Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

25 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seen	Indicator	Category	Family	Reported by
10-12 09:45	77.110.114[.]31:443	C2		1 feed
10-12 09:45	64.50.186[.]111:56002	C2		1 feed
10-12 09:45	37.72.168[.]199:56002	C2		1 feed
10-12 09:45	23.227.196[.]76:56002	C2		1 feed
10-12 09:45	217.60.77[.]85:4782	C2		1 feed
10-12 09:45	216.9.225[.]201:1246	C2		1 feed
10-12 09:45	216.9.227[.]252:1246	C2		1 feed
10-12 09:43	156.252.86[.]123:25217	C2		1 feed
10-12 09:43	156.252.86[.]30:25210	C2		1 feed
10-12 09:43	154.86.11[.]119:25201	C2		1 feed
10-12 09:43	154.86.11[.]120:25200	C2		1 feed
10-12 09:43	154.86.11[.]121:25200	C2		1 feed
10-12 09:43	154.86.11[.]123:25219	C2		1 feed
10-12 09:43	154.86.11[.]22:25200	C2		1 feed
10-12 09:43	154.86.11[.]43:25227	C2		1 feed
10-12 09:43	153.52.179[.]62:443	C2		1 feed
10-12 08:05	216.9.224[.]78:2404	C2		1 feed
10-12 07:12	153.52.178[.]118:8041	C2	—	1 feed
10-12 07:05	38.46.15[.]202:8989	C2		1 feed
10-12 07:04	165.22.152[.]158:443	C2		1 feed
10-12 07:04	206.189.228[.]17:443	C2		1 feed
10-12 06:11	100.57.32[.]60:8443	C2		1 feed
10-12 06:11	165.245.160[.]178:5900	C2		2 feeds
10-12 06:11	165.245.171[.]220:5900	C2		2 feeds
10-12 06:11	71.15.96[.]217:23	C2		1 feed

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check