Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

140 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:15	18.230.68[.]28	Attacker	—	1 feed
10-12 10:15	177.172.65[.]158	Attacker	—	2 feeds
10-12 10:15	177.192.123[.]86	Attacker	—	1 feed
10-12 10:15	187.113.107[.]227	Attacker	—	1 feed
10-12 10:15	187.57.130[.]21	Attacker	—	1 feed
10-12 10:10	189.26.163[.]39	Attacker	—	1 feed
10-12 10:10	177.86.10[.]55	Attacker	—	1 feed
10-12 10:10	179.159.32[.]253	Attacker	—	1 feed
10-12 10:00	190.89.137[.]163	Attacker	—	1 feed
10-12 09:43	152.249.49[.]42:56002	C2		1 feed
10-12 09:30	35.247.212[.]91	Attacker	—	1 feed
10-12 09:04	95.214.26[.]34	Malware		1 feed 43 sandbox samples
10-12 08:55	187.120.105[.]43	Attacker	—	1 feed
10-12 08:20	170.245.250[.]151	Attacker	—	1 feed
10-12 08:20	177.23.208[.]121	Attacker	—	1 feed
10-12 08:20	34.95.246[.]208	Attacker	—	1 feed
10-12 08:20	34.95.255[.]126	Attacker	—	1 feed
10-12 08:10	16.5.0[.]224	Attacker	—	1 feed
10-12 08:10	16.5.0[.]240	Attacker	—	1 feed
10-12 08:10	179.109.151[.]130	Attacker	—	1 feed
10-12 07:55	189.29.145[.]117	Attacker	—	1 feed
10-12 07:53	95.214.26[.]28	Malware		1 feed 209 sandbox samples
10-12 07:50	35.198.46[.]37	Attacker	—	1 feed
10-12 07:50	35.198.46[.]50	Attacker	—	1 feed
10-12 07:26	170.84.181[.]70	Malware		1 feed 75 sandbox samples
10-12 07:15	177.126.216[.]227	Attacker	—	1 feed
10-12 07:15	45.184.48[.]247	Attacker	—	1 feed
10-12 07:15	177.44.96[.]132	Attacker	—	1 feed
10-12 06:41	177.22.87[.]128	Attacker	—	1 feed
10-12 06:41	80.75.221[.]167	Attacker	—	1 feed
10-12 06:10	45.183.19[.]219	Attacker	—	1 feed
10-12 06:10	177.188.141[.]53	Attacker	—	2 feeds
10-12 06:10	179.104.1[.]120	Attacker	—	1 feed
10-12 06:10	179.104.179[.]57	Attacker	—	1 feed
10-12 06:10	189.18.97[.]134	Attacker	—	1 feed
10-12 06:10	189.51.216[.]208	Attacker	—	1 feed
10-12 06:10	201.94.147[.]172	Attacker	—	1 feed
10-12 06:10	177.23.184[.]136	Attacker	—	1 feed
10-12 06:10	187.120.72[.]134	Attacker	—	1 feed
10-12 05:35	189.26.167[.]69	Attacker	—	2 feeds
10-12 05:35	200.24.65[.]65	Attacker	—	1 feed
10-12 05:00	170.233.57[.]188	Attacker	—	1 feed
10-12 04:35	177.188.67[.]36	Attacker	—	2 feeds
10-12 04:35	2803[:]9810[:]4bb1[:]d310[:]3179[:]3f21[:]7f5a[:]3712	Attacker	—	2 feeds
10-12 04:35	2804[:]7f2[:]c00a[:]cfb6[:]a56b[:]9643[:]66cb[:]7ca3	Attacker	—	2 feeds
10-12 04:35	177.44.71[.]93	Attacker	—	2 feeds
10-12 04:35	186.235.163[.]70	Attacker	—	2 feeds
10-12 04:35	191.37.150[.]203	Attacker	—	2 feeds
10-12 04:35	2804[:]14d[:]1c76[:]89cd[:]c9cb[:]41c7[:]927b[:]159f	Attacker	—	2 feeds
10-12 04:35	2804[:]2ac[:]5000[:]b972[:]848[:]7019[:]ef07[:]a932	Attacker	—	2 feeds
10-12 04:35	2804[:]2b90[:]1012[:]d900[:]416e[:]5181[:]c17e[:]c44c	Attacker	—	2 feeds
10-12 04:35	177.93.203[.]163	Attacker	—	2 feeds
10-12 04:35	190.11.215[.]113	Attacker	—	2 feeds
10-12 04:35	2804[:]14c[:]465[:]832a[:]9158[:]c53c[:]c7c1[:]be81	Attacker	—	2 feeds
10-12 04:35	128.201.99[.]133	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]213	Attacker	—	2 feeds
10-12 04:35	177.44.73[.]9	Attacker	—	2 feeds
10-12 04:35	191.251.11[.]18	Attacker	—	2 feeds
10-12 04:35	2804[:]8674[:]401a[:]5d00[:]e0fd[:]370d[:]bd36[:]d3ca	Attacker	—	2 feeds
10-12 04:35	187.45.116[.]108	Attacker	—	2 feeds
10-12 04:35	190.89.136[.]201	Attacker	—	2 feeds
10-12 04:35	177.180.52[.]235	Attacker	—	2 feeds
10-12 04:35	2804[:]46d0[:]ca07[:]db00[:]31d7[:]4be8[:]998a[:]2470	Attacker	—	2 feeds
10-12 04:35	45.188.240[.]148	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]176	Attacker	—	2 feeds
10-12 04:35	177.92.134[.]6	Attacker	—	2 feeds
10-12 04:35	200.141.81[.]194	Attacker	—	2 feeds
10-12 04:35	209.14.85[.]115	Attacker	—	2 feeds
10-12 04:35	187.120.105[.]23	Attacker	—	2 feeds
10-12 04:35	190.89.136[.]241	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]244	Attacker	—	2 feeds
10-12 04:35	177.8.251[.]127	Attacker	—	2 feeds
10-12 04:35	186.225.224[.]4	Attacker	—	2 feeds
10-12 04:35	177.44.96[.]107	Attacker	—	2 feeds
10-12 04:35	80.75.221[.]165	Attacker	—	2 feeds
10-12 04:35	187.120.72[.]62	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]58	Attacker	—	2 feeds
10-12 04:35	190.89.136[.]255	Attacker	—	2 feeds
10-12 04:35	2804[:]14d[:]b083[:]88b3[:]f102[:]1217[:]886f[:]4139	Attacker	—	2 feeds
10-12 04:35	170.233.13[.]8	Attacker	—	2 feeds
10-12 04:35	45.163.198[.]69	Attacker	—	2 feeds
10-12 04:35	131.196.171[.]102	Attacker	—	2 feeds
10-12 04:35	177.66.101[.]22	Attacker	—	2 feeds
10-12 04:35	187.120.73[.]144	Attacker	—	2 feeds
10-12 04:35	2804[:]4398[:]ac[:]5e01[:]d440[:]ecf2[:]94c3[:]2821	Attacker	—	2 feeds
10-12 04:35	177.124.22[.]232	Attacker	—	2 feeds
10-12 04:35	177.75.85[.]1	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]180	Attacker	—	2 feeds
10-12 04:35	191.53.9[.]174	Attacker	—	2 feeds
10-12 04:35	201.182.92[.]126	Attacker	—	3 feeds
10-12 04:35	138.97.78[.]46	Attacker	—	2 feeds
10-12 04:35	153.67.33[.]90	Attacker	—	2 feeds
10-12 04:35	170.238.128[.]190	Attacker	—	2 feeds
10-12 04:35	177.223.4[.]202	Attacker	—	2 feeds
10-12 04:35	177.44.71[.]210	Attacker	—	2 feeds
10-12 04:35	179.182.114[.]200	Attacker	—	3 feeds
10-12 04:35	187.120.72[.]79	Attacker	—	2 feeds
10-12 04:35	187.120.73[.]118	Attacker	—	2 feeds
10-12 04:35	187.120.73[.]129	Attacker	—	2 feeds
10-12 04:35	190.89.137[.]54	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check