Malicious IP Address Feed

Newly reported malicious IP addresses; 90,460 tracked.

18 indicators match · newest first · updated 2026-10-12 11:51 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 11:21145.239.202[.]9Malware1 feed 32 sandbox samples
10-12 10:3051.195.244[.]223Attacker—1 feed
10-12 10:0051.77.107[.]231Attacker—1 feed
10-12 08:55198.244.242[.]7Attacker—1 feed
10-12 08:5554.38.147[.]83Attacker—1 feed
10-12 08:20198.244.242[.]152Attacker—1 feed
10-12 08:2051.195.215[.]82Attacker—1 feed
10-12 07:50198.244.183[.]218Attacker—1 feed
10-12 07:50198.244.242[.]240Attacker—1 feed
10-12 07:15198.244.226[.]209Attacker—1 feed
10-12 06:41148.113.130[.]55Attacker—1 feed
10-12 06:4151.195.183[.]236Attacker—1 feed
10-12 06:4154.38.147[.]163Attacker—1 feed
10-12 06:10198.244.168[.]186Attacker—1 feed
10-12 06:10198.244.168[.]251Attacker—1 feed
10-12 05:35198.244.242[.]254Attacker—1 feed
10-12 05:00198.244.240[.]134Attacker—1 feed
10-12 04:4551.89.207[.]166Malware1 feed 12 sandbox samples

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.