Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

76 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seen	Indicator	Category	Family	Reported by	Network
10-12 09:10	201.24.116[.]175	Attacker	—	3 feeds
10-12 09:10	146.70.231[.]130	Attacker	—	1 feed
10-12 09:04	193.233.255[.]73	Malware		1 feed 1,102 sandbox samples
10-12 09:04	5.42.65[.]80	Malware		1 feed 690 sandbox samples
10-12 09:04	188.124.36[.]242	Malware		1 feed 534 sandbox samples
10-12 08:55	188.187.154[.]22	Attacker	—	1 feed
10-12 08:46	92.255.57[.]154	Malware		1 feed 703 sandbox samples	—
10-12 08:21	212.193.30[.]45	Malware		1 feed 1,205 sandbox samples
10-12 08:21	176.100.243[.]135	Malware		1 feed 148 sandbox samples
10-12 08:21	91.227.16[.]22	Malware		1 feed 16 sandbox samples
10-12 08:21	31.44.184[.]55	Malware		1 feed 8 sandbox samples
10-12 08:21	31.41.244[.]126	Malware		1 feed 14 sandbox samples	—
10-12 08:21	193.233.177[.]215	Malware		1 feed 5 sandbox samples
10-12 08:21	193.106.191[.]81	Malware		1 feed 17 sandbox samples	—
10-12 08:20	176.192.201[.]80	Attacker	—	1 feed
10-12 08:20	185.87.194[.]145	Attacker	—	1 feed
10-12 07:53	195.2.74[.]10	Malware		1 feed 110 sandbox samples
10-12 07:53	5.42.92[.]93	Malware		1 feed 96 sandbox samples
10-12 07:53	5.42.92[.]190	Malware		1 feed 147 sandbox samples
10-12 07:53	5.42.92[.]51	Malware	—	1 feed 101 sandbox samples
10-12 07:50	178.204.124[.]193	Attacker	—	1 feed
10-12 07:26	94.26.228[.]204	Malware		1 feed 171 sandbox samples
10-12 07:26	92.63.192[.]30	Malware		1 feed 267 sandbox samples
10-12 07:26	185.7.214[.]212	Malware		1 feed 431 sandbox samples	—
10-12 07:26	185.7.214[.]210	Malware		1 feed 447 sandbox samples	—
10-12 07:26	80.66.75[.]11	Malware		1 feed 107 sandbox samples	—
10-12 07:26	185.7.214[.]51	Malware		1 feed 283 sandbox samples	—
10-12 07:26	185.114.245[.]170	Malware		1 feed 25 sandbox samples
10-12 07:26	45.15.157[.]136	Malware		1 feed 30 sandbox samples
10-12 07:15	176.112.105[.]212	Attacker	—	1 feed
10-12 06:58	92.255.57[.]115	Malware		1 feed 315 sandbox samples	—
10-12 06:58	109.107.188[.]167	Malware		1 feed 324 sandbox samples
10-12 06:58	141.8.192[.]93	Malware		1 feed 96 sandbox samples
10-12 06:58	5.101.152[.]161	Malware		1 feed 103 sandbox samples
10-12 06:58	92.124.152[.]236	Malware		1 feed 53 sandbox samples
10-12 06:58	94.142.143[.]143	Malware		1 feed 345 sandbox samples
10-12 06:58	141.8.192[.]58	Malware		1 feed 52 sandbox samples
10-12 06:58	5.182.39[.]146	Malware		1 feed 38 sandbox samples	—
10-12 06:10	91.196.251[.]152	Attacker	—	1 feed
10-12 05:55	82.208.124[.]43	Attacker	—	1 feed
10-12 05:48	92.53.96[.]150	Malware		1 feed 293 sandbox samples
10-12 05:35	178.34.120[.]174	Attacker	—	1 feed
10-12 05:31	62.109.4[.]67	Malware		1 feed 92 sandbox samples
10-12 05:31	94.142.138[.]11	Malware		1 feed 39 sandbox samples
10-12 05:31	141.8.192[.]26	Malware		1 feed 50 sandbox samples
10-12 05:31	194.55.244[.]186	Malware	—	1 feed 5 sandbox samples
10-12 05:00	5.23.51[.]236	Malware		1 feed 14 sandbox samples
10-12 05:00	37.140.192[.]43	Malware		1 feed 31 sandbox samples
10-12 05:00	89.223.70[.]202	Malware		1 feed 9 sandbox samples
10-12 05:00	178.45.223[.]209	Attacker	—	1 feed
10-12 04:45	185.186.142[.]166	Malware		1 feed 451 sandbox samples
10-12 04:45	95.213.165[.]229	Malware	—	1 feed 23 sandbox samples
10-12 04:35	153.76.163[.]75	Attacker	—	3 feeds
10-12 04:35	185.126.180[.]152	Attacker	—	2 feeds
10-12 04:35	89.109.51[.]151	Attacker	—	2 feeds
10-12 04:35	5.3.220[.]212	Attacker	—	2 feeds
10-12 04:35	89.109.49[.]249	Attacker	—	3 feeds
10-12 04:35	146.19.124[.]2	Attacker	—	2 feeds
10-12 04:35	45.87.144[.]195	Attacker	—	2 feeds
10-12 04:35	84.54.59[.]43	Attacker	—	2 feeds
10-12 04:35	130.49.186[.]92	Attacker	—	2 feeds
10-12 04:35	195.9.34[.]73	Attacker	—	2 feeds
10-12 04:35	95.156.86[.]234	Attacker	—	2 feeds
10-12 04:35	85.12.204[.]206	Attacker	—	2 feeds
10-12 04:35	85.175.72[.]188	Attacker	—	2 feeds
10-12 04:35	82.208.125[.]157	Attacker	—	3 feeds
10-12 04:35	95.220.218[.]204	Attacker	—	2 feeds
10-12 04:35	176.226.202[.]136	Attacker	—	2 feeds
10-12 04:35	109.184.41[.]217	Attacker	—	2 feeds
10-12 04:35	95.191.198[.]107	Attacker	—	2 feeds
10-12 04:35	95.37.213[.]67	Attacker	—	2 feeds
10-12 04:35	89.108.74[.]178	Attacker	—	2 feeds
10-12 04:35	31.173.80[.]6	Attacker	—	2 feeds
10-12 04:35	46.52.232[.]89	Attacker	—	2 feeds
10-12 04:35	2a09[:]bac5[:]5159[:]2db9[:][:]48e[:]80	Attacker	—	2 feeds
10-12 04:35	146.70.231[.]26	Attacker	—	2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.

Security check