Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

90 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:30194.44.72[.]2Attacker—1 feed
10-12 10:3037.221.157[.]68Attacker—1 feed
10-12 10:3091.234.138[.]96Attacker—1 feed
10-12 10:00176.103.1[.]112Attacker—1 feed
10-12 10:0085.137.57[.]159Attacker—1 feed
10-12 09:30194.44.77[.]54Attacker—1 feed
10-12 08:20176.103.4[.]19Attacker—1 feed
10-12 08:10188.191.67[.]59Attacker—1 feed
10-12 07:50176.103.5[.]205Attacker—1 feed
10-12 07:50194.44.140[.]59Attacker—1 feed
10-12 07:50194.44.140[.]88Attacker—1 feed
10-12 07:15176.103.7[.]80Attacker—1 feed
10-12 07:1537.221.144[.]111Attacker—1 feed
10-12 07:1537.221.149[.]162Attacker—1 feed
10-12 07:15176.103.3[.]245Attacker—1 feed
10-12 06:41185.183.94[.]223Attacker—1 feed
10-12 06:1077.239.165[.]56Attacker—1 feed
10-12 06:10176.241.106[.]166Attacker—1 feed
10-12 05:3537.221.132[.]134Attacker—1 feed
10-12 04:35176.103.7[.]110Attacker—2 feeds
10-12 04:35176.103.7[.]244Attacker—2 feeds
10-12 04:3546.33.39[.]19Attacker—3 feeds
10-12 04:3546.201.233[.]190Attacker—2 feeds
10-12 04:35176.103.11[.]134Attacker—2 feeds
10-12 04:35176.103.2[.]178Attacker—2 feeds
10-12 04:35176.103.3[.]100Attacker—2 feeds
10-12 04:35178.92.103[.]11Attacker—2 feeds
10-12 04:35194.44.140[.]125Attacker—2 feeds
10-12 04:35195.64.250[.]9Attacker—2 feeds
10-12 04:35145.224.122[.]222Attacker—2 feeds
10-12 04:35176.103.2[.]158Attacker—2 feeds
10-12 04:35194.12.73[.]231Attacker—2 feeds
10-12 04:3537.221.141[.]166Attacker—2 feeds
10-12 04:3537.57.21[.]242Attacker—2 feeds
10-12 04:3591.236.157[.]212Attacker—2 feeds
10-12 04:35176.103.2[.]52Attacker—2 feeds
10-12 04:3591.234.137[.]219Attacker—2 feeds
10-12 04:35185.17.124[.]27Attacker—2 feeds
10-12 04:3591.234.136[.]28Attacker—2 feeds
10-12 04:35185.17.124[.]215Attacker—2 feeds
10-12 04:35185.17.124[.]94Attacker—2 feeds
10-12 04:3531.41.69[.]201Attacker—2 feeds
10-12 04:3537.221.147[.]6Attacker—2 feeds
10-12 04:3579.142.199[.]109Attacker—2 feeds
10-12 04:3591.234.139[.]21Attacker—2 feeds
10-12 04:35185.17.125[.]143Attacker—2 feeds
10-12 04:35185.17.125[.]38Attacker—2 feeds
10-12 04:3537.221.128[.]69Attacker—2 feeds
10-12 04:3537.221.131[.]24Attacker—2 feeds
10-12 04:3537.221.153[.]144Attacker—2 feeds
10-12 04:35194.44.50[.]182Attacker—2 feeds
10-12 04:35217.196.163[.]110Attacker—2 feeds
10-12 04:3537.221.133[.]140Attacker—2 feeds
10-12 04:3546.98.62[.]119Attacker—2 feeds
10-12 04:35146.120.161[.]69Attacker—2 feeds
10-12 04:35196.251.121[.]46Attacker—2 feeds
10-12 04:3537.221.133[.]88Attacker—2 feeds
10-12 04:35185.138.230[.]46Attacker—2 feeds
10-12 04:35185.17.124[.]187Attacker—2 feeds
10-12 04:35185.17.125[.]53Attacker—2 feeds
10-12 04:35185.17.124[.]177Attacker—2 feeds
10-12 04:3537.221.137[.]186Attacker—2 feeds
10-12 04:355.58.103[.]49Attacker—2 feeds
10-12 04:35176.103.0[.]138Attacker—2 feeds
10-12 04:3591.234.139[.]83Attacker—2 feeds
10-12 04:35176.103.11[.]64Attacker—2 feeds
10-12 04:3577.120.129[.]7Attacker—2 feeds
10-12 04:3537.221.153[.]252Attacker—2 feeds
10-12 04:3537.221.156[.]65Attacker—2 feeds
10-12 04:35185.17.125[.]40Attacker—2 feeds
10-12 04:3577.52.252[.]244Attacker—2 feeds
10-12 04:3591.234.136[.]86Attacker—2 feeds
10-12 04:35176.103.0[.]241Attacker—2 feeds
10-12 04:35176.103.4[.]116Attacker—2 feeds
10-12 04:35176.103.6[.]154Attacker—2 feeds
10-12 04:35185.17.124[.]251Attacker—2 feeds
10-12 04:3593.171.188[.]94Attacker—2 feeds
10-12 04:35176.103.0[.]207Attacker—2 feeds
10-12 04:35194.12.81[.]97Attacker—2 feeds
10-12 04:3537.221.139[.]92Attacker—2 feeds
10-12 04:3546.201.249[.]252Attacker—2 feeds
10-12 04:35194.44.57[.]169Attacker—2 feeds
10-12 04:35130.0.52[.]180Attacker—2 feeds
10-12 04:355.58.0[.]143Attacker—2 feeds
10-12 04:3591.228.122[.]146Attacker—2 feeds
10-12 04:3537.221.157[.]52Attacker—2 feeds
10-12 04:3537.221.139[.]37Attacker—2 feeds
10-12 04:35176.103.3[.]49Attacker—2 feeds
10-12 04:3537.221.132[.]59Attacker—2 feeds
10-12 04:3537.221.139[.]36Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.