Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

68 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	2001[:]41d0[:]304[:]300[:][:]c15d	Attacker	—	1 feed
10-12 09:30	46.105.81[.]160	Attacker	—	1 feed
10-12 09:04	51.254.84[.]37	Malware		1 feed 56 sandbox samples
10-12 08:55	2001[:]41d0[:]33a[:]a00[:][:]40e	Attacker	—	1 feed
10-12 08:55	45.157.112[.]2	Attacker	—	1 feed
10-12 08:55	79.135.105[.]90	Attacker	—	1 feed
10-12 08:46	89.46.234[.]189	Malware		1 feed 43 sandbox samples
10-12 08:21	185.156.72[.]39	Malware		1 feed 56 sandbox samples
10-12 08:21	178.32.215[.]165	Malware		1 feed 32 sandbox samples
10-12 08:20	216.180.246[.]42	Attacker	—	2 feeds
10-12 08:10	91.231.89[.]69	Attacker	—	1 feed
10-12 07:55	163.171.133[.]172	Attacker	—	1 feed
10-12 07:53	91.121.67[.]60	Malware		1 feed 1,252 sandbox samples
10-12 07:53	91.216.107[.]153	Malware		1 feed 187 sandbox samples
10-12 07:50	54.36.60[.]45	Attacker	—	1 feed
10-12 07:26	194.59.31[.]31	Malware		1 feed 3 sandbox samples
10-12 07:15	82.127.132[.]221	Attacker	—	1 feed
10-12 06:58	37.187.167[.]53	Malware		1 feed 16 sandbox samples
10-12 06:55	85.217.140[.]51	Attacker	—	3 feeds
10-12 06:55	137.74.246[.]152	Attacker	—	1 feed
10-12 06:49	213.176.73[.]162:80	C2		1 feed
10-12 06:41	194.70.234[.]219	Attacker	—	1 feed
10-12 06:32	217.182.169[.]148	Malware		1 feed 113 sandbox samples
10-12 06:32	51.255.34[.]118	Malware		1 feed 105 sandbox samples
10-12 06:10	212.129.34[.]236	Attacker	—	2 feeds
10-12 06:10	91.231.89[.]171	Attacker	—	1 feed
10-12 06:10	91.231.89[.]173	Attacker	—	1 feed
10-12 06:10	91.231.89[.]67	Attacker	—	1 feed
10-12 05:55	85.217.140[.]9	Attacker	—	2 feeds
10-12 05:48	194.180.174[.]80	Malware		1 feed 15 sandbox samples
10-12 05:35	178.20.55[.]182	Attacker	—	2 feeds
10-12 05:35	51.68.111[.]205	Attacker	—	1 feed
10-12 05:31	193.56.146[.]177	Malware		1 feed 52 sandbox samples
10-12 05:15	193.56.146[.]194	Malware		1 feed 53 sandbox samples
10-12 05:15	193.56.146[.]77	Malware		1 feed 41 sandbox samples
10-12 05:00	193.56.146[.]244	Malware		1 feed 33 sandbox samples
10-12 05:00	92.222.108[.]104	Attacker	—	1 feed
10-12 04:35	91.196.152[.]104	Attacker	—	2 feeds
10-12 04:35	216.180.246[.]156	Attacker	—	2 feeds
10-12 04:35	77.239.124[.]102	Attacker	—	2 feeds
10-12 04:35	195.86.24[.]119	Attacker	—	2 feeds
10-12 04:35	2a09[:]bac5[:]34b4[:]1c82[:][:]2d7[:]2	Attacker	—	2 feeds
10-12 04:35	77.239.124[.]105	Attacker	—	2 feeds
10-12 04:35	82.64.16[.]65	Attacker	—	2 feeds
10-12 04:35	45.134.79[.]139	Attacker	—	2 feeds
10-12 04:35	195.86.24[.]116	Attacker	—	2 feeds
10-12 04:35	77.32.148[.]62	Attacker	—	2 feeds
10-12 04:35	87.91.7[.]23	Attacker	—	2 feeds
10-12 04:35	216.180.246[.]235	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]8	Attacker	—	3 feeds
10-12 04:35	45.134.79[.]157	Attacker	—	2 feeds
10-12 04:35	77.239.124[.]116	Attacker	—	2 feeds
10-12 04:35	138.199.16[.]133	Attacker	—	2 feeds
10-12 04:35	78.116.50[.]2	Attacker	—	2 feeds
10-12 04:35	216.180.246[.]110	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]139	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]145	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]176	Attacker	—	3 feeds
10-12 04:35	2a02[:]4780[:]28[:]9afa[:][:]1	Attacker	—	2 feeds
10-12 04:35	194.59.30[.]149	Attacker	—	2 feeds
10-12 04:35	216.180.246[.]47	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]154	Attacker	—	3 feeds
10-12 04:35	92.92.129[.]40	Attacker	—	2 feeds
10-12 04:35	92.205.229[.]83	Attacker	—	2 feeds
10-12 04:35	216.180.246[.]113	Attacker	—	3 feeds
10-12 04:35	216.180.246[.]159	Attacker	—	3 feeds
10-12 04:35	185.177.72[.]29	Attacker	—	3 feeds
10-12 04:35	5.48.159[.]28	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check