Malicious IP Address Feed

Newly reported malicious IP addresses; 90,755 tracked.

33 indicators match · newest first · updated 2026-10-12 09:36 UTC

First seenIndicatorCategoryFamilyReported byWhereNetworkCopy
10-12 08:46104.155.207[.]188Malware1 feed 701 sandbox samples
10-12 08:2035.194.250[.]178Attacker—1 feed
10-12 08:1059.125.136[.]32Attacker—2 feeds
10-12 07:50111.70.12[.]110Attacker—1 feed
10-12 07:5035.221.212[.]164Attacker—1 feed
10-12 07:15123.192.124[.]25Attacker—1 feed
10-12 06:1036.231.108[.]68Attacker—1 feed
10-12 06:1061.221.103[.]73Attacker—1 feed
10-12 05:3549.158.200[.]4Attacker—1 feed
10-12 04:35110.25.90[.]235Attacker—2 feeds
10-12 04:3535.229.146[.]136Attacker—2 feeds
10-12 04:35203.66.168[.]131Attacker—2 feeds
10-12 04:3535.206.213[.]142Attacker—2 feeds
10-12 04:3535.206.251[.]231Attacker—2 feeds
10-12 04:35122.116.125[.]115Attacker—2 feeds
10-12 04:35118.167.248[.]243Attacker—2 feeds
10-12 04:3534.81.126[.]135Attacker—2 feeds
10-12 04:3561.231.195[.]218Attacker—2 feeds
10-12 04:3535.201.135[.]19Attacker—2 feeds
10-12 04:3534.81.69[.]217Attacker—2 feeds
10-12 04:3534.81.53[.]57Attacker—2 feeds
10-12 04:3534.81.69[.]210Attacker—2 feeds
10-12 04:35114.34.22[.]52Attacker—2 feeds
10-12 04:3534.81.184[.]53Attacker—2 feeds
10-12 04:35114.35.148[.]18Attacker—2 feeds
10-12 04:3534.81.33[.]186Attacker—2 feeds
10-12 04:35104.199.242[.]198Attacker—2 feeds
10-12 04:3534.80.50[.]12Attacker—2 feeds
10-12 04:3535.201.255[.]243Attacker—2 feeds
10-12 04:3534.81.250[.]7Attacker—2 feeds
10-12 04:35111.70.25[.]161Attacker—2 feeds
10-12 04:3535.201.210[.]101Attacker—2 feeds
10-12 04:3535.234.26[.]191Attacker—2 feeds

Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.