Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

49 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	103.94.129[.]2	Attacker	—	1 feed
10-12 10:00	103.197.50[.]251	Attacker	—	1 feed
10-12 09:10	103.133.206[.]8	Attacker	—	1 feed
10-12 08:55	103.16.226[.]96	Attacker	—	1 feed
10-12 08:55	103.183.69[.]114	Attacker	—	1 feed
10-12 08:55	103.183.69[.]118	Attacker	—	1 feed
10-12 08:55	27.123.253[.]211	Attacker	—	1 feed
10-12 08:20	151.158.44[.]55	Attacker	—	1 feed
10-12 07:50	103.137.160[.]123	Attacker	—	1 feed
10-12 07:50	103.189.159[.]214	Attacker	—	1 feed
10-12 07:15	160.191.115[.]170	Attacker	—	1 feed
10-12 06:58	203.188.251[.]78	Malware		1 feed 28 sandbox samples
10-12 06:10	103.169.105[.]145	Attacker	—	1 feed
10-12 06:10	103.132.182[.]54	Attacker	—	1 feed
10-12 06:10	116.204.142[.]249	Attacker	—	1 feed
10-12 05:55	103.129.114[.]197	Attacker	—	1 feed
10-12 05:35	144.48.118[.]50	Attacker	—	1 feed
10-12 05:00	103.23.95[.]77	Attacker	—	1 feed
10-12 04:50	118.179.122[.]158	Attacker	—	1 feed
10-12 04:35	103.153.210[.]49	Attacker	—	2 feeds
10-12 04:35	49.0.7[.]239	Attacker	—	2 feeds
10-12 04:35	27.147.204[.]229	Attacker	—	3 feeds
10-12 04:35	110.76.128[.]146	Attacker	—	2 feeds
10-12 04:35	202.134.10[.]131	Attacker	—	2 feeds
10-12 04:35	36.50.179[.]218	Attacker	—	3 feeds
10-12 04:35	103.153.130[.]108	Attacker	—	2 feeds
10-12 04:35	202.136.89[.]74	Attacker	—	2 feeds
10-12 04:35	36.50.9[.]129	Attacker	—	2 feeds
10-12 04:35	103.177.150[.]97	Attacker	—	2 feeds
10-12 04:35	36.50.74[.]33	Attacker	—	2 feeds
10-12 04:35	103.174.153[.]46	Attacker	—	2 feeds
10-12 04:35	160.191.115[.]187	Attacker	—	2 feeds
10-12 04:35	27.147.226[.]118	Attacker	—	2 feeds
10-12 04:35	160.187.238[.]98	Attacker	—	2 feeds
10-12 04:35	160.191.115[.]176	Attacker	—	2 feeds
10-12 04:35	103.109.57[.]216	Attacker	—	2 feeds
10-12 04:35	103.109.57[.]220	Attacker	—	2 feeds
10-12 04:35	103.109.57[.]223	Attacker	—	2 feeds
10-12 04:35	103.23.206[.]131	Attacker	—	2 feeds
10-12 04:35	202.36.123[.]54	Attacker	—	2 feeds
10-12 04:35	103.127.0[.]167	Attacker	—	2 feeds
10-12 04:35	114.129.13[.]160	Attacker	—	2 feeds
10-12 04:35	160.191.115[.]178	Attacker	—	2 feeds
10-12 04:35	45.248.151[.]224	Attacker	—	2 feeds
10-12 04:35	144.48.118[.]52	Attacker	—	2 feeds
10-12 04:35	103.171.69[.]182	Attacker	—	2 feeds
10-12 04:35	220.158.234[.]27	Attacker	—	2 feeds
10-12 04:35	117.58.243[.]28	Attacker	—	2 feeds
10-12 04:35	160.191.115[.]181	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check