Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

66 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seen	Indicator	Category	Family	Reported by	Network
10-12 10:10	180.191.233[.]176	Attacker	—	1 feed
10-12 10:10	138.84.129[.]147	Attacker	—	1 feed
10-12 09:45	45.195.226[.]58:25200	C2		1 feed	—
10-12 09:45	45.195.227[.]43:25210	C2		1 feed	—
10-12 09:45	45.195.227[.]54:25201	C2		1 feed	—
10-12 09:45	45.195.227[.]57:25200	C2		1 feed	—
10-12 09:45	45.195.227[.]58:25200	C2		1 feed	—
10-12 09:45	45.195.215[.]233:25206	C2		1 feed	—
10-12 09:45	45.195.215[.]24:25200	C2		1 feed	—
10-12 09:45	45.195.226[.]121:25227	C2		1 feed	—
10-12 09:45	45.195.226[.]194:25217	C2		1 feed	—
10-12 09:45	45.195.226[.]43:25210	C2		1 feed	—
10-12 09:45	45.195.226[.]53:25201	C2		1 feed	—
10-12 09:45	45.195.226[.]54:25201	C2		1 feed	—
10-12 09:45	45.195.226[.]56:25200	C2		1 feed	—
10-12 09:45	45.195.226[.]57:25200	C2		1 feed	—
10-12 09:45	45.195.214[.]25:25219	C2		1 feed	—
10-12 09:45	45.195.214[.]8:25214	C2		1 feed	—
10-12 09:45	45.195.215[.]108:25210	C2		1 feed	—
10-12 09:45	45.195.215[.]109:25210	C2		1 feed	—
10-12 09:45	45.195.215[.]116:25201	C2		1 feed	—
10-12 09:45	45.195.215[.]117:25201	C2		1 feed	—
10-12 09:45	45.195.215[.]118:25200	C2		1 feed	—
10-12 09:45	45.195.215[.]19:25210	C2		1 feed	—
10-12 09:45	45.195.215[.]23:25201	C2		1 feed	—
10-12 09:45	45.195.214[.]113:25210	C2		1 feed	—
10-12 09:45	45.195.214[.]120:25201	C2		1 feed	—
10-12 09:45	45.195.214[.]121:25201	C2		1 feed	—
10-12 09:45	45.195.214[.]122:25200	C2		1 feed	—
10-12 09:45	45.195.214[.]124:25219	C2		1 feed	—
10-12 09:45	45.195.214[.]19:25210	C2		1 feed	—
10-12 09:45	45.195.214[.]215:25217	C2		1 feed	—
10-12 09:45	45.195.214[.]23:25201	C2		1 feed	—
10-12 09:43	156.236.4[.]134:25211	C2		1 feed	—
10-12 09:43	156.236.4[.]17:25214	C2		1 feed	—
10-12 09:43	156.236.4[.]195:25217	C2		1 feed	—
10-12 09:43	156.236.4[.]227:25206	C2		1 feed	—
10-12 09:43	156.236.4[.]41:25210	C2		1 feed	—
10-12 09:43	156.236.4[.]56:25200	C2		1 feed	—
10-12 09:43	156.236.4[.]58:25200	C2		1 feed	—
10-12 07:15	180.190.172[.]245	Attacker	—	1 feed
10-12 07:15	180.190.173[.]107	Attacker	—	1 feed
10-12 06:55	49.151.160[.]149	Attacker	—	1 feed
10-12 06:55	180.194.203[.]177	Attacker	—	1 feed
10-12 06:55	136.158.50[.]176	Attacker	—	1 feed
10-12 06:41	124.217.114[.]65	Attacker	—	1 feed
10-12 06:41	180.194.203[.]241	Attacker	—	1 feed
10-12 06:10	112.209.77[.]41	Attacker	—	1 feed
10-12 06:10	2405[:]8d40[:]48c9[:]c921[:]fca5[:]256f[:]2dfc[:]ef90	Attacker	—	1 feed
10-12 06:10	2001[:]4455[:]577[:]9a00[:]8d3d[:]8382[:]8ba8[:]9da8	Attacker	—	1 feed
10-12 05:35	2001[:]4456[:]c6e[:]8a00[:]2555[:]5d61[:]2dc1[:]aa2e	Attacker	—	1 feed
10-12 04:50	160.187.221[.]25	Attacker	—	1 feed
10-12 04:35	149.30.146[.]8	Attacker	—	2 feeds
10-12 04:35	180.191.77[.]85	Attacker	—	2 feeds
10-12 04:35	124.107.183[.]6	Attacker	—	2 feeds
10-12 04:35	112.207.164[.]66	Attacker	—	3 feeds
10-12 04:35	136.158.39[.]231	Attacker	—	2 feeds
10-12 04:35	138.84.72[.]180	Attacker	—	2 feeds
10-12 04:35	138.84.129[.]27	Attacker	—	2 feeds
10-12 04:35	162.4.246[.]142	Attacker	—	2 feeds
10-12 04:35	203.189.116[.]196	Attacker	—	3 feeds
10-12 04:35	143.44.184[.]164	Attacker	—	2 feeds
10-12 04:35	152.32.73[.]120	Attacker	—	2 feeds
10-12 04:35	2001[:]fd8[:]c31f[:]3e00[:]c0a5[:]691b[:]dd28[:]f2ce	Attacker	—	2 feeds
10-12 04:35	136.158.46[.]161	Attacker	—	3 feeds
10-12 04:35	49.145.211[.]146	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check