Malicious IP Address Feed

Newly reported malicious IP addresses; 89,329 tracked.

15 indicators match · newest first · updated 2026-10-12 10:30 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 10:1546.227.71[.]35Attacker—1 feed
10-12 10:1593.158.90[.]147Attacker—1 feed
10-12 10:15217.211.167[.]247Attacker—1 feed
10-12 10:10192.176.173[.]186Attacker—2 feeds
10-12 09:53185.65.135[.]234Malware1 feed 416 sandbox samples
10-12 08:1093.158.90[.]144Attacker—1 feed
10-12 07:50185.76.9[.]35Attacker—1 feed
10-12 04:3545.91.171[.]113Attacker—2 feeds
10-12 04:35193.27.200[.]200Attacker—2 feeds
10-12 04:35213.67.210[.]12Attacker—2 feeds
10-12 04:3545.130.200[.]133Attacker—2 feeds
10-12 04:3546.162.102[.]80Attacker—2 feeds
10-12 04:3581.227.62[.]126Attacker—2 feeds
10-12 04:35170.62.100[.]186Attacker—2 feeds
10-12 04:3595.209.141[.]149Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.