Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

12 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 09:53185.95.186[.]58Malware1 feed 1,050 sandbox samples
10-12 09:3065.20.247[.]246Attacker—1 feed
10-12 04:3565.20.157[.]21Attacker—2 feeds
10-12 04:35151.236.176[.]141Attacker—2 feeds
10-12 04:35169.224.35[.]63Attacker—2 feeds
10-12 04:35169.224.38[.]166Attacker—2 feeds
10-12 04:3565.20.151[.]169Attacker—2 feeds
10-12 04:35212.237.123[.]225Attacker—2 feeds
10-12 04:3585.194.250[.]35Attacker—2 feeds
10-12 04:3565.20.252[.]167Attacker—2 feeds
10-12 04:3565.20.132[.]11Attacker—2 feeds
10-12 04:3565.20.130[.]220Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.