Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
188 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:30 | 35.247.153[.]115 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 43.98.193[.]190 | Attacker | — | 1 feed | |||
| 10-12 10:10 | 111.221.44[.]12 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 129.150.41[.]45 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 134.185.81[.]133 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.107[.]4 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.112[.]8 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.117[.]121 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.117[.]201 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.119[.]249 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 140.245.124[.]77 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.217[.]95 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.218[.]34 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.224[.]21 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.227[.]57 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.243[.]214 | Attacker | — | 2 feeds | |||
| 10-12 10:00 | 161.118.251[.]93 | Attacker | — | 2 feeds | |||
| 10-12 09:53 | 37.0.10[.]214 | Malware | 1 feed 540 sandbox samples | ||||
| 10-12 09:53 | 37.0.10[.]237 | Malware | 1 feed 315 sandbox samples | ||||
| 10-12 09:36 | 37.0.10[.]244 | Malware | 1 feed 405 sandbox samples | ||||
| 10-12 09:30 | 13.213.136[.]15 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 136.85.74[.]35 | Attacker | — | 1 feed | |||
| 10-12 09:30 | 34.124.209[.]209 | Attacker | — | 1 feed | |||
| 10-12 09:04 | 194.145.227[.]159 | Malware | 1 feed 130 sandbox samples | ||||
| 10-12 08:51 | 186.240.199[.]179:443 | C2 | 1 feed | ||||
| 10-12 08:51 | 186.240.199[.]212:443 | C2 | 1 feed | ||||
| 10-12 08:46 | 2.56.56[.]126 | Malware | 1 feed 20 sandbox samples | ||||
| 10-12 08:21 | 85.202.169[.]116 | Malware | 1 feed 37 sandbox samples | ||||
| 10-12 08:21 | 2.56.57[.]65 | Malware | 1 feed 17 sandbox samples | ||||
| 10-12 08:20 | 161.118.235[.]207 | Attacker | — | 2 feeds | |||
| 10-12 08:20 | 34.158.63[.]109 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 35.187.250[.]232 | Attacker | — | 1 feed | |||
| 10-12 08:20 | 47.128.111[.]102 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.90[.]18 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 134.185.94[.]184 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.122[.]65 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.107.91[.]104 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 134.185.92[.]198 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.96[.]64 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.223[.]197 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.108[.]60 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.219[.]94 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.220[.]224 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.213[.]33 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.218[.]203 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 129.150.39[.]236 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.201[.]103 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.96[.]204 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 213.35.109[.]13 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.107.90[.]53 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.102[.]194 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.111[.]11 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.222[.]78 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 213.35.100[.]155 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 213.35.110[.]88 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 129.150.47[.]20 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 138.2.106[.]209 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 140.245.126[.]95 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.206[.]157 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.107.88[.]119 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 134.185.90[.]171 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 134.185.92[.]180 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 134.185.95[.]195 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 158.178.234[.]142 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 158.178.239[.]185 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.196[.]203 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.209[.]189 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.242[.]67 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.244[.]13 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.246[.]79 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.107.81[.]70 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.107.88[.]135 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 168.138.178[.]238 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 161.118.229[.]234 | Attacker | — | 3 feeds | |||
| 10-12 08:10 | 129.150.49[.]21 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 129.150.54[.]249 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.80[.]140 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.81[.]141 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.83[.]7 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.86[.]87 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.87[.]82 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.92[.]144 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 134.185.93[.]91 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 138.2.102[.]148 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 138.2.108[.]89 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 138.2.81[.]95 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.108[.]219 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.108[.]34 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.110[.]72 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.112[.]148 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.126[.]243 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.96[.]165 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 140.245.97[.]14 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 146.235.22[.]78 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 152.69.221[.]133 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.118.193[.]237 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.118.197[.]179 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.118.198[.]110 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.118.198[.]57 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 161.118.201[.]71 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.