Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

321 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by	Network
10-12 10:30	112.86.225[.]94	Attacker	—	1 feed
10-12 10:30	117.64.68[.]231	Attacker	—	1 feed
10-12 10:30	180.102.110[.]167	Attacker	—	1 feed
10-12 10:15	36.249.208[.]109	Attacker	—	1 feed
10-12 10:15	42.177.70[.]81	Attacker	—	1 feed
10-12 10:15	58.59.233[.]180	Attacker	—	1 feed
10-12 10:15	61.164.34[.]74	Attacker	—	1 feed
10-12 10:15	101.68.5[.]89	Attacker	—	1 feed
10-12 10:15	106.117.9[.]40	Attacker	—	1 feed
10-12 10:15	106.41.93[.]48	Attacker	—	1 feed
10-12 10:15	111.113.89[.]16	Attacker	—	1 feed
10-12 10:15	112.52.52[.]48	Attacker	—	1 feed
10-12 10:15	112.94.252[.]237	Attacker	—	1 feed
10-12 10:15	112.94.252[.]87	Attacker	—	1 feed
10-12 10:15	112.97.201[.]7	Attacker	—	1 feed
10-12 10:15	113.94.72[.]205	Attacker	—	1 feed
10-12 10:15	116.237.68[.]12	Attacker	—	1 feed
10-12 10:15	117.40.114[.]61	Attacker	—	1 feed
10-12 10:15	118.212.121[.]119	Attacker	—	1 feed
10-12 10:15	120.225.11[.]116	Attacker	—	1 feed
10-12 10:15	121.12.245[.]254	Attacker	—	1 feed
10-12 10:15	121.29.149[.]141	Attacker	—	1 feed
10-12 10:15	123.178.210[.]112	Attacker	—	1 feed
10-12 10:15	123.178.210[.]39	Attacker	—	1 feed
10-12 10:15	123.245.85[.]240	Attacker	—	1 feed
10-12 10:15	124.88.113[.]188	Attacker	—	1 feed
10-12 10:15	125.118.239[.]10	Attacker	—	1 feed
10-12 10:15	171.12.10[.]222	Attacker	—	1 feed
10-12 10:15	175.30.48[.]231	Attacker	—	1 feed
10-12 10:15	180.117.207[.]230	Attacker	—	1 feed
10-12 10:15	182.119.231[.]144	Attacker	—	1 feed
10-12 10:15	182.141.202[.]145	Attacker	—	1 feed
10-12 10:15	182.54.23[.]48	Attacker	—	1 feed
10-12 10:15	220.197.85[.]151	Attacker	—	1 feed	—
10-12 10:15	220.197.85[.]175	Attacker	—	1 feed	—
10-12 10:15	220.197.85[.]55	Attacker	—	1 feed	—
10-12 10:15	220.250.10[.]65	Attacker	—	1 feed
10-12 10:10	120.55.64[.]167	Attacker	—	1 feed
10-12 10:10	121.43.118[.]50	Attacker	—	1 feed
10-12 10:10	47.95.208[.]69	Attacker	—	1 feed
10-12 10:08	114.114.114[.]114	Malware		1 feed 12k sandbox samples
10-12 10:08	218.85.157[.]99	Malware		1 feed 8,026 sandbox samples
10-12 10:00	121.229.156[.]105	Attacker	—	1 feed
10-12 10:00	121.229.156[.]82	Attacker	—	1 feed
10-12 10:00	218.78.141[.]57	Attacker	—	1 feed
10-12 09:30	110.81.21[.]244	Attacker	—	1 feed
10-12 09:30	124.115.70[.]227	Attacker	—	1 feed
10-12 09:10	121.40.44[.]214	Attacker	—	1 feed
10-12 09:10	121.43.154[.]179	Attacker	—	1 feed
10-12 09:10	47.95.210[.]171	Attacker	—	1 feed
10-12 09:10	111.231.63[.]25	Attacker	—	2 feeds
10-12 08:55	218.81.172[.]117	Attacker	—	1 feed
10-12 08:55	223.198.160[.]191	Attacker	—	1 feed
10-12 08:20	116.177.174[.]231	Attacker	—	1 feed
10-12 08:20	220.181.108[.]158	Attacker	—	1 feed
10-12 08:20	49.115.217[.]99	Attacker	—	1 feed
10-12 08:20	60.170.197[.]78	Attacker	—	1 feed
10-12 08:10	113.95.138[.]105	Attacker	—	3 feeds
10-12 08:10	1.14.149[.]30	Attacker	—	1 feed
10-12 08:10	1.24.16[.]159	Attacker	—	1 feed
10-12 08:10	1.24.16[.]73	Attacker	—	1 feed
10-12 08:10	1.28.234[.]6	Attacker	—	1 feed
10-12 08:10	1.83.125[.]9	Attacker	—	1 feed
10-12 08:10	8.130.187[.]77	Attacker	—	1 feed
10-12 08:10	27.207.182[.]175	Attacker	—	1 feed
10-12 08:10	27.215.50[.]54	Attacker	—	1 feed
10-12 08:10	27.222.101[.]176	Attacker	—	1 feed
10-12 08:10	43.248.108[.]120	Attacker	—	1 feed
10-12 08:10	47.96.114[.]87	Attacker	—	1 feed
10-12 08:10	49.80.67[.]235	Attacker	—	1 feed
10-12 08:10	58.212.237[.]155	Attacker	—	1 feed
10-12 08:10	58.212.237[.]243	Attacker	—	1 feed
10-12 08:10	58.212.237[.]251	Attacker	—	1 feed
10-12 08:10	58.212.237[.]70	Attacker	—	1 feed
10-12 08:10	58.59.233[.]136	Attacker	—	1 feed
10-12 08:10	59.53.166[.]27	Attacker	—	1 feed
10-12 08:10	60.166.82[.]88	Attacker	—	1 feed
10-12 08:10	110.179.81[.]214	Attacker	—	1 feed
10-12 08:10	111.113.88[.]105	Attacker	—	1 feed
10-12 08:10	111.113.88[.]191	Attacker	—	1 feed
10-12 08:10	111.113.88[.]251	Attacker	—	1 feed
10-12 08:10	111.113.89[.]189	Attacker	—	1 feed
10-12 08:10	112.195.202[.]157	Attacker	—	1 feed
10-12 08:10	112.94.252[.]184	Attacker	—	1 feed
10-12 08:10	112.94.252[.]215	Attacker	—	1 feed
10-12 08:10	113.220.235[.]28	Attacker	—	1 feed
10-12 08:10	118.212.123[.]172	Attacker	—	1 feed
10-12 08:10	121.22.11[.]33	Attacker	—	1 feed
10-12 08:10	121.29.149[.]37	Attacker	—	1 feed
10-12 08:10	122.96.28[.]174	Attacker	—	1 feed
10-12 08:10	123.178.210[.]114	Attacker	—	1 feed
10-12 08:10	123.178.210[.]162	Attacker	—	1 feed
10-12 08:10	123.178.210[.]230	Attacker	—	1 feed
10-12 08:10	123.245.85[.]125	Attacker	—	1 feed
10-12 08:10	123.245.85[.]170	Attacker	—	1 feed
10-12 08:10	124.88.113[.]168	Attacker	—	1 feed
10-12 08:10	124.88.113[.]65	Attacker	—	1 feed
10-12 08:10	125.84.251[.]0	Attacker	—	1 feed
10-12 08:10	139.170.72[.]144	Attacker	—	1 feed
10-12 08:10	139.170.72[.]156	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check