Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

106 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	102.129.54[.]82	Attacker	—	1 feed
10-12 08:20	102.129.56[.]200	Attacker	—	1 feed
10-12 08:20	102.129.60[.]160	Attacker	—	1 feed
10-12 08:20	197.234.201[.]189	Attacker	—	1 feed
10-12 08:20	41.193.162[.]227	Attacker	—	1 feed
10-12 07:15	102.129.55[.]69	Attacker	—	1 feed
10-12 07:15	102.129.59[.]23	Attacker	—	1 feed
10-12 07:15	102.64.32[.]101	Attacker	—	1 feed
10-12 07:15	102.64.47[.]130	Attacker	—	1 feed
10-12 07:15	102.64.47[.]54	Attacker	—	1 feed
10-12 07:15	102.129.53[.]110	Attacker	—	1 feed
10-12 07:15	102.129.56[.]114	Attacker	—	1 feed
10-12 06:41	102.129.55[.]9	Attacker	—	1 feed
10-12 06:41	102.129.59[.]145	Attacker	—	1 feed
10-12 06:41	102.64.35[.]185	Attacker	—	1 feed
10-12 06:41	102.64.38[.]157	Attacker	—	1 feed
10-12 06:10	41.203.59[.]246	Attacker	—	1 feed
10-12 06:10	102.129.53[.]40	Attacker	—	1 feed
10-12 06:10	102.165.122[.]140	Attacker	—	1 feed
10-12 05:35	102.64.42[.]50	Attacker	—	1 feed
10-12 05:35	102.64.46[.]235	Attacker	—	1 feed
10-12 05:35	129.232.161[.]134	Attacker	—	1 feed
10-12 05:00	150.171.109[.]74	Malware		1 feed 67 sandbox samples
10-12 05:00	102.64.45[.]152	Attacker	—	1 feed
10-12 04:35	197.95.17[.]235	Attacker	—	2 feeds
10-12 04:35	192.143.87[.]123	Attacker	—	2 feeds
10-12 04:35	102.129.56[.]199	Attacker	—	2 feeds
10-12 04:35	102.64.46[.]53	Attacker	—	2 feeds
10-12 04:35	165.165.117[.]116	Attacker	—	2 feeds
10-12 04:35	102.129.52[.]219	Attacker	—	2 feeds
10-12 04:35	102.129.63[.]174	Attacker	—	2 feeds
10-12 04:35	102.129.52[.]18	Attacker	—	2 feeds
10-12 04:35	102.64.33[.]95	Attacker	—	2 feeds
10-12 04:35	102.64.45[.]235	Attacker	—	2 feeds
10-12 04:35	102.64.47[.]53	Attacker	—	2 feeds
10-12 04:35	102.129.61[.]137	Attacker	—	2 feeds
10-12 04:35	102.64.46[.]115	Attacker	—	2 feeds
10-12 04:35	102.129.55[.]223	Attacker	—	2 feeds
10-12 04:35	102.129.52[.]160	Attacker	—	2 feeds
10-12 04:35	102.129.61[.]32	Attacker	—	2 feeds
10-12 04:35	102.64.32[.]238	Attacker	—	2 feeds
10-12 04:35	102.64.47[.]76	Attacker	—	2 feeds
10-12 04:35	197.234.206[.]108	Attacker	—	2 feeds
10-12 04:35	102.129.59[.]117	Attacker	—	2 feeds
10-12 04:35	165.73.180[.]36	Attacker	—	2 feeds
10-12 04:35	102.64.37[.]190	Attacker	—	2 feeds
10-12 04:35	102.129.53[.]34	Attacker	—	2 feeds
10-12 04:35	102.129.59[.]201	Attacker	—	2 feeds
10-12 04:35	102.64.40[.]74	Attacker	—	2 feeds
10-12 04:35	102.64.42[.]203	Attacker	—	2 feeds
10-12 04:35	102.64.41[.]61	Attacker	—	2 feeds
10-12 04:35	102.64.37[.]186	Attacker	—	2 feeds
10-12 04:35	102.64.42[.]193	Attacker	—	2 feeds
10-12 04:35	102.129.53[.]183	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]161	Attacker	—	2 feeds
10-12 04:35	102.64.40[.]70	Attacker	—	2 feeds
10-12 04:35	102.64.39[.]71	Attacker	—	2 feeds
10-12 04:35	102.64.33[.]226	Attacker	—	2 feeds
10-12 04:35	102.64.39[.]65	Attacker	—	2 feeds
10-12 04:35	2c0f[:]f830[:]120[:]a48[:]2045[:]c39d[:]5ac7[:]4af8	Attacker	—	2 feeds
10-12 04:35	102.129.59[.]52	Attacker	—	2 feeds
10-12 04:35	102.64.35[.]91	Attacker	—	2 feeds
10-12 04:35	102.64.41[.]211	Attacker	—	2 feeds
10-12 04:35	102.64.47[.]188	Attacker	—	2 feeds
10-12 04:35	102.129.52[.]195	Attacker	—	2 feeds
10-12 04:35	102.64.34[.]13	Attacker	—	2 feeds
10-12 04:35	102.64.37[.]15	Attacker	—	2 feeds
10-12 04:35	165.73.180[.]94	Attacker	—	2 feeds
10-12 04:35	102.129.57[.]16	Attacker	—	2 feeds
10-12 04:35	196.6.106[.]112	Attacker	—	2 feeds
10-12 04:35	102.129.54[.]77	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]130	Attacker	—	2 feeds
10-12 04:35	102.64.39[.]225	Attacker	—	2 feeds
10-12 04:35	102.64.42[.]84	Attacker	—	2 feeds
10-12 04:35	102.64.42[.]100	Attacker	—	2 feeds
10-12 04:35	102.64.41[.]48	Attacker	—	2 feeds
10-12 04:35	102.64.42[.]128	Attacker	—	2 feeds
10-12 04:35	102.64.45[.]31	Attacker	—	2 feeds
10-12 04:35	102.129.54[.]7	Attacker	—	2 feeds
10-12 04:35	102.129.56[.]108	Attacker	—	2 feeds
10-12 04:35	102.164.83[.]33	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]18	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]133	Attacker	—	2 feeds
10-12 04:35	102.129.53[.]194	Attacker	—	2 feeds
10-12 04:35	105.214.69[.]85	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]24	Attacker	—	2 feeds
10-12 04:35	102.64.46[.]154	Attacker	—	2 feeds
10-12 04:35	102.129.51[.]187	Attacker	—	2 feeds
10-12 04:35	102.129.53[.]169	Attacker	—	2 feeds
10-12 04:35	102.64.37[.]200	Attacker	—	2 feeds
10-12 04:35	102.64.37[.]47	Attacker	—	2 feeds
10-12 04:35	102.129.56[.]73	Attacker	—	2 feeds
10-12 04:35	102.129.61[.]179	Attacker	—	2 feeds
10-12 04:35	102.129.62[.]252	Attacker	—	2 feeds
10-12 04:35	102.32.160[.]207	Attacker	—	2 feeds
10-12 04:35	102.32.171[.]254	Attacker	—	2 feeds
10-12 04:35	102.129.51[.]201	Attacker	—	2 feeds
10-12 04:35	102.129.55[.]134	Attacker	—	2 feeds
10-12 04:35	102.64.33[.]9	Attacker	—	2 feeds
10-12 04:35	197.79.59[.]145	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check