Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

17 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:08194.59.31[.]47Malware—1 feed 2 sandbox samples
10-12 10:08194.59.31[.]4Malware—1 feed 2 sandbox samples
10-12 09:0451.254.84[.]37Malware1 feed 56 sandbox samples
10-12 08:4689.46.234[.]189Malware1 feed 43 sandbox samples
10-12 08:21185.156.72[.]39Malware1 feed 56 sandbox samples
10-12 08:21178.32.215[.]165Malware1 feed 32 sandbox samples
10-12 07:5391.121.67[.]60Malware1 feed 1,252 sandbox samples
10-12 07:5391.216.107[.]153Malware1 feed 187 sandbox samples
10-12 07:26194.59.31[.]31Malware1 feed 3 sandbox samples
10-12 06:5837.187.167[.]53Malware1 feed 16 sandbox samples
10-12 06:32217.182.169[.]148Malware1 feed 113 sandbox samples
10-12 06:3251.255.34[.]118Malware1 feed 105 sandbox samples
10-12 05:48194.180.174[.]80Malware1 feed 15 sandbox samples
10-12 05:31193.56.146[.]177Malware1 feed 52 sandbox samples
10-12 05:15193.56.146[.]194Malware1 feed 53 sandbox samples
10-12 05:15193.56.146[.]77Malware1 feed 41 sandbox samples
10-12 05:00193.56.146[.]244Malware1 feed 33 sandbox samples

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.