Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

277 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 10:30	104.155.80[.]139	Attacker	—	1 feed
10-12 10:30	136.108.230[.]70	Attacker	—	1 feed
10-12 10:30	136.70.236[.]224	Attacker	—	1 feed
10-12 10:30	136.70.37[.]135	Attacker	—	1 feed
10-12 10:30	136.86.163[.]247	Attacker	—	1 feed
10-12 10:30	198.235.24[.]170	Attacker	—	1 feed
10-12 10:30	34.19.130[.]209	Attacker	—	1 feed
10-12 10:30	34.19.207[.]126	Attacker	—	1 feed
10-12 10:30	34.20.165[.]201	Attacker	—	1 feed
10-12 10:30	34.61.16[.]226	Attacker	—	1 feed
10-12 10:30	34.65.255[.]102	Attacker	—	1 feed
10-12 10:30	34.7.93[.]86	Attacker	—	1 feed
10-12 10:30	34.79.79[.]205	Attacker	—	2 feeds
10-12 10:30	35.186.180[.]189	Attacker	—	1 feed
10-12 10:30	35.198.88[.]153	Attacker	—	1 feed
10-12 10:30	35.201.165[.]116	Attacker	—	1 feed
10-12 10:30	35.231.42[.]169	Attacker	—	1 feed
10-12 10:30	35.233.4[.]243	Attacker	—	1 feed
10-12 10:30	35.242.194[.]157	Attacker	—	1 feed
10-12 10:30	35.247.153[.]115	Attacker	—	1 feed
10-12 10:30	35.252.116[.]44	Attacker	—	1 feed
10-12 10:15	35.252.21[.]156	Attacker	—	2 feeds
10-12 10:10	34.86.233[.]2	Attacker	—	1 feed
10-12 10:08	34.117.59[.]81	Malware		1 feed 6,386 sandbox samples
10-12 10:00	104.199.239[.]105	Attacker	—	1 feed
10-12 10:00	136.107.161[.]99	Attacker	—	1 feed
10-12 10:00	136.66.195[.]218	Attacker	—	1 feed
10-12 10:00	34.19.237[.]247	Attacker	—	1 feed
10-12 10:00	34.47.55[.]96	Attacker	—	1 feed
10-12 10:00	35.224.236[.]62	Attacker	—	1 feed
10-12 09:36	35.190.80[.]1	Malware		1 feed 459 sandbox samples
10-12 09:36	34.160.144[.]191	Malware		1 feed 1,529 sandbox samples
10-12 09:36	34.120.208[.]123	Malware		1 feed 863 sandbox samples
10-12 09:30	104.155.116[.]47	Attacker	—	1 feed
10-12 09:30	136.64.181[.]109	Attacker	—	1 feed
10-12 09:30	136.85.74[.]35	Attacker	—	1 feed
10-12 09:30	136.86.198[.]83	Attacker	—	1 feed
10-12 09:30	34.12.225[.]42	Attacker	—	1 feed
10-12 09:30	34.124.209[.]209	Attacker	—	1 feed
10-12 09:30	34.138.237[.]216	Attacker	—	1 feed
10-12 09:30	34.182.27[.]154	Attacker	—	1 feed
10-12 09:30	34.23.116[.]114	Attacker	—	1 feed
10-12 09:30	34.23.190[.]141	Attacker	—	1 feed
10-12 09:30	34.26.255[.]33	Attacker	—	1 feed
10-12 09:30	34.48.197[.]78	Attacker	—	1 feed
10-12 09:30	34.48.237[.]175	Attacker	—	1 feed
10-12 09:30	34.73.113[.]96	Attacker	—	1 feed
10-12 09:30	34.75.233[.]29	Attacker	—	1 feed
10-12 09:30	35.197.122[.]151	Attacker	—	1 feed
10-12 09:30	35.234.178[.]98	Attacker	—	1 feed
10-12 09:30	35.247.212[.]91	Attacker	—	1 feed
10-12 09:10	34.11.223[.]6	Attacker	—	2 feeds
10-12 09:10	207.175.206[.]28	Attacker	—	1 feed
10-12 08:55	104.196.156[.]47	Attacker	—	1 feed
10-12 08:55	136.64.81[.]34	Attacker	—	2 feeds
10-12 08:55	136.67.125[.]141	Attacker	—	1 feed
10-12 08:55	34.11.47[.]82	Attacker	—	1 feed
10-12 08:55	34.146.111[.]201	Attacker	—	1 feed
10-12 08:55	34.156.255[.]210	Attacker	—	1 feed
10-12 08:55	34.20.250[.]226	Attacker	—	1 feed
10-12 08:55	34.31.142[.]118	Attacker	—	1 feed
10-12 08:55	34.71.135[.]114	Attacker	—	1 feed
10-12 08:55	34.76.73[.]137	Attacker	—	1 feed
10-12 08:55	35.195.122[.]32	Attacker	—	1 feed
10-12 08:55	35.229.74[.]117	Attacker	—	2 feeds
10-12 08:46	104.155.207[.]188	Malware		1 feed 701 sandbox samples
10-12 08:21	34.174.61[.]199	Malware		1 feed 485 sandbox samples
10-12 08:20	207.175.138[.]62	Attacker	—	3 feeds
10-12 08:20	216.180.246[.]42	Attacker	—	2 feeds
10-12 08:20	34.140.170[.]45	Attacker	—	1 feed
10-12 08:20	34.158.63[.]109	Attacker	—	1 feed
10-12 08:20	34.70.209[.]231	Attacker	—	1 feed
10-12 08:20	34.95.246[.]208	Attacker	—	1 feed
10-12 08:20	34.95.255[.]126	Attacker	—	1 feed
10-12 08:20	35.187.250[.]232	Attacker	—	1 feed
10-12 08:20	35.194.250[.]178	Attacker	—	1 feed
10-12 07:50	136.67.34[.]140	Attacker	—	1 feed
10-12 07:50	136.85.82[.]64	Attacker	—	1 feed
10-12 07:50	136.85.98[.]114	Attacker	—	1 feed
10-12 07:50	136.86.213[.]237	Attacker	—	1 feed
10-12 07:50	34.13.197[.]159	Attacker	—	1 feed
10-12 07:50	34.133.112[.]223	Attacker	—	1 feed
10-12 07:50	34.62.93[.]48	Attacker	—	1 feed
10-12 07:50	34.9.7[.]29	Attacker	—	1 feed
10-12 07:50	35.198.46[.]37	Attacker	—	1 feed
10-12 07:50	35.198.46[.]50	Attacker	—	1 feed
10-12 07:50	35.203.112[.]169	Attacker	—	1 feed
10-12 07:50	35.203.83[.]71	Attacker	—	1 feed
10-12 07:50	35.221.212[.]164	Attacker	—	1 feed
10-12 07:50	35.238.220[.]234	Attacker	—	1 feed
10-12 07:15	136.67.38[.]87	Attacker	—	1 feed
10-12 07:15	34.11.180[.]87	Attacker	—	1 feed
10-12 07:15	34.132.207[.]44	Attacker	—	1 feed
10-12 07:15	34.52.180[.]255	Attacker	—	1 feed
10-12 07:15	34.53.129[.]203	Attacker	—	1 feed
10-12 07:15	35.243.112[.]65	Attacker	—	1 feed
10-12 06:58	104.198.2[.]251	Malware		1 feed 256 sandbox samples
10-12 06:58	34.67.9[.]172	Malware		1 feed 101 sandbox samples
10-12 06:58	34.98.99[.]30	Malware		1 feed 254 sandbox samples
10-12 06:41	136.108.180[.]169	Attacker	—	1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check