Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

16 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:46193.166.255[.]171Malware1 feed 865 sandbox samples
10-12 08:46193.166.255[.]170Malware1 feed 48 sandbox samples
10-12 08:2195.217.27[.]240Malware1 feed 13 sandbox samples
10-12 08:2195.217.209[.]65Malware—1 feed 28 sandbox samples
10-12 08:21135.181.62[.]96Malware1 feed 11 sandbox samples
10-12 08:2195.216.1[.]203Malware1 feed 13 sandbox samples
10-12 07:5365.108.20[.]195Malware1 feed 409 sandbox samples
10-12 07:53185.229.66[.]214Malware—1 feed 18 sandbox samples
10-12 07:2645.9.74[.]80Malware1 feed 461 sandbox samples
10-12 06:5895.216.186[.]40Malware1 feed 427 sandbox samples
10-12 05:1545.138.74[.]121Malware1 feed 314 sandbox samples
10-12 04:35185.67.82[.]114Attacker—3 feeds
10-12 04:35193.138.7[.]202Attacker—2 feeds
10-12 04:3513.143.132[.]229Attacker—2 feeds
10-12 04:352.29.38[.]132Attacker—3 feeds
10-12 04:352a09[:]bac5[:]31c0[:]2db9[:][:]48e[:]80Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.