Malicious IP Address Feed
Newly reported malicious IP addresses; 90,418 tracked.
38 indicators match · newest first · updated 2026-10-12 11:31 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:45 | 45.195.226[.]58:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.227[.]43:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.227[.]54:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.227[.]57:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.227[.]58:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]233:25206 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]24:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]121:25227 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]194:25217 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]43:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]53:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]54:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]56:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.226[.]57:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]25:25219 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]8:25214 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]108:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]109:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]116:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]117:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]118:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]19:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.215[.]23:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]113:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]120:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]121:25201 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]122:25200 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]124:25219 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]19:25210 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]215:25217 | C2 | 1 feed | — | |||
| 10-12 09:45 | 45.195.214[.]23:25201 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]134:25211 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]17:25214 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]195:25217 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]227:25206 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]41:25210 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]56:25200 | C2 | 1 feed | — | |||
| 10-12 09:43 | 156.236.4[.]58:25200 | C2 | 1 feed | — |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.