Threat Intelligence

Check live indicators in seconds

Look up an IP, domain, URL or file hash against our consolidated IoC database. Fed by abuse.ch (URLhaus, MalwareBazaar, Feodo Tracker), AlienVault OTX, CISA and curated industry feeds.

Threat-intel catalog

indicators total

837,252

across all sources, deduplicated

new in 24 h

64,750

freshness as a situational signal

active feeds

11

abuse.ch, OTX, internal

Top sources

  • blocklist_de280,721
  • cins_army254,758
  • abusech_threatfox181,469
  • ipsum101,822
  • abusech_urlhaus68,995
  • abusech_malware_bazaar44,826

Quick lookup

One IP, domain, URL or file hash — we return score and last-seen. Full provenance is available to signed-in users.

Most recently observed indicators

redacted preview

  • 116.110.x.xScore 70
    iplevel:3emergingthreatsipsum2026-10-09 13:21 UTC
  • 34.156.x.xScore 70
    iplevel:3blocklist_deemergingthreats2026-10-09 13:21 UTC
  • 93.152.x.xScore 75
    iprogue-packetblocklist_decins_army2026-10-09 13:21 UTC
  • 130.12.x.xScore 70
    iplevel:4blocklist_deemergingthreats2026-10-09 13:21 UTC
  • 206.189.x.xScore 70
    iplevel:3blocklist_deemergingthreats2026-10-09 13:21 UTC
  • 34.156.x.xScore 70
    iplevel:3blocklist_deemergingthreats2026-10-09 13:21 UTC
  • 93.152.x.xScore 75
    iprogue-packetblocklist_decins_army2026-10-09 13:21 UTC
  • 14.225.x.xScore 75
    ipaggregatorblocklist_deemergingthreats2026-10-09 13:21 UTC

Note: IP and domain values are redacted in the public view for DSGVO reasons (1.2.x.x, *.example.com). Full values are available to customers via the API.