Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

66 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	190.122.128[.]207	Attacker	—	1 feed
10-12 08:55	201.180.32[.]116	Attacker	—	1 feed
10-12 08:46	186.182.55[.]44	Malware		1 feed 2,005 sandbox samples
10-12 08:20	186.109.226[.]24	Attacker	—	1 feed
10-12 08:10	181.118.80[.]131	Attacker	—	1 feed
10-12 07:53	190.224.203[.]37	Malware		1 feed 247 sandbox samples
10-12 07:15	186.19.123[.]190	Attacker	—	1 feed
10-12 06:41	181.16.209[.]124	Attacker	—	1 feed
10-12 05:35	190.184.229[.]241	Attacker	—	1 feed
10-12 05:35	45.191.80[.]110	Attacker	—	1 feed
10-12 05:00	179.61.94[.]43	Attacker	—	1 feed
10-12 04:35	186.159.124[.]19	Attacker	—	2 feeds
10-12 04:35	186.96.198[.]243	Attacker	—	2 feeds
10-12 04:35	186.22.253[.]136	Attacker	—	2 feeds
10-12 04:35	181.116.45[.]122	Attacker	—	2 feeds
10-12 04:35	181.41.245[.]82	Attacker	—	2 feeds
10-12 04:35	45.232.18[.]158	Attacker	—	2 feeds
10-12 04:35	200.189.31[.]196	Attacker	—	2 feeds
10-12 04:35	181.46.185[.]113	Attacker	—	2 feeds
10-12 04:35	190.105.181[.]241	Attacker	—	2 feeds
10-12 04:35	190.225.1[.]152	Attacker	—	2 feeds
10-12 04:35	152.231.55[.]75	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]128	Attacker	—	2 feeds
10-12 04:35	190.172.35[.]11	Attacker	—	2 feeds
10-12 04:35	186.22.13[.]69	Attacker	—	2 feeds
10-12 04:35	190.31.118[.]204	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]175	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]7	Attacker	—	2 feeds
10-12 04:35	181.46.136[.]146	Attacker	—	2 feeds
10-12 04:35	192.141.149[.]248	Attacker	—	2 feeds
10-12 04:35	191.84.218[.]170	Attacker	—	2 feeds
10-12 04:35	181.118.183[.]157	Attacker	—	2 feeds
10-12 04:35	181.41.245[.]12	Attacker	—	2 feeds
10-12 04:35	190.105.181[.]220	Attacker	—	2 feeds
10-12 04:35	186.64.71[.]50	Attacker	—	2 feeds
10-12 04:35	190.110.178[.]76	Attacker	—	2 feeds
10-12 04:35	186.96.194[.]98	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]11	Attacker	—	2 feeds
10-12 04:35	190.11.195[.]68	Attacker	—	2 feeds
10-12 04:35	190.227.187[.]198	Attacker	—	2 feeds
10-12 04:35	45.238.106[.]129	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]184	Attacker	—	2 feeds
10-12 04:35	45.181.167[.]134	Attacker	—	2 feeds
10-12 04:35	191.82.221[.]68	Attacker	—	2 feeds
10-12 04:35	186.12.188[.]140	Attacker	—	2 feeds
10-12 04:35	186.19.80[.]249	Attacker	—	2 feeds
10-12 04:35	186.96.198[.]35	Attacker	—	2 feeds
10-12 04:35	190.192.120[.]30	Attacker	—	2 feeds
10-12 04:35	191.83.216[.]55	Attacker	—	2 feeds
10-12 04:35	45.238.106[.]141	Attacker	—	2 feeds
10-12 04:35	186.23.214[.]80	Attacker	—	2 feeds
10-12 04:35	45.178.97[.]182	Attacker	—	2 feeds
10-12 04:35	179.37.109[.]2	Attacker	—	2 feeds
10-12 04:35	190.105.214[.]48	Attacker	—	2 feeds
10-12 04:35	181.167.47[.]173	Attacker	—	2 feeds
10-12 04:35	181.174.128[.]72	Attacker	—	2 feeds
10-12 04:35	186.159.121[.]154	Attacker	—	2 feeds
10-12 04:35	45.181.46[.]71	Attacker	—	2 feeds
10-12 04:35	45.162.20[.]87	Attacker	—	2 feeds
10-12 04:35	103.50.33[.]107	Attacker	—	2 feeds
10-12 04:35	200.107.230[.]4	Attacker	—	2 feeds
10-12 04:35	179.61.10[.]183	Attacker	—	2 feeds
10-12 04:35	181.118.183[.]159	Attacker	—	2 feeds
10-12 04:35	186.190.167[.]214	Attacker	—	2 feeds
10-12 04:35	38.226.234[.]32	Attacker	—	2 feeds
10-12 04:35	201.176.239[.]134	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check