Malicious IP Address Feed
Newly reported malicious IP addresses; 90,755 tracked.
27 indicators match · newest first · updated 2026-10-12 09:36 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 07:15 | 180.190.172[.]245 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 180.190.173[.]107 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 49.151.160[.]149 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 180.194.203[.]177 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 136.158.50[.]176 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 124.217.114[.]65 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 180.194.203[.]241 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 112.209.77[.]41 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2405[:]8d40[:]48c9[:]c921[:]fca5[:]256f[:]2dfc[:]ef90 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 2001[:]4455[:]577[:]9a00[:]8d3d[:]8382[:]8ba8[:]9da8 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 2001[:]4456[:]c6e[:]8a00[:]2555[:]5d61[:]2dc1[:]aa2e | Attacker | — | 1 feed | |||
| 10-12 04:50 | 160.187.221[.]25 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 149.30.146[.]8 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 180.191.77[.]85 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 124.107.183[.]6 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 112.207.164[.]66 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 136.158.39[.]231 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 138.84.72[.]180 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 138.84.129[.]27 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 162.4.246[.]142 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 203.189.116[.]196 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 143.44.184[.]164 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 152.32.73[.]120 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2001[:]fd8[:]c31f[:]3e00[:]c0a5[:]691b[:]dd28[:]f2ce | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 136.158.46[.]161 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 49.145.211[.]146 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 154.18.197[.]29 | Attacker | — | 3 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.