Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

671 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	151.242.93[.]143	Attacker	—	1 feed
10-12 09:30	178.202.38[.]181	Attacker	—	1 feed
10-12 09:30	185.197.172[.]43	Attacker	—	1 feed
10-12 09:30	185.62.89[.]120	Attacker	—	1 feed
10-12 09:30	185.76.164[.]113	Attacker	—	1 feed
10-12 09:30	188.104.106[.]174	Attacker	—	1 feed
10-12 09:30	188.107.175[.]87	Attacker	—	1 feed
10-12 09:30	193.58.89[.]95	Attacker	—	1 feed
10-12 09:30	194.99.110[.]91	Attacker	—	1 feed
10-12 09:30	212.110.252[.]74	Attacker	—	1 feed
10-12 09:30	212.132.64[.]89	Attacker	—	1 feed
10-12 09:30	217.236.24[.]239	Attacker	—	1 feed
10-12 09:30	217.254.166[.]122	Attacker	—	1 feed
10-12 09:30	217.86.44[.]114	Attacker	—	1 feed
10-12 09:30	37.114.37[.]241	Attacker	—	1 feed
10-12 09:30	46.114.107[.]16	Attacker	—	1 feed
10-12 09:30	46.236.233[.]4	Attacker	—	1 feed
10-12 09:30	77.12.40[.]167	Attacker	—	1 feed
10-12 09:30	77.189.135[.]156	Attacker	—	1 feed
10-12 09:30	78.43.80[.]87	Attacker	—	1 feed
10-12 09:30	78.51.250[.]111	Attacker	—	1 feed
10-12 09:30	79.234.216[.]246	Attacker	—	1 feed
10-12 09:30	80.142.232[.]226	Attacker	—	1 feed
10-12 09:30	80.146.42[.]15	Attacker	—	1 feed
10-12 09:30	83.135.3[.]20	Attacker	—	1 feed
10-12 09:30	84.140.26[.]152	Attacker	—	1 feed
10-12 09:30	84.175.130[.]186	Attacker	—	1 feed
10-12 09:30	84.46.2[.]175	Attacker	—	1 feed
10-12 09:30	87.123.244[.]74	Attacker	—	1 feed
10-12 09:30	88.134.132[.]23	Attacker	—	1 feed
10-12 09:30	88.208.140[.]20	Attacker	—	1 feed
10-12 09:30	89.244.122[.]73	Attacker	—	1 feed
10-12 09:30	89.245.181[.]185	Attacker	—	1 feed
10-12 09:30	9.246.45[.]143	Attacker	—	1 feed
10-12 09:30	91.4.170[.]71	Attacker	—	1 feed
10-12 09:30	91.48.33[.]128	Attacker	—	1 feed
10-12 09:30	91.51.100[.]177	Attacker	—	1 feed
10-12 09:30	92.116.180[.]207	Attacker	—	1 feed
10-12 09:30	92.208.102[.]93	Attacker	—	1 feed
10-12 09:30	92.208.152[.]76	Attacker	—	1 feed
10-12 09:30	92.208.172[.]68	Attacker	—	1 feed
10-12 09:30	92.208.38[.]146	Attacker	—	1 feed
10-12 09:30	92.209.11[.]63	Attacker	—	1 feed
10-12 09:30	92.209.174[.]151	Attacker	—	1 feed
10-12 09:30	92.209.189[.]24	Attacker	—	1 feed
10-12 09:30	92.209.220[.]193	Attacker	—	1 feed
10-12 09:30	92.209.222[.]198	Attacker	—	1 feed
10-12 09:30	92.211.0[.]22	Attacker	—	1 feed
10-12 09:30	93.133.66[.]255	Attacker	—	1 feed
10-12 09:30	93.192.102[.]51	Attacker	—	1 feed
10-12 09:30	93.203.141[.]92	Attacker	—	1 feed
10-12 09:30	93.243.58[.]185	Attacker	—	1 feed
10-12 09:30	93.245.133[.]199	Attacker	—	1 feed
10-12 09:30	93.249.55[.]13	Attacker	—	1 feed
10-12 09:30	94.31.70[.]217	Attacker	—	1 feed
10-12 09:10	18.156.142[.]154	Attacker	—	2 feeds
10-12 09:10	192.108.48[.]150	Attacker	—	4 feeds
10-12 09:10	139.162.176[.]75	Attacker	—	1 feed
10-12 09:04	88.99.66[.]31	Malware		1 feed 7,306 sandbox samples
10-12 09:04	178.162.203[.]202	Malware		1 feed 218 sandbox samples
10-12 09:04	178.162.203[.]211	Malware		1 feed 197 sandbox samples
10-12 09:04	178.162.217[.]107	Malware		1 feed 176 sandbox samples
10-12 09:04	178.162.203[.]226	Malware		1 feed 189 sandbox samples
10-12 09:04	77.91.124[.]86	Malware		1 feed 807 sandbox samples
10-12 09:04	144.76.136[.]153	Malware		1 feed 3,432 sandbox samples
10-12 09:04	171.22.28[.]239	Malware		1 feed 203 sandbox samples
10-12 09:04	81.161.229[.]93	Malware		1 feed 153 sandbox samples
10-12 09:04	77.91.124[.]1	Malware		1 feed 776 sandbox samples
10-12 09:04	94.130.165[.]85	Malware		1 feed 47 sandbox samples
10-12 09:04	62.60.226[.]177	Malware		1 feed 2 sandbox samples
10-12 08:55	178.24.82[.]214	Attacker	—	1 feed
10-12 08:55	185.194.151[.]67	Attacker	—	1 feed
10-12 08:55	185.204.67[.]71	Attacker	—	1 feed
10-12 08:55	188.109.107[.]35	Attacker	—	1 feed
10-12 08:55	193.148.48[.]62	Attacker	—	1 feed
10-12 08:55	194.54.77[.]184	Attacker	—	1 feed
10-12 08:55	217.93.44[.]163	Attacker	—	1 feed
10-12 08:55	31.17.11[.]86	Attacker	—	1 feed
10-12 08:55	34.1.161[.]37	Attacker	—	1 feed
10-12 08:55	46.114.240[.]138	Attacker	—	1 feed
10-12 08:55	46.92.180[.]87	Attacker	—	1 feed
10-12 08:55	5.28.126[.]162	Attacker	—	1 feed
10-12 08:55	79.234.124[.]81	Attacker	—	1 feed
10-12 08:55	79.247.61[.]132	Attacker	—	1 feed
10-12 08:55	79.251.26[.]221	Attacker	—	1 feed
10-12 08:55	84.155.20[.]182	Attacker	—	1 feed
10-12 08:55	84.156.105[.]70	Attacker	—	1 feed
10-12 08:55	84.162.124[.]72	Attacker	—	1 feed
10-12 08:55	87.122.22[.]67	Attacker	—	1 feed
10-12 08:55	87.177.29[.]124	Attacker	—	1 feed
10-12 08:55	87.79.224[.]215	Attacker	—	1 feed
10-12 08:55	89.246.162[.]72	Attacker	—	1 feed
10-12 08:55	89.247.161[.]191	Attacker	—	1 feed
10-12 08:55	89.247.254[.]87	Attacker	—	1 feed
10-12 08:55	91.2.10[.]245	Attacker	—	1 feed
10-12 08:55	91.52.67[.]10	Attacker	—	1 feed
10-12 08:55	91.53.31[.]12	Attacker	—	1 feed
10-12 08:55	91.67.165[.]78	Attacker	—	1 feed
10-12 08:55	92.208.10[.]32	Attacker	—	1 feed
10-12 08:55	92.208.101[.]93	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check