Malicious IP Address Feed
Newly reported malicious IP addresses; 90,755 tracked.
27 indicators match · newest first · updated 2026-10-12 09:36 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:04 | 160.16.200[.]77 | Malware | 1 feed 181 sandbox samples | ||||
| 10-12 08:55 | 130.94.66[.]11 | Attacker | — | 1 feed | |||
| 10-12 08:55 | 34.146.111[.]201 | Attacker | — | 1 feed | |||
| 10-12 08:21 | 133.242.129[.]155 | Malware | 1 feed 506 sandbox samples | ||||
| 10-12 08:20 | 118.104.215[.]19 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 164.52.24[.]189 | Attacker | — | 1 feed | |||
| 10-12 07:15 | 35.243.112[.]65 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 141.101.87[.]74 | Attacker | — | 1 feed | |||
| 10-12 06:41 | 2a09[:]bac5[:]4434[:]dc[:][:]16[:]20e | Attacker | — | 1 feed | |||
| 10-12 06:41 | 35.200.42[.]80 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 34.104.208[.]215 | Attacker | — | 1 feed | |||
| 10-12 05:35 | 35.190.226[.]58 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 43.167.198[.]92 | Attacker | — | 4 feeds | |||
| 10-12 04:35 | 177.3.92[.]13 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 160.249.17[.]136 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 64.110.100[.]59 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 121.2.77[.]166 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 133.242.208[.]45 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 136.110.70[.]58 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 45.249.89[.]13 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.84.22[.]0 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.84.118[.]55 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 34.84.84[.]121 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 79.127.129[.]199 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 136.110.121[.]238 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 159.26.119[.]5 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 153.123.7[.]218 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.