Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

21 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:20217.165.147[.]14Attacker—1 feed
10-12 08:2086.98.217[.]223Attacker—1 feed
10-12 07:502.50.136[.]140Attacker—1 feed
10-12 07:1586.98.51[.]126Attacker—1 feed
10-12 06:412a09[:]bac5[:]27[:]dc[:][:]16[:]20eAttacker—1 feed
10-12 06:102001[:]8f8[:]2d61[:]d8a7[:]54a5[:]448e[:]e6de[:]b41bAttacker—1 feed
10-12 06:10217.165.124[.]95Attacker—1 feed
10-12 05:35141.145.159[.]132Attacker—1 feed
10-12 05:355.192.104[.]137Attacker—1 feed
10-12 04:3594.207.27[.]135Attacker—2 feeds
10-12 04:3583.110.149[.]197Attacker—2 feeds
10-12 04:352a09[:]bac1[:]220[:]20[:][:]2d7[:]2Attacker—2 feeds
10-12 04:3594.207.192[.]41Attacker—2 feeds
10-12 04:35109.177.122[.]29Attacker—2 feeds
10-12 04:352a00[:]f29[:]1119[:]6046[:]55ee[:]de07[:]6133[:]9cd1Attacker—2 feeds
10-12 04:352a00[:]f29[:]202[:]3c09[:]c90b[:]5d88[:]cc9[:]e9c3Attacker—2 feeds
10-12 04:355.107.27[.]47Attacker—3 feeds
10-12 04:3594.205.71[.]89Attacker—2 feeds
10-12 04:355.31.171[.]13Attacker—2 feeds
10-12 04:3583.111.104[.]153Attacker—2 feeds
10-12 04:35217.165.166[.]13Attacker—1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.