Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
27 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:15 | 1.145.29[.]140 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 54.252.219[.]215 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 134.199.166[.]29 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 34.1.176[.]177 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 170.64.203[.]248 | Attacker | — | 1 feed | |||
| 10-12 07:55 | 13.238.55[.]255 | Attacker | — | 2 feeds | |||
| 10-12 07:15 | 110.142.146[.]188 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 170.64.164[.]138 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 120.157.79[.]189 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 170.64.174[.]95 | Attacker | — | 1 feed | |||
| 10-12 05:55 | 170.64.165[.]134 | Attacker | — | 1 feed | |||
| 10-12 05:15 | 103.224.212[.]204 | Malware | 1 feed 4 sandbox samples | ||||
| 10-12 05:00 | 168.144.161[.]127 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 168.144.162[.]30 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 168.144.165[.]69 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 170.64.198[.]250 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 209.38.17[.]150 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 209.38.90[.]16 | Attacker | — | 1 feed | |||
| 10-12 04:59 | 172.111.161[.]134:4489 | C2 | 1 feed | ||||
| 10-12 04:35 | 15.135.163[.]9 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 202.67.92[.]254 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 2001[:]8003[:]7827[:]6b01[:]a1cc[:]7c59[:]1ef3[:]b769 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 60.226.229[.]92 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 168.144.172[.]171 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 134.199.158[.]34 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 144.6.159[.]107 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.61.172[.]60 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.