Malicious IP Address Feed
Newly reported malicious IP addresses; 89,329 tracked.
11 indicators match · newest first · updated 2026-10-12 10:35 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 07:55 | 43.153.121[.]250 | Attacker | — | 3 feeds | |||
| 10-12 06:15 | 43.131.2[.]16 | Tor exit | — | 1 feed | |||
| 10-12 04:50 | 101.32.126[.]122 | Attacker | — | 1 feed | |||
| 10-12 04:35 | 43.167.198[.]92 | Attacker | — | 4 feeds | |||
| 10-12 04:35 | 150.109.180[.]208 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.161.234[.]54 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.159.143[.]121 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.160.254[.]181 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.132.147[.]209 | Attacker | — | 2 feeds | |||
| 10-12 04:35 | 43.173.76[.]83 | Attacker | — | 3 feeds | |||
| 10-12 04:35 | 43.161.214[.]13 | Attacker | — | 2 feeds |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.