Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
90 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 194.44.72[.]2 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 37.221.157[.]68 | Attacker | — | 1 feed | |||
| 10-12 10:30 | 91.234.138[.]96 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 176.103.1[.]112 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 85.137.57[.]159 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 194.44.77[.]54 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 176.103.4[.]19 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 188.191.67[.]59 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 176.103.5[.]205 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 194.44.140[.]59 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 194.44.140[.]88 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 176.103.7[.]80 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 37.221.144[.]111 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 37.221.149[.]162 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 176.103.3[.]245 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 185.183.94[.]223 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 77.239.165[.]56 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 176.241.106[.]166 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 37.221.132[.]134 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 176.103.7[.]110 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.7[.]244 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 46.33.39[.]19 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 46.201.233[.]190 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.11[.]134 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.2[.]178 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.3[.]100 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 178.92.103[.]11 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.44.140[.]125 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 195.64.250[.]9 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 145.224.122[.]222 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.2[.]158 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.12.73[.]231 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.141[.]166 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.57.21[.]242 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.236.157[.]212 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.2[.]52 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.234.137[.]219 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]27 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.234.136[.]28 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]215 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]94 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 31.41.69[.]201 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.147[.]6 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 79.142.199[.]109 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.234.139[.]21 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.125[.]143 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.125[.]38 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.128[.]69 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.131[.]24 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.153[.]144 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.44.50[.]182 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 217.196.163[.]110 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.133[.]140 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 46.98.62[.]119 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 146.120.161[.]69 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 196.251.121[.]46 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.133[.]88 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.138.230[.]46 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]187 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.125[.]53 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]177 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.137[.]186 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 5.58.103[.]49 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.0[.]138 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.234.139[.]83 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.11[.]64 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.120.129[.]7 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.153[.]252 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.156[.]65 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.125[.]40 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.52.252[.]244 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.234.136[.]86 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.0[.]241 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.4[.]116 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.6[.]154 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.17.124[.]251 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 93.171.188[.]94 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.0[.]207 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.12.81[.]97 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.139[.]92 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 46.201.249[.]252 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 194.44.57[.]169 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 130.0.52[.]180 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 5.58.0[.]143 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.228.122[.]146 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.157[.]52 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.139[.]37 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 176.103.3[.]49 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.132[.]59 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 37.221.139[.]36 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.