Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
32 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 2a00[:]1e88[:]4344[:]2200[:]9504[:]6aa0[:]6706[:]4237 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 72.56.34[.]29 | Attacker | — | 1 feed | |||
| 10-12 09:10 | 201.24.116[.]175 | Attacker | — | 3 feeds | |||
| 10-12 09:10 | 146.70.231[.]130 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 188.187.154[.]22 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 176.192.201[.]80 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 185.87.194[.]145 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 178.204.124[.]193 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 176.112.105[.]212 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 91.196.251[.]152 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 82.208.124[.]43 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 178.34.120[.]174 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 178.45.223[.]209 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 153.76.163[.]75 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 185.126.180[.]152 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 89.109.51[.]151 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 5.3.220[.]212 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 89.109.49[.]249 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 146.19.124[.]2 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.87.144[.]195 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 84.54.59[.]43 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 130.49.186[.]92 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 195.9.34[.]73 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 95.156.86[.]234 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 85.12.204[.]206 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 85.175.72[.]188 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 82.208.125[.]157 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 95.220.218[.]204 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.226.202[.]136 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 109.184.41[.]217 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 95.191.198[.]107 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 95.37.213[.]67 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.