Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
27 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 35.201.165[.]116 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 104.199.239[.]105 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 35.194.250[.]178 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 59.125.136[.]32 | Attacker | — | 2 feeds | |||
| 10-12 07:50 | 111.70.12[.]110 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 35.221.212[.]164 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 123.192.124[.]25 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 36.231.108[.]68 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 61.221.103[.]73 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 49.158.200[.]4 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 110.25.90[.]235 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 35.229.146[.]136 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 203.66.168[.]131 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 35.206.213[.]142 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 35.206.251[.]231 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 122.116.125[.]115 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 118.167.248[.]243 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.126[.]135 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 61.231.195[.]218 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 35.201.135[.]19 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.69[.]217 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.53[.]57 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.69[.]210 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 114.34.22[.]52 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.184[.]53 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 114.35.148[.]18 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.81.33[.]186 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.