Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
12 indicators match · newest first · updated 2026-10-12 10:30 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:53 | 185.95.186[.]58 | Malware | 1 feed 1,050 sandbox samples | ||||
| 10-12 09:30 | 65.20.247[.]246 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 65.20.157[.]21 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 151.236.176[.]141 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 169.224.35[.]63 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 169.224.38[.]166 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 65.20.151[.]169 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 212.237.123[.]225 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 85.194.250[.]35 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 65.20.252[.]167 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 65.20.132[.]11 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 65.20.130[.]220 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.