Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
9 indicators match · newest first · updated 2026-10-12 11:51 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:53 | 18.156.13[.]209 | Malware | 1 feed 43 sandbox samples | ||||
| 10-12 09:53 | 3.127.138[.]57 | Malware | 1 feed 46 sandbox samples | ||||
| 10-12 09:53 | 3.126.37[.]18 | Malware | 1 feed 48 sandbox samples | ||||
| 10-12 09:53 | 18.197.239[.]5 | Malware | 1 feed 44 sandbox samples | ||||
| 10-12 09:10 | 18.156.142[.]154 | Attacker | — | 2 feeds | |||
| 10-12 07:26 | 3.64.163[.]50 | Malware | 1 feed 301 sandbox samples | ||||
| 10-12 07:18 | 63.179.162[.]160:16747 | C2 | 1 feed | ||||
| 10-12 04:45 | 3.121.139[.]82 | Malware | — | 1 feed 46 sandbox samples | |||
| 10-12 04:45 | 3.127.59[.]75 | Malware | — | 1 feed 49 sandbox samples |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.