Malicious IP Address Feed

Newly reported malicious IP addresses; 90,756 tracked.

177 indicators match · newest first · updated 2026-10-12 09:40 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:30	136.64.181[.]109	Attacker	—	1 feed
10-12 09:30	136.86.198[.]83	Attacker	—	1 feed
10-12 09:30	34.138.237[.]216	Attacker	—	1 feed
10-12 09:30	34.182.27[.]154	Attacker	—	1 feed
10-12 09:30	34.23.116[.]114	Attacker	—	1 feed
10-12 09:30	34.23.190[.]141	Attacker	—	1 feed
10-12 09:30	34.26.255[.]33	Attacker	—	1 feed
10-12 09:30	34.48.197[.]78	Attacker	—	1 feed
10-12 09:30	34.48.237[.]175	Attacker	—	1 feed
10-12 09:30	34.73.113[.]96	Attacker	—	1 feed
10-12 09:30	34.75.233[.]29	Attacker	—	1 feed
10-12 09:30	35.197.122[.]151	Attacker	—	1 feed
10-12 09:30	35.234.178[.]98	Attacker	—	1 feed
10-12 09:19	34.117.59[.]81	Malware		1 feed 6,386 sandbox samples
10-12 09:10	34.11.223[.]6	Attacker	—	2 feeds
10-12 09:04	34.160.144[.]191	Malware		1 feed 1,529 sandbox samples
10-12 08:55	104.196.156[.]47	Attacker	—	1 feed
10-12 08:55	136.64.81[.]34	Attacker	—	2 feeds
10-12 08:55	136.67.125[.]141	Attacker	—	1 feed
10-12 08:55	34.11.47[.]82	Attacker	—	1 feed
10-12 08:55	34.20.250[.]226	Attacker	—	1 feed
10-12 08:55	34.31.142[.]118	Attacker	—	1 feed
10-12 08:55	34.71.135[.]114	Attacker	—	1 feed
10-12 08:55	35.229.74[.]117	Attacker	—	2 feeds
10-12 08:46	35.190.80[.]1	Malware		1 feed 459 sandbox samples
10-12 08:21	34.120.208[.]123	Malware		1 feed 863 sandbox samples
10-12 08:21	34.174.61[.]199	Malware		1 feed 485 sandbox samples
10-12 08:20	34.70.209[.]231	Attacker	—	1 feed
10-12 07:50	136.67.34[.]140	Attacker	—	1 feed
10-12 07:50	136.86.213[.]237	Attacker	—	1 feed
10-12 07:50	34.133.112[.]223	Attacker	—	1 feed
10-12 07:50	34.9.7[.]29	Attacker	—	1 feed
10-12 07:50	35.238.220[.]234	Attacker	—	1 feed
10-12 07:15	136.67.38[.]87	Attacker	—	1 feed
10-12 07:15	34.11.180[.]87	Attacker	—	1 feed
10-12 07:15	34.132.207[.]44	Attacker	—	1 feed
10-12 06:58	104.198.2[.]251	Malware		1 feed 256 sandbox samples
10-12 06:58	34.67.9[.]172	Malware		1 feed 101 sandbox samples
10-12 06:58	34.98.99[.]30	Malware		1 feed 254 sandbox samples
10-12 06:41	136.108.180[.]169	Attacker	—	1 feed
10-12 06:41	35.253.140[.]20	Attacker	—	1 feed
10-12 06:32	34.41.139[.]193	Malware		1 feed 534 sandbox samples
10-12 06:10	198.235.24[.]234	Attacker	—	1 feed
10-12 06:10	34.139.119[.]201	Attacker	—	1 feed
10-12 06:10	34.42.16[.]189	Attacker	—	1 feed
10-12 06:10	34.86.182[.]172	Attacker	—	1 feed
10-12 05:00	34.107.243[.]93	Malware		1 feed 264 sandbox samples
10-12 05:00	34.68.34[.]70	Attacker	—	1 feed
10-12 04:35	198.235.24[.]185	Attacker	—	2 feeds
10-12 04:35	162.216.150[.]162	Attacker	—	3 feeds
10-12 04:35	136.116.3[.]242	Attacker	—	2 feeds
10-12 04:35	136.119.172[.]140	Attacker	—	2 feeds
10-12 04:35	136.119.213[.]213	Attacker	—	2 feeds
10-12 04:35	34.170.69[.]140	Attacker	—	2 feeds
10-12 04:35	34.30.135[.]78	Attacker	—	2 feeds
10-12 04:35	34.31.94[.]107	Attacker	—	2 feeds
10-12 04:35	34.59.206[.]233	Attacker	—	2 feeds
10-12 04:35	35.233.169[.]246	Attacker	—	2 feeds
10-12 04:35	34.45.119[.]226	Attacker	—	2 feeds
10-12 04:35	34.46.199[.]161	Attacker	—	2 feeds
10-12 04:35	34.46.78[.]192	Attacker	—	2 feeds
10-12 04:35	35.253.32[.]55	Attacker	—	2 feeds
10-12 04:35	16.216.88[.]163	Attacker	—	2 feeds
10-12 04:35	35.232.1[.]209	Attacker	—	2 feeds
10-12 04:35	8.235.23[.]50	Attacker	—	2 feeds
10-12 04:35	34.11.33[.]169	Attacker	—	2 feeds
10-12 04:35	34.23.102[.]146	Attacker	—	2 feeds
10-12 04:35	34.23.191[.]149	Attacker	—	2 feeds
10-12 04:35	35.233.195[.]190	Attacker	—	2 feeds
10-12 04:35	35.237.80[.]53	Attacker	—	2 feeds
10-12 04:35	34.150.243[.]31	Attacker	—	2 feeds
10-12 04:35	34.48.20[.]161	Attacker	—	2 feeds
10-12 04:35	35.229.42[.]178	Attacker	—	2 feeds
10-12 04:35	35.231.236[.]7	Attacker	—	2 feeds
10-12 04:35	35.237.41[.]84	Attacker	—	2 feeds
10-12 04:35	35.245.166[.]226	Attacker	—	2 feeds
10-12 04:35	8.231.199[.]89	Attacker	—	2 feeds
10-12 04:35	8.235.41[.]116	Attacker	—	2 feeds
10-12 04:35	104.196.205[.]81	Attacker	—	2 feeds
10-12 04:35	136.108.144[.]96	Attacker	—	2 feeds
10-12 04:35	34.138.141[.]48	Attacker	—	2 feeds
10-12 04:35	34.150.190[.]202	Attacker	—	2 feeds
10-12 04:35	35.231.254[.]213	Attacker	—	2 feeds
10-12 04:35	35.238.183[.]229	Attacker	—	2 feeds
10-12 04:35	136.64.33[.]240	Attacker	—	2 feeds
10-12 04:35	136.80.123[.]188	Attacker	—	2 feeds
10-12 04:35	34.127.75[.]85	Attacker	—	2 feeds
10-12 04:35	34.21.6[.]9	Attacker	—	2 feeds
10-12 04:35	34.27.0[.]103	Attacker	—	2 feeds
10-12 04:35	34.41.230[.]234	Attacker	—	2 feeds
10-12 04:35	35.239.43[.]128	Attacker	—	2 feeds
10-12 04:35	136.108.73[.]60	Attacker	—	2 feeds
10-12 04:35	34.24.128[.]98	Attacker	—	2 feeds
10-12 04:35	198.235.24[.]83	Attacker	—	3 feeds
10-12 04:35	8.235.74[.]20	Attacker	—	2 feeds
10-12 04:35	34.138.196[.]176	Attacker	—	2 feeds
10-12 04:35	34.70.29[.]240	Attacker	—	2 feeds
10-12 04:35	34.44.153[.]153	Attacker	—	2 feeds
10-12 04:35	35.194.75[.]61	Attacker	—	2 feeds
10-12 04:35	136.87.82[.]181	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check