Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

57 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	104.155.80[.]139	Attacker	—	1 feed
10-12 10:30	34.79.79[.]205	Attacker	—	2 feeds
10-12 10:30	35.233.4[.]243	Attacker	—	1 feed
10-12 10:15	51.38.12[.]12	Attacker	—	1 feed
10-12 09:30	104.155.116[.]47	Attacker	—	1 feed
10-12 09:10	207.175.206[.]28	Attacker	—	1 feed
10-12 08:55	34.156.255[.]210	Attacker	—	1 feed
10-12 08:55	34.76.73[.]137	Attacker	—	1 feed
10-12 08:55	35.195.122[.]32	Attacker	—	1 feed
10-12 08:20	207.175.138[.]62	Attacker	—	3 feeds
10-12 08:20	34.140.170[.]45	Attacker	—	1 feed
10-12 07:55	158.173.67[.]88	Attacker	—	1 feed
10-12 07:50	34.62.93[.]48	Attacker	—	1 feed
10-12 07:15	34.52.180[.]255	Attacker	—	1 feed
10-12 07:15	34.53.129[.]203	Attacker	—	1 feed
10-12 06:41	34.14.3[.]149	Attacker	—	1 feed
10-12 06:41	34.62.47[.]85	Attacker	—	1 feed
10-12 06:41	34.76.123[.]141	Attacker	—	1 feed
10-12 06:41	34.76.151[.]59	Attacker	—	1 feed
10-12 06:11	34.22.226[.]31:23	C2		1 feed
10-12 06:10	34.140.107[.]185	Attacker	—	1 feed
10-12 06:10	34.62.46[.]22	Attacker	—	1 feed
10-12 05:35	34.38.168[.]248	Attacker	—	2 feeds
10-12 05:00	207.175.32[.]174	Attacker	—	2 feeds
10-12 04:50	146.70.176[.]222	Attacker	—	1 feed
10-12 04:35	34.77.52[.]202	Attacker	—	3 feeds
10-12 04:35	35.205.210[.]70	Attacker	—	3 feeds
10-12 04:35	104.155.92[.]149	Attacker	—	3 feeds
10-12 04:35	207.175.62[.]137	Attacker	—	3 feeds
10-12 04:35	34.53.212[.]113	Attacker	—	2 feeds
10-12 04:35	34.14.92[.]68	Attacker	—	2 feeds
10-12 04:35	35.241.219[.]46	Attacker	—	2 feeds
10-12 04:35	35.241.246[.]219	Attacker	—	3 feeds
10-12 04:35	35.195.45[.]113	Attacker	—	2 feeds
10-12 04:35	146.148.119[.]67	Attacker	—	2 feeds
10-12 04:35	34.14.88[.]8	Attacker	—	2 feeds
10-12 04:35	34.79.51[.]204	Attacker	—	2 feeds
10-12 04:35	192.158.31[.]44	Attacker	—	2 feeds
10-12 04:35	34.79.43[.]224	Attacker	—	2 feeds
10-12 04:35	207.175.206[.]224	Attacker	—	2 feeds
10-12 04:35	34.38.184[.]214	Attacker	—	2 feeds
10-12 04:35	34.79.161[.]87	Attacker	—	3 feeds
10-12 04:35	34.52.191[.]78	Attacker	—	2 feeds
10-12 04:35	34.53.167[.]102	Attacker	—	2 feeds
10-12 04:35	34.79.73[.]147	Attacker	—	2 feeds
10-12 04:35	35.205.73[.]209	Attacker	—	2 feeds
10-12 04:35	207.175.119[.]47	Attacker	—	2 feeds
10-12 04:35	34.52.145[.]157	Attacker	—	2 feeds
10-12 04:35	34.77.71[.]244	Attacker	—	2 feeds
10-12 04:35	34.78.241[.]116	Attacker	—	2 feeds
10-12 04:35	34.79.148[.]63	Attacker	—	2 feeds
10-12 04:35	35.205.52[.]133	Attacker	—	2 feeds
10-12 04:35	34.79.183[.]69	Attacker	—	2 feeds
10-12 04:35	35.205.58[.]101	Attacker	—	2 feeds
10-12 04:35	34.38.187[.]5	Attacker	—	2 feeds
10-12 04:35	34.52.241[.]194	Attacker	—	2 feeds
10-12 04:35	34.140.192[.]44	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check