Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
23 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:04 | 185.216.70[.]222 | Malware | 1 feed 251 sandbox samples | ||||
| 10-12 08:05 | 91.92.41[.]164:2404 | C2 | 1 feed | ||||
| 10-12 07:53 | 194.49.94[.]77 | Malware | 1 feed 85 sandbox samples | ||||
| 10-12 07:53 | 194.49.94[.]72 | Malware | — | 1 feed 146 sandbox samples | |||
| 10-12 07:53 | 111.90.156[.]58 | Malware | 1 feed 335 sandbox samples | ||||
| 10-12 07:53 | 194.169.175[.]118 | Malware | 1 feed 231 sandbox samples | ||||
| 10-12 07:50 | 91.92.68[.]86 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 185.255.215[.]36 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 87.227.143[.]150 | Attacker | — | 1 feed | |||
| 10-12 04:45 | 45.12.253[.]56 | Malware | 1 feed 942 sandbox samples | ||||
| 10-12 04:45 | 45.12.253[.]72 | Malware | 1 feed 241 sandbox samples | ||||
| 10-12 04:45 | 45.12.253[.]75 | Malware | 1 feed 179 sandbox samples | ||||
| 10-12 04:45 | 45.12.253[.]98 | Malware | 1 feed 206 sandbox samples | ||||
| 10-12 04:35 | 80.94.95[.]114 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 62.60.134[.]142 | Attacker | — | 3 feeds | — | ||
| 10-12 04:35 | 185.255.212[.]68 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 185.253.159[.]81 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.85.171[.]68 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 77.85.204[.]35 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 156.146.55[.]195 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 93.152.233[.]40 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 91.92.41[.]7 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 158.173.89[.]63 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.