Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

16 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:15189.172.58[.]128Attacker—1 feed
10-12 09:43156.252.210[.]61:25219C21 feed —
10-12 08:20216.238.85[.]59Attacker—1 feed
10-12 08:10187.170.123[.]246Attacker—1 feed
10-12 08:10189.216.43[.]2Attacker—1 feed
10-12 05:35187.208.61[.]10Attacker—1 feed
10-12 04:35189.222.81[.]236Attacker—2 feeds
10-12 04:35201.116.10[.]58Attacker—2 feeds
10-12 04:35201.130.121[.]116Attacker—2 feeds
10-12 04:3538.194.249[.]139Attacker—2 feeds
10-12 04:35177.224.36[.]51Attacker—2 feeds
10-12 04:35189.218.223[.]99Attacker—2 feeds
10-12 04:35189.135.66[.]242Attacker—2 feeds
10-12 04:35201.143.98[.]117Attacker—2 feeds
10-12 04:35170.239.148[.]92Attacker—2 feeds
10-12 04:35187.154.96[.]215Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.