Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

13 indicators match · newest first · updated 2026-10-12 10:40 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:1023.239.13[.]74Attacker—1 feed
10-12 08:46198.58.118[.]167Malware1 feed 787 sandbox samples
10-12 08:4645.56.79[.]23Malware1 feed 864 sandbox samples
10-12 08:46173.255.194[.]134Malware1 feed 917 sandbox samples
10-12 08:4645.33.23[.]183Malware1 feed 664 sandbox samples
10-12 08:4645.33.30[.]197Malware1 feed 616 sandbox samples
10-12 08:4645.33.2[.]79Malware1 feed 679 sandbox samples
10-12 08:4645.79.19[.]196Malware1 feed 601 sandbox samples
10-12 07:55172.234.230[.]37Attacker—1 feed
10-12 06:55172.104.10[.]247Attacker—1 feed
10-12 05:55172.236.250[.]48Attacker—1 feed
10-12 05:3545.79.152[.]14Attacker—2 feeds
10-12 05:00172.236.228[.]208Attacker—1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.