 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 178.128.255[.]217 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 45.156.128[.]71 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 213.152.161[.]130 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 130.49.79[.]161 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 206.54.181[.]21 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 34.13.197[.]159 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 159.65.197[.]5 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 2a10[:]3c0[:]3[:]0[:]1[:]31[:]0[:]2 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 172.235.168[.]96 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 64.227.65[.]24 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 68.183.14[.]68 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 104.248.199[.]239 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 104.248.93[.]115 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 134.209.95[.]137 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 142.93.129[.]217 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 146.190.22[.]46 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 159.223.208[.]99 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 164.92.159[.]92 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.172.40[.]251 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.172.40[.]29 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.172.43[.]72 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 167.99.221[.]87 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 178.128.252[.]170 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 178.128.253[.]153 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 206.189.111[.]55 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 206.189.15[.]147 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 209.38.108[.]205 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 104.23.170[.]168 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 172.71.182[.]197 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 172.71.182[.]99 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2400[:]cb00[:]555[:]1000[:]8652[:]7ae9[:]a249[:]4ad3 | Attacker | — | 1 feed | — | ||
| 10-12 06:10 | 2400[:]cb00[:]555[:]1000[:]9373[:]607c[:]be1c[:]6fcf | Attacker | — | 1 feed | — | ||
| 10-12 06:10 | 2400[:]cb00[:]996[:]1000[:]214f[:]8fc9[:]6726[:]8834 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2400[:]cb00[:]996[:]1000[:]4bde[:]af76[:]59bb[:]5c0f | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2400[:]cb00[:]996[:]1000[:]93fc[:]25bb[:]e705[:]b8d6 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2400[:]cb00[:]996[:]1000[:]f0c8[:]cca4[:]fa25[:]481b | Attacker | — | 1 feed | |||
| 10-12 06:10 | 34.6.54[.]54 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 185.242.226[.]11 | Attacker | — | 2 feeds | |||
| 10-12 05:55 | 109.160.32[.]40 | Attacker | — | 3 feeds | |||
| 10-12 05:55 | 86.54.28[.]27 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 104.248.193[.]172 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 176.65.139[.]231 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 192.87.28[.]82 | Attacker | — | 2 feeds 19 sandbox samples | |||
| 10-12 04:35 | 192.87.28[.]28 | Attacker | — | 2 feeds 21 sandbox samples | |||
| 10-12 04:35 | 45.156.128[.]148 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 176.65.149[.]188 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 192.42.116[.]144 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 192.42.116[.]54 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 192.42.116[.]99 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]101[:][:]255 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]148 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]196 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]19d | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]1c5 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]1fc | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]234 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]2c9 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]2ec | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]32f | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]33a | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]357 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]3d5 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]3e8 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]3f5 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]42d | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]541 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]5f9 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]65e | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]70c | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]71c | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2a01[:]4020[:]2[:]b[:]102[:][:]761 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.