Malicious IP Address Feed
Newly reported malicious IP addresses; 90,756 tracked.
5 indicators match · newest first · updated 2026-10-12 09:40 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 08:51 | 186.240.199[.]179:443 | C2 | 1 feed | ||||
| 10-12 08:51 | 186.240.199[.]212:443 | C2 | 1 feed | ||||
| 10-12 07:04 | 159.223.68[.]251:443 | C2 | 1 feed | ||||
| 10-12 07:04 | 178.128.223[.]92:443 | C2 | 1 feed | ||||
| 10-12 06:11 | 172.111.138[.]100:4427 | C2 | — | 2 feeds 64 sandbox samples |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.