Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

99 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	142.44.225[.]226	Attacker	—	1 feed
10-12 09:30	51.161.65[.]208	Attacker	—	1 feed
10-12 09:30	51.222.95[.]203	Attacker	—	1 feed
10-12 09:30	51.222.95[.]76	Attacker	—	1 feed
10-12 09:30	82.23.102[.]20	Attacker	—	1 feed
10-12 09:04	13.248.169[.]48	Malware		1 feed 1,329 sandbox samples
10-12 09:04	172.105.27[.]61	Malware		1 feed 75 sandbox samples
10-12 08:55	96.54.67[.]26	Attacker	—	1 feed
10-12 08:20	174.0.205[.]170	Attacker	—	2 feeds
10-12 08:20	96.125.137[.]54	Attacker	—	1 feed
10-12 08:10	159.203.60[.]181	Attacker	—	2 feeds
10-12 08:10	137.184.172[.]134	Attacker	—	1 feed
10-12 08:10	138.197.143[.]55	Attacker	—	1 feed
10-12 08:10	142.93.154[.]115	Attacker	—	1 feed
10-12 08:10	143.110.209[.]198	Attacker	—	1 feed
10-12 08:10	143.110.213[.]194	Attacker	—	1 feed
10-12 08:10	146.190.245[.]102	Attacker	—	1 feed
10-12 08:10	159.203.27[.]11	Attacker	—	1 feed
10-12 08:10	159.203.27[.]154	Attacker	—	1 feed
10-12 08:10	159.203.28[.]134	Attacker	—	1 feed
10-12 08:10	165.227.35[.]36	Attacker	—	1 feed
10-12 08:10	167.99.185[.]195	Attacker	—	1 feed
10-12 08:10	178.128.227[.]164	Attacker	—	1 feed
10-12 08:10	178.128.239[.]223	Attacker	—	1 feed
10-12 07:50	15.235.96[.]231	Attacker	—	1 feed
10-12 07:50	15.235.98[.]214	Attacker	—	1 feed
10-12 07:50	15.235.98[.]97	Attacker	—	1 feed
10-12 07:50	35.203.112[.]169	Attacker	—	1 feed
10-12 07:50	35.203.83[.]71	Attacker	—	1 feed
10-12 07:50	51.161.37[.]56	Attacker	—	1 feed
10-12 07:50	54.39.0[.]49	Attacker	—	1 feed
10-12 07:26	104.247.81[.]99	Malware		1 feed 160 sandbox samples
10-12 07:15	142.44.220[.]102	Attacker	—	1 feed
10-12 07:15	142.44.233[.]255	Attacker	—	1 feed
10-12 07:15	187.13.241[.]131	Attacker	—	1 feed
10-12 07:15	54.39.136[.]21	Attacker	—	1 feed
10-12 06:55	165.227.39[.]37	Attacker	—	1 feed
10-12 06:41	104.28.154[.]47	Attacker	—	1 feed
10-12 06:41	104.28.212[.]158	Attacker	—	1 feed
10-12 06:41	138.197.142[.]230	Attacker	—	1 feed
10-12 06:41	148.113.128[.]32	Attacker	—	1 feed
10-12 06:41	15.235.96[.]208	Attacker	—	1 feed
10-12 06:41	51.222.168[.]34	Attacker	—	1 feed
10-12 06:41	54.39.136[.]98	Attacker	—	1 feed
10-12 06:41	54.39.6[.]144	Attacker	—	1 feed
10-12 06:11	3.98.91[.]44:443	C2		1 feed
10-12 06:10	143.198.45[.]59	Attacker	—	1 feed
10-12 06:10	146.190.251[.]167	Attacker	—	1 feed
10-12 06:10	147.182.157[.]76	Attacker	—	1 feed
10-12 06:10	159.203.14[.]221	Attacker	—	1 feed
10-12 06:10	159.89.119[.]49	Attacker	—	1 feed
10-12 06:10	165.245.236[.]126	Attacker	—	1 feed
10-12 06:10	167.99.180[.]125	Attacker	—	1 feed
10-12 06:10	167.99.183[.]219	Attacker	—	1 feed
10-12 06:10	172.105.12[.]250	Attacker	—	2 feeds
10-12 06:10	178.93.201[.]186	Attacker	—	1 feed
10-12 06:10	34.186.216[.]209	Attacker	—	1 feed
10-12 06:10	54.39.89[.]175	Attacker	—	1 feed
10-12 05:35	104.28.228[.]53	Attacker	—	1 feed
10-12 05:35	138.197.131[.]117	Attacker	—	1 feed
10-12 05:35	148.113.128[.]10	Attacker	—	1 feed
10-12 05:35	167.114.139[.]157	Attacker	—	1 feed
10-12 05:35	54.39.203[.]109	Attacker	—	1 feed
10-12 05:35	54.39.203[.]60	Attacker	—	1 feed
10-12 05:35	54.39.203[.]79	Attacker	—	1 feed
10-12 05:00	15.235.27[.]4	Attacker	—	1 feed
10-12 05:00	15.235.98[.]39	Attacker	—	1 feed
10-12 05:00	51.222.95[.]235	Attacker	—	1 feed
10-12 05:00	54.39.136[.]52	Attacker	—	1 feed
10-12 05:00	54.39.203[.]197	Attacker	—	1 feed
10-12 05:00	54.39.6[.]9	Attacker	—	1 feed
10-12 04:50	159.89.127[.]126	Attacker	—	1 feed
10-12 04:35	35.203.11[.]37	Attacker	—	2 feeds
10-12 04:35	99.232.212[.]207	Attacker	—	2 feeds
10-12 04:35	45.81.154[.]75	Attacker	—	2 feeds
10-12 04:35	2604[:]3d09[:]17f[:]aba0[:]7cab[:]3230[:]67a2[:]eecf	Attacker	—	2 feeds
10-12 04:35	209.15.177[.]175	Attacker	—	2 feeds
10-12 04:35	174.113.181[.]248	Attacker	—	2 feeds
10-12 04:35	45.2.24[.]40	Attacker	—	2 feeds
10-12 04:35	67.208.44[.]112	Attacker	—	2 feeds
10-12 04:35	24.137.45[.]53	Attacker	—	2 feeds
10-12 04:35	69.26.194[.]105	Attacker	—	2 feeds
10-12 04:35	104.28.166[.]177	Attacker	—	2 feeds
10-12 04:35	142.114.50[.]8	Attacker	—	2 feeds
10-12 04:35	198.16.162[.]174	Attacker	—	2 feeds
10-12 04:35	24.85.19[.]121	Attacker	—	3 feeds
10-12 04:35	204.44.140[.]181	Attacker	—	2 feeds
10-12 04:35	104.28.166[.]174	Attacker	—	2 feeds
10-12 04:35	34.47.53[.]147	Attacker	—	2 feeds
10-12 04:35	143.105.195[.]122	Attacker	—	2 feeds
10-12 04:35	142.159.129[.]13	Attacker	—	2 feeds
10-12 04:35	34.19.239[.]205	Attacker	—	2 feeds
10-12 04:35	104.28.246[.]127	Attacker	—	2 feeds
10-12 04:35	104.28.246[.]128	Attacker	—	2 feeds
10-12 04:35	162.250.190[.]45	Attacker	—	2 feeds
10-12 04:35	34.152.38[.]158	Attacker	—	2 feeds
10-12 04:35	173.181.137[.]44	Attacker	—	2 feeds
10-12 04:35	34.152.9[.]249	Attacker	—	2 feeds
10-12 04:35	209.169.177[.]136	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check