Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
16 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:08 | 52.111.236[.]23 | Malware | 1 feed 343 sandbox samples | ||||
| 10-12 10:00 | 3.254.102[.]235 | Attacker | — | 1 feed | |||
| 10-12 10:00 | 3.255.110[.]237 | Attacker | — | 1 feed | |||
| 10-12 09:53 | 20.54.36[.]229 | Malware | 1 feed 47 sandbox samples | ||||
| 10-12 09:30 | 54.171.104[.]254 | Attacker | — | 1 feed | |||
| 10-12 08:21 | 52.212.150[.]54 | Malware | 1 feed 200 sandbox samples | ||||
| 10-12 08:21 | 52.16.171[.]153 | Malware | 1 feed 95 sandbox samples | ||||
| 10-12 07:50 | 3.255.177[.]231 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 54.246.215[.]9 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 37.203.49[.]66 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 63.35.220[.]27 | Attacker | — | 1 feed | |||
| 10-12 06:08 | 40.127.240[.]158 | Malware | 1 feed 143 sandbox samples | ||||
| 10-12 05:35 | 3.255.121[.]35 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 18.200.248[.]62 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 54.216.112[.]174 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 89.106.143[.]151 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.