Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

27 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 09:04160.16.200[.]77Malware1 feed 181 sandbox samples
10-12 08:55130.94.66[.]11Attacker—1 feed
10-12 08:5534.146.111[.]201Attacker—1 feed
10-12 08:21133.242.129[.]155Malware1 feed 506 sandbox samples
10-12 08:20118.104.215[.]19Attacker—1 feed
10-12 08:10164.52.24[.]189Attacker—1 feed
10-12 07:1535.243.112[.]65Attacker—1 feed
10-12 06:41141.101.87[.]74Attacker—1 feed
10-12 06:412a09[:]bac5[:]4434[:]dc[:][:]16[:]20eAttacker—1 feed
10-12 06:4135.200.42[.]80Attacker—1 feed
10-12 06:1034.104.208[.]215Attacker—1 feed
10-12 05:3535.190.226[.]58Attacker—1 feed
10-12 04:3543.167.198[.]92Attacker—4 feeds
10-12 04:35177.3.92[.]13Attacker—3 feeds
10-12 04:35160.249.17[.]136Attacker—2 feeds
10-12 04:3564.110.100[.]59Attacker—2 feeds
10-12 04:35121.2.77[.]166Attacker—2 feeds
10-12 04:35133.242.208[.]45Attacker—2 feeds
10-12 04:35136.110.70[.]58Attacker—2 feeds
10-12 04:3545.249.89[.]13Attacker—2 feeds
10-12 04:3534.84.22[.]0Attacker—2 feeds
10-12 04:3534.84.118[.]55Attacker—2 feeds
10-12 04:3534.84.84[.]121Attacker—2 feeds
10-12 04:3579.127.129[.]199Attacker—2 feeds
10-12 04:35136.110.121[.]238Attacker—2 feeds
10-12 04:35159.26.119[.]5Attacker—2 feeds
10-12 04:35153.123.7[.]218Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.