Malicious IP Address Feed
Newly reported malicious IP addresses; 89,246 tracked.
9 indicators match · newest first · updated 2026-10-12 10:25 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 09:53 | 109.98.58[.]98 | Malware | 1 feed 2,477 sandbox samples | ||||
| 10-12 09:30 | 135.136.63[.]61 | Attacker | — | 1 feed | |||
| 10-12 07:50 | 188.27.241[.]122 | Attacker | — | 1 feed | |||
| 10-12 06:55 | 62.231.103[.]202 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 31.46.22[.]138 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 2a02[:]2f0d[:]940e[:]3d00[:]4d63[:]ad02[:]c40a[:]f5 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 86.120.48[.]79 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 31.46.22[.]133 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 5.12.138[.]85 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.