Malicious IP Address Feed

Newly reported malicious IP addresses; 90,741 tracked.

18 indicators match · newest first · updated 2026-10-12 12:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 12:205.196.110[.]226Attacker—2 feeds
10-12 12:2051.68.10[.]188Attacker—1 feed
10-12 12:10155.117.233[.]19Attacker—1 feed
10-12 11:5391.121.67[.]60Malware1 feed 1,252 sandbox samples
10-12 10:00141.11.96[.]193Attacker—1 feed
10-12 10:00155.117.197[.]33Attacker—1 feed
10-12 09:302001[:]41d0[:]304[:]300[:][:]c15dAttacker—1 feed
10-12 09:3046.105.81[.]160Attacker—1 feed
10-12 09:0451.254.84[.]37Malware1 feed 56 sandbox samples
10-12 08:552001[:]41d0[:]33a[:]a00[:][:]40eAttacker—1 feed
10-12 08:21178.32.215[.]165Malware1 feed 32 sandbox samples
10-12 07:5054.36.60[.]45Attacker—1 feed
10-12 06:5837.187.167[.]53Malware1 feed 16 sandbox samples
10-12 06:55137.74.246[.]152Attacker—1 feed
10-12 06:32217.182.169[.]148Malware1 feed 113 sandbox samples
10-12 06:3251.255.34[.]118Malware1 feed 105 sandbox samples
10-12 05:3551.68.111[.]205Attacker—1 feed
10-12 05:0092.222.108[.]104Attacker—1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.