Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

16 indicators match · newest first · updated 2026-10-12 10:35 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:08123.140.161[.]243Malware1 feed 1,520 sandbox samples
10-12 09:53211.119.84[.]112Malware1 feed 1,350 sandbox samples
10-12 09:53211.53.230[.]67Malware1 feed 965 sandbox samples
10-12 09:53211.171.233[.]126Malware1 feed 1,232 sandbox samples
10-12 09:53211.171.233[.]129Malware1 feed 1,150 sandbox samples
10-12 09:36175.119.10[.]231Malware1 feed 2,489 sandbox samples
10-12 09:36211.40.39[.]251Malware1 feed 1,211 sandbox samples
10-12 08:46210.182.29[.]70Malware1 feed 1,371 sandbox samples
10-12 08:4658.235.189[.]192Malware1 feed 598 sandbox samples
10-12 08:21211.119.84[.]111Malware1 feed 1,271 sandbox samples
10-12 08:21211.59.14[.]90Malware1 feed 1,047 sandbox samples
10-12 08:21218.54.31[.]226Malware1 feed 496 sandbox samples
10-12 08:211.234.83[.]146Malware1 feed 503 sandbox samples
10-12 08:21218.54.31[.]165Malware1 feed 406 sandbox samples
10-12 07:26222.236.49[.]124Malware1 feed 933 sandbox samples
10-12 07:26218.38.121[.]17Malware1 feed 72 sandbox samples

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.